Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/cccb68589ed3f74f9dbd96e0d6ac7a2626e158e2.roa
File:                     cccb68589ed3f74f9dbd96e0d6ac7a2626e158e2.roa (raw, json)
Hash identifier:          /KdyEQcctzcyb8Y0ijA6+1UrGj78Ip7x/g55mZLI+hE=
Subject key identifier:   52:4A:F2:0A:D1:FF:FB:1F:57:5D:7B:CF:9C:4D:E3:9C:9F:D2:52:84
Certificate issuer:       /CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
Certificate serial:       12C8B0
Authority key identifier: DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/cccb68589ed3f74f9dbd96e0d6ac7a2626e158e2.roa
Signing time:             Tue 19 Sep 2023 08:30:04 +0000
ROA not before:           Mon 18 Sep 2023 08:30:04 +0000
ROA not after:            Wed 17 Sep 2025 08:30:04 +0000
asID:                     271956
IP address blocks:        2803:7610:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 08 Mar 2024 18:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1231024 (0x12c8b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
        Validity
            Not Before: Sep 18 08:30:04 2023 GMT
            Not After : Sep 17 08:30:04 2025 GMT
        Subject: CN=cccb68589ed3f74f9dbd96e0d6ac7a2626e158e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:be:37:50:91:75:36:a7:94:90:91:ac:f1:
                    64:00:0c:9f:e6:3c:19:90:e7:c7:7f:b2:5e:04:f1:
                    93:41:e3:56:65:bd:1d:57:10:0e:bb:c4:bc:e6:fe:
                    60:9b:7f:9d:24:82:35:0d:1f:7d:0f:98:7a:86:58:
                    88:af:37:80:1e:47:79:02:4d:ad:b8:2b:72:7c:bf:
                    bf:72:fa:2e:4b:a7:9b:9f:52:7b:50:da:19:5a:6c:
                    16:9c:c4:29:16:f4:86:c3:4a:5e:72:91:2d:70:e8:
                    d3:ee:cc:b2:76:51:37:7b:a4:4f:17:22:78:82:52:
                    ed:a1:97:ac:a6:21:6d:fa:43:82:36:31:34:c8:4b:
                    cb:e4:82:d7:c4:1e:25:cd:89:66:9e:13:5b:c3:dc:
                    1b:30:a5:2a:9e:64:24:c8:30:d9:96:eb:38:63:e8:
                    28:ce:b0:46:4d:18:9a:ec:95:bf:17:ad:ee:8d:2f:
                    e3:aa:0e:f4:99:0f:08:0f:53:16:6b:6b:7e:f0:b3:
                    b2:c9:5f:7b:86:6b:3f:a1:f4:37:fc:5c:86:17:33:
                    53:e5:65:0b:b2:42:21:81:22:ad:7a:a9:60:9a:17:
                    a5:9e:26:bd:e8:23:b7:40:0c:e7:3f:f2:b8:38:51:
                    34:12:87:0b:89:4a:b3:ef:22:76:e7:f6:f0:b0:46:
                    b9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4A:F2:0A:D1:FF:FB:1F:57:5D:7B:CF:9C:4D:E3:9C:9F:D2:52:84
            X509v3 Authority Key Identifier:
                keyid:DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/cccb68589ed3f74f9dbd96e0d6ac7a2626e158e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7610:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:9d:d3:dc:8f:eb:74:31:85:6c:27:6f:b6:f2:ea:c9:78:f7:
         9f:35:d3:a6:1c:97:f7:dc:04:34:11:f1:21:60:c9:41:31:68:
         f2:e2:82:37:d1:19:52:57:19:4d:6e:81:a7:64:e2:14:75:72:
         75:11:1a:06:88:37:57:89:c3:cf:91:a7:d2:5c:70:10:24:2f:
         54:bf:7b:80:b8:67:d1:16:5b:eb:77:4e:b9:cf:ec:8b:76:c8:
         5c:3f:90:5c:94:bd:7b:65:3f:5a:fa:c2:29:a3:83:8b:f9:01:
         c0:03:34:92:25:cb:b5:f1:bd:42:ec:ae:5b:a2:e6:33:21:f1:
         07:47:bd:e8:66:9e:65:a2:ee:ac:a6:b6:e5:f2:48:3a:4b:1d:
         f2:10:0e:4c:08:ac:b2:ee:cc:8b:f9:23:df:8f:8e:dc:ea:8d:
         f4:d5:a2:16:ce:b1:90:b9:87:b9:53:dc:81:23:2b:3f:b4:ed:
         22:23:72:97:84:ed:9c:3d:bb:2a:44:9c:ca:8d:d7:7e:a3:70:
         b0:e5:cd:7d:dd:b8:cb:f9:df:24:1f:98:11:71:56:2d:d5:36:
         ad:56:89:23:ba:7d:80:10:74:2a:b3:b5:87:d3:41:27:42:f5:
         d7:2d:ba:48:c7:8c:8a:c1:34:16:c6:2f:4c:c5:e8:fe:a7:60:
         4e:5a:ec:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----