Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/323830333a363436303a3a2f33322d3332203d3e20323637383334.roa
File:                     323830333a363436303a3a2f33322d3332203d3e20323637383334.roa (raw, json)
Hash identifier:          N2hHmOZ4P7C71QiOXT86EGIM9bkGSe2Vc3tSM7e5V/8=
Subject key identifier:   B8:1D:00:5B:04:DE:88:EE:98:55:9F:4A:7A:6D:8C:1F:D5:B3:FD:60
Certificate issuer:       /CN=D2F7F610DA168FB1B0A47B65FB92BD5365773B03
Certificate serial:       09C280B3C4CC451B443FAB517C896F4A354DFDCB
Authority key identifier: D2:F7:F6:10:DA:16:8F:B1:B0:A4:7B:65:FB:92:BD:53:65:77:3B:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/323830333a363436303a3a2f33322d3332203d3e20323637383334.roa
Signing time:             Tue 05 Mar 2024 17:41:06 +0000
ROA not before:           Tue 05 Mar 2024 17:36:06 +0000
ROA not after:            Tue 04 Mar 2025 17:41:06 +0000
asID:                     267834
IP address blocks:        2803:6460::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 26 Apr 2024 14:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c2:80:b3:c4:cc:45:1b:44:3f:ab:51:7c:89:6f:4a:35:4d:fd:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F7F610DA168FB1B0A47B65FB92BD5365773B03
        Validity
            Not Before: Mar  5 17:36:06 2024 GMT
            Not After : Mar  4 17:41:06 2025 GMT
        Subject: CN=B81D005B04DE88EE98559F4A7A6D8C1FD5B3FD60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:98:f0:ed:3b:8a:62:6b:a6:3c:7a:7b:50:06:
                    a2:45:f1:d3:66:e2:99:bb:f5:e2:88:8f:9e:6e:23:
                    ee:08:0e:8c:31:a9:72:96:33:5e:5c:74:f6:c6:f2:
                    8e:8e:be:c1:cf:f7:30:c9:82:34:69:83:2b:60:f9:
                    e2:df:19:fc:a7:c0:01:4a:c8:51:ce:fd:5b:b8:0c:
                    e4:2b:94:8e:c5:c8:8c:df:a0:75:65:26:25:3f:44:
                    17:49:ae:87:50:6b:eb:b2:16:23:bd:56:74:81:b2:
                    12:9b:35:0c:8c:62:27:6e:e9:24:bb:e8:88:53:9b:
                    71:3a:fe:0d:6c:0b:95:3f:f1:1b:ec:37:f6:49:25:
                    a9:50:7c:60:cc:b1:e9:7e:2d:fa:66:cc:91:6a:50:
                    63:43:13:55:3d:5e:43:e4:6a:c5:6c:14:4a:01:6d:
                    5b:e9:9b:80:bf:7d:ec:fb:51:cc:68:c2:2c:5c:79:
                    4f:e4:93:98:97:c2:46:b9:46:ff:18:1f:d7:24:d4:
                    8d:8a:3c:05:88:43:7b:e6:a8:46:65:e7:01:40:91:
                    9a:e7:3f:5e:3d:0b:83:0c:e9:d6:1f:dc:68:85:7e:
                    0c:12:56:83:86:99:47:38:92:0a:74:52:97:42:8f:
                    99:e9:16:5c:d9:f6:b2:70:a5:76:5a:52:96:7b:c3:
                    fe:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1D:00:5B:04:DE:88:EE:98:55:9F:4A:7A:6D:8C:1F:D5:B3:FD:60
            X509v3 Authority Key Identifier:
                keyid:D2:F7:F6:10:DA:16:8F:B1:B0:A4:7B:65:FB:92:BD:53:65:77:3B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/323830333a363436303a3a2f33322d3332203d3e20323637383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6460::/32

    Signature Algorithm: sha256WithRSAEncryption
         dc:18:65:09:f2:e6:98:3d:ac:ee:5a:06:2a:e7:21:b2:63:7d:
         a2:ee:79:10:0f:23:7b:0c:8d:8a:99:58:5c:8b:4f:1b:4d:23:
         da:0a:09:4f:72:dd:98:40:ee:76:c9:8c:a9:64:b3:e0:fd:81:
         4b:6f:32:bf:5e:04:cc:fc:c2:19:86:57:52:ca:9e:57:30:cb:
         6e:3d:b0:5c:36:ed:58:74:fa:1b:6a:ae:da:44:99:f1:33:25:
         bd:23:0b:f7:97:f0:ff:59:db:51:c6:9d:dc:fa:a9:9c:9d:5f:
         46:61:03:d7:98:5a:79:14:2c:7f:da:1b:cc:5a:44:e4:23:7e:
         30:53:fd:8e:e5:36:aa:37:01:15:2e:6b:26:42:b1:27:76:09:
         63:ed:3f:e2:b5:07:d5:2c:14:ea:3a:a7:73:e6:07:ef:ae:23:
         08:1c:82:8b:78:d4:92:f1:d1:4f:16:c5:56:31:9e:73:5a:7f:
         3d:4d:f2:1d:c4:98:22:e3:d1:9c:4c:ca:70:83:14:88:c5:ec:
         24:89:36:79:5c:71:0d:ef:d2:2a:d6:b6:ba:59:88:9c:54:8b:
         cd:be:f7:c8:47:fe:54:84:d9:b9:4b:4a:fb:f2:f7:76:8e:56:
         a6:0c:e9:d7:66:25:98:11:52:06:4b:66:60:a5:97:cf:06:4a:
         42:e9:eb:9d
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUCcKAs8TMRRtEP6tRfIlvSjVN/cswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJGN0Y2MTBEQTE2OEZCMUIwQTQ3QjY1RkI5MkJENTM2
NTc3M0IwMzAeFw0yNDAzMDUxNzM2MDZaFw0yNTAzMDQxNzQxMDZaMDMxMTAvBgNV
BAMTKEI4MUQwMDVCMDRERTg4RUU5ODU1OUY0QTdBNkQ4QzFGRDVCM0ZENjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcmPDtO4pia6Y8entQBqJF8dNm
4pm79eKIj55uI+4IDowxqXKWM15cdPbG8o6OvsHP9zDJgjRpgytg+eLfGfynwAFK
yFHO/Vu4DOQrlI7FyIzfoHVlJiU/RBdJrodQa+uyFiO9VnSBshKbNQyMYidu6SS7
6IhTm3E6/g1sC5U/8RvsN/ZJJalQfGDMsel+LfpmzJFqUGNDE1U9XkPkasVsFEoB
bVvpm4C/fez7UcxowixceU/kk5iXwka5Rv8YH9ck1I2KPAWIQ3vmqEZl5wFAkZrn
P149C4MM6dYf3GiFfgwSVoOGmUc4kgp0UpdCj5npFlzZ9rJwpXZaUpZ7w/6zAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUuB0AWwTeiO6YVZ9Kem2MH9Wz/WAwHwYDVR0j
BBgwFoAU0vf2ENoWj7GwpHtl+5K9U2V3OwMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83N0VBOTk5RjJGRkRFNjU5OEZFQkFCNDhBREJCMUIxQkQ1
QjkwQUU0NDY0NEQzMDM5RjAyNDFDQTFCQTY1OERDLzAvRDJGN0Y2MTBEQTE2OEZC
MUIwQTQ3QjY1RkI5MkJENTM2NTc3M0IwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkY3RjYxMERBMTY4RkIxQjBB
NDdCNjVGQjkyQkQ1MzY1NzczQjAzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzdFQTk5OUYyRkZERTY1OThGRUJBQjQ4QURCQjFCMUJENUI5MEFFNDQ2
NDREMzAzOUYwMjQxQ0ExQkE2NThEQy8wLzMyMzgzMDMzM2EzNjM0MzYzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzM4MzMzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDZGAw
DQYJKoZIhvcNAQELBQADggEBANwYZQny5pg9rO5aBirnIbJjfaLueRAPI3sMjYqZ
WFyLTxtNI9oKCU9y3ZhA7nbJjKlks+D9gUtvMr9eBMz8whmGV1LKnlcwy249sFw2
7Vh0+htqrtpEmfEzJb0jC/eX8P9Z21HGndz6qZydX0ZhA9eYWnkULH/aG8xaROQj
fjBT/Y7lNqo3ARUuayZCsSd2CWPtP+K1B9UsFOo6p3PmB++uIwgcgot41JLx0U8W
xVYxnnNafz1N8h3EmCLj0ZxMynCDFIjF7CSJNnlccQ3v0irWtrpZiJxUi82+98hH
/lSE2blLSvvy93aOVqYM6ddmJZgRUgZLZmCll88GSkLp650=
-----END CERTIFICATE-----