Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D1A8237FF76898B26EE7FC82C6EC53DA51FBF34D33ADBE7C1FC51077736E34D/0/323830363a3432333a303a313a3a2f36342d3634203d3e20323732333932.roa
File:                     323830363a3432333a303a313a3a2f36342d3634203d3e20323732333932.roa (raw, json)
Hash identifier:          Mz3nu9xVmZcWc/zuzrv+4VHriVNorUjWTAZOzkejwCU=
Subject key identifier:   D7:7C:90:9C:FA:91:23:2A:96:8B:FE:31:43:75:07:6D:F3:0C:DC:79
Certificate issuer:       /CN=A2E4158981CDF250DCA3053985B97F1CEBAF18AA
Certificate serial:       19193899F1FF46405AE0CCDB2C427FA09512D9E2
Authority key identifier: A2:E4:15:89:81:CD:F2:50:DC:A3:05:39:85:B9:7F:1C:EB:AF:18:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2E4158981CDF250DCA3053985B97F1CEBAF18AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D1A8237FF76898B26EE7FC82C6EC53DA51FBF34D33ADBE7C1FC51077736E34D/0/323830363a3432333a303a313a3a2f36342d3634203d3e20323732333932.roa
Signing time:             Wed 10 Jul 2024 13:55:00 +0000
ROA not before:           Wed 10 Jul 2024 13:50:00 +0000
ROA not after:            Wed 09 Jul 2025 13:55:00 +0000
asID:                     272392
IP address blocks:        2806:423:0:1::/64 maxlen: 64

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 15:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:19:38:99:f1:ff:46:40:5a:e0:cc:db:2c:42:7f:a0:95:12:d9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E4158981CDF250DCA3053985B97F1CEBAF18AA
        Validity
            Not Before: Jul 10 13:50:00 2024 GMT
            Not After : Jul  9 13:55:00 2025 GMT
        Subject: CN=D77C909CFA91232A968BFE314375076DF30CDC79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:55:55:eb:19:53:7e:60:0a:15:81:99:82:
                    5a:5d:bc:3d:09:53:67:44:e5:37:7e:8a:44:69:52:
                    73:c5:01:f4:40:b5:66:5e:35:04:62:c0:63:cb:65:
                    37:d2:04:93:7b:17:f9:14:ac:0f:b8:81:06:3c:d4:
                    f2:82:93:96:5a:26:c3:cf:07:f2:cd:87:b3:68:4f:
                    94:04:07:69:bf:65:d0:e5:67:c9:df:02:a2:56:3a:
                    76:db:d0:2a:5c:ce:50:b1:45:25:de:86:5a:5b:11:
                    b3:f7:24:a5:3d:21:c4:8d:7a:29:5d:95:60:b1:08:
                    fc:35:48:f0:1e:d1:c6:01:d1:ae:8f:ab:29:ea:04:
                    97:64:b4:02:35:c7:5e:bd:11:e5:54:1f:79:e6:10:
                    cd:7f:1d:f8:79:b6:f0:58:94:41:75:a8:74:73:ec:
                    02:ba:37:6c:32:95:69:18:42:6e:c8:aa:8b:ff:8d:
                    21:43:ba:d0:49:f0:c0:59:49:df:bf:fe:6c:89:0a:
                    ad:6e:16:29:fd:6d:17:5a:a5:53:fb:7b:57:73:e7:
                    cd:24:9f:1c:24:7f:80:ef:ed:fd:3c:8d:ed:80:6e:
                    c4:04:60:37:6f:f5:d2:ab:fe:f5:ec:14:0b:11:3d:
                    1e:f5:05:94:67:cf:dc:19:06:b7:cf:8d:aa:70:88:
                    0b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7C:90:9C:FA:91:23:2A:96:8B:FE:31:43:75:07:6D:F3:0C:DC:79
            X509v3 Authority Key Identifier:
                keyid:A2:E4:15:89:81:CD:F2:50:DC:A3:05:39:85:B9:7F:1C:EB:AF:18:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D1A8237FF76898B26EE7FC82C6EC53DA51FBF34D33ADBE7C1FC51077736E34D/0/A2E4158981CDF250DCA3053985B97F1CEBAF18AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2E4158981CDF250DCA3053985B97F1CEBAF18AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D1A8237FF76898B26EE7FC82C6EC53DA51FBF34D33ADBE7C1FC51077736E34D/0/323830363a3432333a303a313a3a2f36342d3634203d3e20323732333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:423:0:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         31:44:8c:bd:47:22:9f:9e:c6:24:70:f4:58:55:55:f9:f5:9b:
         b7:69:e3:e8:f9:c3:44:22:c1:c9:50:0a:68:03:54:b4:69:d6:
         65:c3:5b:1d:d4:48:c0:5f:92:8f:13:9f:f6:7c:bf:67:23:cf:
         cb:5a:d2:42:6c:dd:22:38:a9:18:ab:46:af:c7:c9:b6:da:6b:
         50:92:07:64:8f:8f:72:5d:8d:12:df:72:36:6c:eb:7b:19:29:
         3b:6f:d0:c8:61:91:55:a6:9c:0e:fa:43:5e:b7:c1:2c:98:56:
         24:74:77:b8:e6:a3:bf:d3:29:e4:e3:53:02:2a:71:3c:8f:b6:
         f3:19:1e:1e:c0:28:83:84:f6:6c:72:88:a7:98:2f:cf:84:a1:
         cf:3d:9b:82:c1:ac:ab:9c:84:41:a7:f8:23:48:6e:01:29:3f:
         16:e2:39:7c:f8:2d:c9:49:2a:87:59:44:94:f4:55:6a:eb:7d:
         ce:78:a7:5a:57:94:ca:ae:38:5b:45:8e:57:ca:e1:8e:27:81:
         f4:0e:a9:d5:9f:1e:37:e1:9b:34:a0:7f:4d:77:05:64:90:76:
         43:84:83:7e:10:7c:a0:40:c3:e8:7b:37:6b:1d:5f:77:c8:78:
         19:7e:51:65:23:3f:13:92:e0:5b:0c:a4:13:65:c8:3e:29:47:
         ec:30:7b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----