Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          Mdrf+gIwNsBdPEsWyWZeY1No/+OZGgpNQ1Pv8i2FL6U=
Subject key identifier:   16:6A:97:F9:DD:BC:D5:DF:73:EE:2C:CC:22:36:79:4F:87:FD:1F:21
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       4C48B9DF5AAC21094BB6CC3EF595D1269C7FDDEE
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 30 Apr 2024 04:55:01 +0000
ROA not before:           Tue 30 Apr 2024 04:50:01 +0000
ROA not after:            Tue 29 Apr 2025 04:55:01 +0000
asID:                     273192
IP address blocks:        2803:650::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sat 11 May 2024 21:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:48:b9:df:5a:ac:21:09:4b:b6:cc:3e:f5:95:d1:26:9c:7f:dd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Apr 30 04:50:01 2024 GMT
            Not After : Apr 29 04:55:01 2025 GMT
        Subject: CN=166A97F9DDBCD5DF73EE2CCC2236794F87FD1F21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7f:8f:7c:87:f1:3d:c0:2f:30:01:9a:30:20:
                    77:44:56:5e:e8:6f:31:7a:b1:43:c9:ec:f0:24:86:
                    3b:a2:cb:78:0f:08:4e:8f:e2:82:49:0a:42:e1:3f:
                    3c:ac:65:c9:d2:35:45:a2:62:f7:90:d9:f3:8e:01:
                    8c:a9:5e:1c:a2:15:ba:c7:a7:2c:09:9c:29:c5:db:
                    92:02:78:02:4c:15:de:21:6d:84:f9:0f:da:06:e6:
                    f5:c2:8f:11:b0:29:ae:f5:56:14:87:35:f6:56:39:
                    20:76:47:15:26:39:02:d1:00:85:96:d8:0e:c1:08:
                    c6:76:2c:65:77:f0:aa:da:9f:1b:05:74:91:b1:fe:
                    f6:5d:fd:8d:47:ec:a1:95:40:56:6e:f3:f5:50:c0:
                    16:e6:1f:d6:d1:f8:92:9a:b8:06:55:6b:df:b8:e8:
                    df:32:29:5d:a9:98:95:bb:4b:78:08:1c:e7:a1:87:
                    15:f1:94:4f:74:ce:3c:01:b7:01:00:84:f1:0a:d6:
                    2e:ec:12:3d:48:42:b7:60:f0:4f:bb:4d:46:2f:87:
                    01:e5:7f:14:24:09:a4:c1:47:6f:64:34:e7:de:6e:
                    34:77:f1:37:0b:05:29:4e:2c:89:cd:37:e8:2f:96:
                    1c:70:07:41:f9:e6:9f:a7:bd:61:69:33:c6:32:27:
                    ab:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6A:97:F9:DD:BC:D5:DF:73:EE:2C:CC:22:36:79:4F:87:FD:1F:21
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650::/40

    Signature Algorithm: sha256WithRSAEncryption
         f0:91:cb:c0:c8:90:73:e9:4a:12:b3:2f:09:93:e4:3d:c4:8d:
         72:f2:7e:4b:ab:7a:9a:30:22:2a:6a:91:4a:df:d8:4e:ad:6d:
         2e:6b:c5:52:1b:e0:6d:81:89:e9:d7:2a:48:a5:40:c4:ed:50:
         d8:51:fe:f4:2b:d6:f7:7b:30:d3:af:70:4b:aa:e2:97:6a:3e:
         6b:e1:6e:3a:05:6d:46:de:0d:62:1d:8d:c6:61:e1:17:a2:54:
         38:82:c1:d6:cc:a4:df:79:14:ff:3c:f8:21:a5:6a:48:26:35:
         89:e8:3b:62:8b:a5:b2:4c:0b:34:9f:f5:e9:2d:5d:5e:9e:33:
         23:2c:0e:06:58:66:9c:ed:2d:6b:d0:ff:5a:11:d1:ce:25:2b:
         4f:05:94:47:f3:ed:2e:c3:b1:08:9d:95:1c:a6:e8:85:97:9b:
         81:17:ea:46:84:fa:7d:47:ec:21:b8:5e:8e:0d:69:c5:07:8a:
         a0:77:17:e9:2d:15:ea:b7:74:64:f4:93:af:7a:dd:e0:c3:64:
         2e:54:93:d2:20:a8:0d:4b:c3:58:ed:df:9f:e3:19:eb:e3:bf:
         fe:e9:af:19:1b:9f:15:99:53:91:7c:18:93:cd:00:9e:d1:e2:
         c8:52:ad:12:35:b9:66:3a:2b:c6:b9:c7:df:dc:ca:46:a9:1c:
         5b:53:3e:4c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTEi531qsIQlLtsw+9ZXRJpx/3e4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZFNkM5NkZFQTRGQzVDMTdBNTEwNEYwNjg4NEM1MEM2
QUYwMTVBMDAeFw0yNDA0MzAwNDUwMDFaFw0yNTA0MjkwNDU1MDFaMDMxMTAvBgNV
BAMTKDE2NkE5N0Y5RERCQ0Q1REY3M0VFMkNDQzIyMzY3OTRGODdGRDFGMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGf498h/E9wC8wAZowIHdEVl7o
bzF6sUPJ7PAkhjuiy3gPCE6P4oJJCkLhPzysZcnSNUWiYveQ2fOOAYypXhyiFbrH
pywJnCnF25ICeAJMFd4hbYT5D9oG5vXCjxGwKa71VhSHNfZWOSB2RxUmOQLRAIWW
2A7BCMZ2LGV38KranxsFdJGx/vZd/Y1H7KGVQFZu8/VQwBbmH9bR+JKauAZVa9+4
6N8yKV2pmJW7S3gIHOehhxXxlE90zjwBtwEAhPEK1i7sEj1IQrdg8E+7TUYvhwHl
fxQkCaTBR29kNOfebjR38TcLBSlOLInNN+gvlhxwB0H55p+nvWFpM8YyJ6vVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUFmqX+d281d9z7izMIjZ5T4f9HyEwHwYDVR0j
BBgwFoAUlubJb+pPxcF6UQTwaITFDGrwFaAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RjQxNTJBNTk3ODQ2MjRDRjIyOEFGNDlFQTQzREQwQkEz
Q0Q4MTA4OTUzRTA3MURBMUJEMzMwN0VFMURCQjlDLzAvOTZFNkM5NkZFQTRGQzVD
MTdBNTEwNEYwNjg4NEM1MEM2QUYwMTVBMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkU2Qzk2RkVBNEZDNUMxN0E1
MTA0RjA2ODg0QzUwQzZBRjAxNUEwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0Y0MTUyQTU5Nzg0NjI0Q0YyMjhBRjQ5RUE0M0REMEJBM0NEODEwODk1
M0UwNzFEQTFCRDMzMDdFRTFEQkI5Qy8wLzMyMzgzMDMzM2EzNjM1MzAzYTNhMmYz
NDMwMmQzNDMwMjAzZDNlMjAzMjM3MzMzMTM5MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoAwZQADAN
BgkqhkiG9w0BAQsFAAOCAQEA8JHLwMiQc+lKErMvCZPkPcSNcvJ+S6t6mjAiKmqR
St/YTq1tLmvFUhvgbYGJ6dcqSKVAxO1Q2FH+9CvW93sw069wS6ril2o+a+FuOgVt
Rt4NYh2NxmHhF6JUOILB1syk33kU/zz4IaVqSCY1ieg7YoulskwLNJ/16S1dXp4z
IywOBlhmnO0ta9D/WhHRziUrTwWUR/PtLsOxCJ2VHKbohZebgRfqRoT6fUfsIbhe
jg1pxQeKoHcX6S0V6rd0ZPSTr3rd4MNkLlST0iCoDUvDWO3fn+MZ6+O//umvGRuf
FZlTkXwYk80AntHiyFKtEjW5ZjorxrnH39zKRqkcW1M+TA==
-----END CERTIFICATE-----