Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/27698fcc12bbcb97c3b97a0f0efaf8940a38b353.roa
File:                     27698fcc12bbcb97c3b97a0f0efaf8940a38b353.roa (raw, json)
Hash identifier:          rqu1d45325nLBG2qUwgp5byWdgeBy2yTXnXdkjcL3cE=
Subject key identifier:   92:C6:2D:DA:F5:ED:B4:1D:66:CC:A3:3C:C0:DE:0E:AE:7C:80:DE:2B
Certificate issuer:       /CN=70a411ce30f61f9ca94248ff3f614c66f75c5307
Certificate serial:       08F907
Authority key identifier: 5D:99:9B:85:73:92:13:A1:C8:89:8E:3E:B0:28:74:32:5D:2B:74:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70a411ce30f61f9ca94248ff3f614c66f75c5307.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/27698fcc12bbcb97c3b97a0f0efaf8940a38b353.roa
Signing time:             Thu 11 Jan 2024 17:33:47 +0000
ROA not before:           Thu 11 Jan 2024 17:33:46 +0000
ROA not after:            Sun 11 Jan 2026 17:33:46 +0000
asID:                     272854
IP address blocks:        2803:c290:300::/40 maxlen: 40
                          2803:c290:400::/40 maxlen: 40

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 19:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588039 (0x8f907)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a411ce30f61f9ca94248ff3f614c66f75c5307
        Validity
            Not Before: Jan 11 17:33:46 2024 GMT
            Not After : Jan 11 17:33:46 2026 GMT
        Subject: CN=27698fcc12bbcb97c3b97a0f0efaf8940a38b353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8e:bf:2b:dd:c1:78:8f:2b:68:8b:1f:6c:5b:
                    77:41:a1:53:30:05:94:d7:f2:fe:a1:9f:0d:45:00:
                    ec:e1:92:f5:37:df:0b:45:46:7c:6d:8d:36:5f:b1:
                    e3:89:a9:ff:68:a7:fe:60:ba:d9:30:7a:90:ff:d6:
                    b1:4d:3c:2b:a0:d4:4e:e7:4d:aa:df:6a:82:66:e9:
                    5a:1f:b2:c0:9a:0e:b1:ab:96:8b:93:2e:80:f4:9d:
                    1a:03:ea:59:16:2a:4b:81:67:90:9d:18:05:61:79:
                    23:61:04:18:11:90:c7:9a:3a:e3:be:46:e5:51:49:
                    b8:2b:30:a2:35:05:ed:87:4d:2f:61:d1:1b:f3:cd:
                    be:4e:0b:55:72:ff:81:88:bf:39:12:19:5c:a5:30:
                    a0:4d:1a:37:95:32:b8:53:62:35:cc:09:71:39:e9:
                    2a:d4:0c:e0:b2:72:eb:54:cf:51:66:3f:da:09:90:
                    9a:8f:24:b0:1c:79:5e:9b:a3:5c:8b:78:9f:70:43:
                    ca:51:63:b3:48:30:0a:58:50:3d:bd:e2:31:a6:1b:
                    41:ea:70:a5:f1:8a:26:96:1e:f5:3f:12:99:36:c3:
                    e2:ff:9e:02:24:d4:ae:56:6c:49:c1:0e:2d:6f:f8:
                    63:51:10:5e:fc:37:4f:82:dd:6c:e7:12:12:25:ed:
                    0a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C6:2D:DA:F5:ED:B4:1D:66:CC:A3:3C:C0:DE:0E:AE:7C:80:DE:2B
            X509v3 Authority Key Identifier:
                keyid:5D:99:9B:85:73:92:13:A1:C8:89:8E:3E:B0:28:74:32:5D:2B:74:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70a411ce30f61f9ca94248ff3f614c66f75c5307.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/27698fcc12bbcb97c3b97a0f0efaf8940a38b353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/70a411ce30f61f9ca94248ff3f614c66f75c5307.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c290:300::-2803:c290:4ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         48:f4:77:b2:4e:40:35:d9:32:e9:55:06:2f:76:8e:7c:af:a1:
         71:87:31:bd:00:35:1a:3f:1b:32:15:7a:bd:b7:9c:1b:13:47:
         51:e6:da:65:a7:0b:e1:3d:ed:25:8c:29:68:ab:b8:7e:44:9a:
         4d:f3:8e:13:ca:f5:74:75:22:a3:21:fd:b3:18:0f:13:99:25:
         11:b9:a3:d7:f0:54:7d:78:ec:56:d2:f9:5f:6e:3a:e9:9d:44:
         9b:f8:fe:97:e1:60:2d:fc:95:3e:36:2c:b8:1a:51:d9:c3:68:
         6b:73:0a:01:da:62:d6:ae:2b:ba:e0:41:dc:7d:b3:d5:a7:27:
         6c:a1:b0:99:37:85:94:3b:aa:df:54:cf:9c:9f:e6:b6:4a:46:
         fe:21:00:eb:aa:ed:41:39:91:56:3e:b5:f0:3e:d7:48:a4:e6:
         43:f2:68:f1:8d:78:91:28:b3:66:66:2c:1d:fd:28:13:38:45:
         5a:e8:ac:02:a0:b3:64:74:2c:08:50:be:6f:28:16:a9:b0:5a:
         7c:3d:31:97:d2:1b:f9:db:74:cc:86:6b:b6:26:7f:29:3c:7d:
         fc:ab:3b:9e:f4:3f:fd:d4:23:60:15:c4:e8:5c:19:47:3b:35:
         61:33:1e:3f:a3:52:92:17:1a:2f:df:1b:e3:9b:41:62:ce:73:
         fe:08:d5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----