Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/323830333a633731303a3a2f33322d3335203d3e20323732303937.roa
File:                     323830333a633731303a3a2f33322d3335203d3e20323732303937.roa (raw, json)
Hash identifier:          V+7j6fPq7Euq50shapVBVLGOcQUnRkzp1JWl9wAgbIo=
Subject key identifier:   D0:2A:72:17:55:EC:4B:00:A4:A8:15:3F:B7:CC:E0:D3:F5:26:1A:9F
Certificate issuer:       /CN=D68970D6F2A2898E8ADE58866C1E8D1B48015A9F
Certificate serial:       10CF83697E6AA858751D258D909E183E08FE232E
Authority key identifier: D6:89:70:D6:F2:A2:89:8E:8A:DE:58:86:6C:1E:8D:1B:48:01:5A:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/323830333a633731303a3a2f33322d3335203d3e20323732303937.roa
Signing time:             Tue 05 Mar 2024 18:21:58 +0000
ROA not before:           Tue 05 Mar 2024 18:16:58 +0000
ROA not after:            Tue 04 Mar 2025 18:21:58 +0000
asID:                     272097
IP address blocks:        2803:c710::/32 maxlen: 35

Validation:               Failed, certificate revoked on Mon 27 May 2024 21:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:cf:83:69:7e:6a:a8:58:75:1d:25:8d:90:9e:18:3e:08:fe:23:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D68970D6F2A2898E8ADE58866C1E8D1B48015A9F
        Validity
            Not Before: Mar  5 18:16:58 2024 GMT
            Not After : Mar  4 18:21:58 2025 GMT
        Subject: CN=D02A721755EC4B00A4A8153FB7CCE0D3F5261A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:08:8a:94:93:38:82:fc:6f:ac:2c:28:f0:
                    b5:89:17:5b:73:08:25:25:b1:ba:4f:22:38:e4:83:
                    8f:c5:02:ee:fd:a3:ac:ed:ad:90:de:27:b7:82:ff:
                    56:0f:3b:43:3d:49:e8:23:63:48:22:94:3d:7f:1a:
                    07:50:79:a8:d2:c0:7b:1d:46:ca:c8:2b:6c:8f:1a:
                    9c:b4:60:37:97:02:e3:a5:7c:de:80:45:7b:56:d1:
                    0d:ea:df:be:ec:a1:39:4b:74:d0:67:51:88:35:22:
                    82:86:ee:ee:f4:25:2b:51:69:09:8d:e4:61:01:e5:
                    b8:cb:f7:32:d3:73:6e:c7:62:95:95:b0:fc:1a:b1:
                    f4:0f:4f:34:a3:9c:04:cc:c7:a6:b0:d7:ca:be:74:
                    21:2d:14:b4:a9:65:9a:00:54:22:52:8e:51:aa:1f:
                    05:d9:71:39:77:eb:9a:e8:ce:93:7a:47:ac:47:3d:
                    2d:d5:c5:4d:fb:81:c6:58:94:93:e4:c4:55:7b:a0:
                    9f:88:e7:1d:1d:3a:19:68:94:31:61:cc:c2:bd:d0:
                    96:70:48:16:eb:fb:42:8a:8c:2a:2f:e4:55:ba:d1:
                    eb:26:e1:4a:db:7a:e4:16:b7:b4:52:39:ff:30:62:
                    cd:cc:1a:a3:19:94:fd:fd:77:77:fc:85:5f:bd:47:
                    80:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2A:72:17:55:EC:4B:00:A4:A8:15:3F:B7:CC:E0:D3:F5:26:1A:9F
            X509v3 Authority Key Identifier:
                keyid:D6:89:70:D6:F2:A2:89:8E:8A:DE:58:86:6C:1E:8D:1B:48:01:5A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68970D6F2A2898E8ADE58866C1E8D1B48015A9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E6D5EDC7439E792A9040DDFC82E4A399D892BD161C0686DFEDC7C30A00FC225/0/323830333a633731303a3a2f33322d3335203d3e20323732303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c710::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:3d:a4:cf:37:3f:1d:64:0b:6b:c0:c2:ed:a7:53:35:d0:e4:
         68:56:2e:cf:6b:e7:31:88:9e:c8:d1:c5:25:7d:6d:9b:3f:0b:
         17:b6:ce:b4:16:6f:0e:07:d1:df:ca:86:53:cf:83:ea:1f:6c:
         ee:48:64:b4:39:d8:47:51:f9:3c:34:dd:59:7c:d1:bb:77:ba:
         27:76:de:df:64:55:a0:ec:80:07:12:c8:6d:e0:d2:8b:ed:36:
         06:a2:37:bc:ca:bb:7c:e3:66:5a:44:7f:45:93:b2:18:9d:53:
         ab:56:6f:7d:2f:35:61:b7:17:2b:74:42:48:60:d4:63:e3:64:
         41:65:1b:ac:8f:72:39:90:6d:a0:41:70:ce:a2:bf:30:d4:fa:
         a9:ca:34:78:da:d3:75:0f:ce:d3:50:21:67:e4:8d:f9:dc:93:
         ae:7f:9f:38:4b:73:78:77:be:da:64:46:38:2d:d2:ea:e4:74:
         87:80:f7:01:83:9f:99:34:80:c3:f1:40:44:29:e1:dd:44:e5:
         29:8d:79:02:fa:e2:e5:e8:09:1b:f1:3c:4d:95:a8:70:82:5b:
         52:99:16:95:4f:00:14:90:33:3c:17:f6:55:cf:5e:1c:8a:65:
         c8:00:f0:e2:17:79:1d:53:27:36:94:34:e0:92:7e:39:28:cf:
         1c:a4:7b:12
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUEM+DaX5qqFh1HSWNkJ4YPgj+Iy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4OTcwRDZGMkEyODk4RThBREU1ODg2NkMxRThEMUI0
ODAxNUE5RjAeFw0yNDAzMDUxODE2NThaFw0yNTAzMDQxODIxNThaMDMxMTAvBgNV
BAMTKEQwMkE3MjE3NTVFQzRCMDBBNEE4MTUzRkI3Q0NFMEQzRjUyNjFBOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPYQiKlJM4gvxvrCwo8LWJF1tz
CCUlsbpPIjjkg4/FAu79o6ztrZDeJ7eC/1YPO0M9SegjY0gilD1/GgdQeajSwHsd
RsrIK2yPGpy0YDeXAuOlfN6ARXtW0Q3q377soTlLdNBnUYg1IoKG7u70JStRaQmN
5GEB5bjL9zLTc27HYpWVsPwasfQPTzSjnATMx6aw18q+dCEtFLSpZZoAVCJSjlGq
HwXZcTl365rozpN6R6xHPS3VxU37gcZYlJPkxFV7oJ+I5x0dOhlolDFhzMK90JZw
SBbr+0KKjCov5FW60esm4UrbeuQWt7RSOf8wYs3MGqMZlP39d3f8hV+9R4DrAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU0CpyF1XsSwCkqBU/t8zg0/UmGp8wHwYDVR0j
BBgwFoAU1olw1vKiiY6K3liGbB6NG0gBWp8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RTZENUVEQzc0MzlFNzkyQTkwNDBEREZDODJFNEEzOTlE
ODkyQkQxNjFDMDY4NkRGRURDN0MzMEEwMEZDMjI1LzAvRDY4OTcwRDZGMkEyODk4
RThBREU1ODg2NkMxRThEMUI0ODAxNUE5Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjg5NzBENkYyQTI4OThFOEFE
RTU4ODY2QzFFOEQxQjQ4MDE1QTlGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUU2RDVFREM3NDM5RTc5MkE5MDQwRERGQzgyRTRBMzk5RDg5MkJEMTYx
QzA2ODZERkVEQzdDMzBBMDBGQzIyNS8wLzMyMzgzMDMzM2E2MzM3MzEzMDNhM2Ey
ZjMzMzIyZDMzMzUyMDNkM2UyMDMyMzczMjMwMzkzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDxxAw
DQYJKoZIhvcNAQELBQADggEBALI9pM83Px1kC2vAwu2nUzXQ5GhWLs9r5zGInsjR
xSV9bZs/Cxe2zrQWbw4H0d/KhlPPg+ofbO5IZLQ52EdR+Tw03Vl80bt3uid23t9k
VaDsgAcSyG3g0ovtNgaiN7zKu3zjZlpEf0WTshidU6tWb30vNWG3Fyt0Qkhg1GPj
ZEFlG6yPcjmQbaBBcM6ivzDU+qnKNHja03UPztNQIWfkjfnck65/nzhLc3h3vtpk
Rjgt0urkdIeA9wGDn5k0gMPxQEQp4d1E5SmNeQL64uXoCRvxPE2VqHCCW1KZFpVP
ABSQMzwX9lXPXhyKZcgA8OIXeR1TJzaUNOCSfjkozxykexI=
-----END CERTIFICATE-----