Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/323830333a333965303a3a2f33322d3332203d3e203237303033.roa
File:                     323830333a333965303a3a2f33322d3332203d3e203237303033.roa (raw, json)
Hash identifier:          syaYwIbyxoQFFmliyCrho2Dvf7efk7Qaupm2pAbYzlc=
Subject key identifier:   0F:BD:0D:1B:42:DA:23:B6:7F:EC:28:2C:82:8B:B8:70:1F:F8:7A:85
Certificate issuer:       /CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
Certificate serial:       6221AEE8931966AD277744FFDB562AF576BD5C05
Authority key identifier: 5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/323830333a333965303a3a2f33322d3332203d3e203237303033.roa
Signing time:             Thu 23 May 2024 21:05:01 +0000
ROA not before:           Thu 23 May 2024 21:00:01 +0000
ROA not after:            Thu 22 May 2025 21:05:01 +0000
asID:                     27003
IP address blocks:        2803:39e0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 24 May 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:21:ae:e8:93:19:66:ad:27:77:44:ff:db:56:2a:f5:76:bd:5c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
        Validity
            Not Before: May 23 21:00:01 2024 GMT
            Not After : May 22 21:05:01 2025 GMT
        Subject: CN=0FBD0D1B42DA23B67FEC282C828BB8701FF87A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:b6:6a:62:4c:5f:08:9c:ad:77:b7:ce:15:
                    02:0a:e0:2c:02:c9:f0:88:af:2e:a4:5c:bb:a2:4b:
                    e2:68:32:51:c6:fb:09:cf:b6:f7:ca:04:18:b3:ac:
                    7c:9b:b4:0b:4e:00:b4:ac:e3:00:bd:1a:ed:99:50:
                    14:32:8a:6d:ee:56:0a:7a:e2:f2:d2:15:fc:5f:a2:
                    3d:0d:f1:08:9d:b7:f8:25:2e:64:d4:4c:35:b4:b6:
                    60:07:17:89:d7:a9:75:30:ca:78:58:46:f1:46:c6:
                    5c:1b:ec:7a:9e:36:9b:98:e4:9a:92:2d:c8:7e:56:
                    a4:c9:f2:74:19:c5:65:fe:8d:c9:97:cd:6b:1a:98:
                    7f:3b:34:9e:58:3b:a9:9b:b5:8c:a6:b9:b7:b3:4d:
                    0c:eb:46:63:1e:f5:90:2c:b8:11:8b:98:50:5e:d0:
                    94:07:e4:f8:92:2b:ba:b5:77:53:57:df:d0:8f:99:
                    07:c5:e8:67:58:9c:b2:ef:cb:38:7b:41:84:76:9a:
                    21:0e:98:90:2c:18:5d:28:8c:3d:68:02:72:1a:ce:
                    28:9b:7a:9c:7c:51:ed:8a:63:0f:7c:d5:3a:f1:85:
                    7b:a1:b5:9c:53:95:c5:0a:f1:93:0c:99:21:52:af:
                    c7:3d:2c:01:f4:61:31:27:e1:0d:ba:1d:43:72:d9:
                    f1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BD:0D:1B:42:DA:23:B6:7F:EC:28:2C:82:8B:B8:70:1F:F8:7A:85
            X509v3 Authority Key Identifier:
                keyid:5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/323830333a333965303a3a2f33322d3332203d3e203237303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:39e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:81:a3:74:d9:a4:d0:8e:d5:f2:59:00:4a:ce:e8:cf:f9:3b:
         f1:6e:43:bc:30:94:6b:be:84:92:09:67:62:6d:62:bb:e6:5b:
         7e:a6:fa:f8:6a:f5:e8:74:b6:62:e4:62:84:01:5a:7f:a5:93:
         5f:45:e3:12:be:6c:b1:1c:42:5c:c8:f6:5d:61:7b:4d:83:f8:
         48:11:fa:73:4f:5a:3f:c6:51:65:6e:2e:2e:b4:e2:ef:17:3f:
         da:93:51:72:2b:cb:97:81:91:65:26:68:21:be:52:3f:00:b5:
         9b:8a:de:51:b3:c6:33:2c:e0:9c:91:85:e8:a9:e5:dc:eb:0e:
         a9:32:dd:6f:8b:d0:a2:c4:b3:4d:67:1b:3d:19:f4:86:a9:fe:
         15:06:e2:e1:51:81:40:27:4a:79:20:a9:cf:22:63:b9:72:f4:
         90:95:bf:7f:3b:a0:37:df:f4:9d:34:2b:11:7e:7b:bb:dd:bd:
         04:a4:83:8f:70:fe:2d:c9:da:72:47:c4:e7:18:31:35:25:60:
         3f:a9:c3:9b:1c:6e:4e:d1:e8:76:7b:3b:34:9c:96:0a:12:1e:
         3f:fa:4f:78:1f:d8:3c:c0:81:be:19:31:65:c5:c8:ad:8a:11:
         12:4a:7d:e4:82:37:1c:ec:00:9e:33:9d:f7:05:d5:a1:1a:49:
         4a:c0:6d:ab
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUYiGu6JMZZq0nd0T/21Yq9Xa9XAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUY1QjE5NzFGOTlERDFGRDc4MUQ2NDk0MDMxMTRCRjVD
MENERTlEMzAeFw0yNDA1MjMyMTAwMDFaFw0yNTA1MjIyMTA1MDFaMDMxMTAvBgNV
BAMTKDBGQkQwRDFCNDJEQTIzQjY3RkVDMjgyQzgyOEJCODcwMUZGODdBODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6tLZqYkxfCJytd7fOFQIK4CwC
yfCIry6kXLuiS+JoMlHG+wnPtvfKBBizrHybtAtOALSs4wC9Gu2ZUBQyim3uVgp6
4vLSFfxfoj0N8Qidt/glLmTUTDW0tmAHF4nXqXUwynhYRvFGxlwb7HqeNpuY5JqS
Lch+VqTJ8nQZxWX+jcmXzWsamH87NJ5YO6mbtYymubezTQzrRmMe9ZAsuBGLmFBe
0JQH5PiSK7q1d1NX39CPmQfF6GdYnLLvyzh7QYR2miEOmJAsGF0ojD1oAnIaziib
epx8Ue2KYw981TrxhXuhtZxTlcUK8ZMMmSFSr8c9LAH0YTEn4Q26HUNy2fEZAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUD70NG0LaI7Z/7Cgsgou4cB/4eoUwHwYDVR0j
BBgwFoAUX1sZcfmd0f14HWSUAxFL9cDN6dMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMTBENzk5ODYwOEI4NzIyRDNFRUY1RUMyNTA2REJGNkQz
N0Y2QjUxODQwMUFDRDI5RDY5OUUyNjc2NjRENzI0LzAvNUY1QjE5NzFGOTlERDFG
RDc4MUQ2NDk0MDMxMTRCRjVDMENERTlEMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RjVCMTk3MUY5OUREMUZENzgx
RDY0OTQwMzExNEJGNUMwQ0RFOUQzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjEwRDc5OTg2MDhCODcyMkQzRUVGNUVDMjUwNkRCRjZEMzdGNkI1MTg0
MDFBQ0QyOUQ2OTlFMjY3NjY0RDcyNC8wLzMyMzgzMDMzM2EzMzM5NjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMDMwMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAzngMA0G
CSqGSIb3DQEBCwUAA4IBAQASgaN02aTQjtXyWQBKzujP+TvxbkO8MJRrvoSSCWdi
bWK75lt+pvr4avXodLZi5GKEAVp/pZNfReMSvmyxHEJcyPZdYXtNg/hIEfpzT1o/
xlFlbi4utOLvFz/ak1FyK8uXgZFlJmghvlI/ALWbit5Rs8YzLOCckYXoqeXc6w6p
Mt1vi9CixLNNZxs9GfSGqf4VBuLhUYFAJ0p5IKnPImO5cvSQlb9/O6A33/SdNCsR
fnu73b0EpIOPcP4tydpyR8TnGDE1JWA/qcObHG5O0eh2ezs0nJYKEh4/+k94H9g8
wIG+GTFlxcitihESSn3kgjcc7ACeM533BdWhGklKwG2r
-----END CERTIFICATE-----