Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/323830333a3765303a3a2f33322d3332203d3e20323633373932.roa
File:                     323830333a3765303a3a2f33322d3332203d3e20323633373932.roa (raw, json)
Hash identifier:          QzbojQXkxVAGmH5ms2/OuND18fMxKtPXOabT/8V1YVI=
Subject key identifier:   61:6F:A7:92:FB:E4:2D:B1:6D:9D:D4:96:44:39:24:7C:DD:A7:B3:5E
Certificate issuer:       /CN=3F3113B81AF3FD2448A47AEA0168935257B94663
Certificate serial:       6FB187130A29F4045521988E36E2A1EB27406A63
Authority key identifier: 3F:31:13:B8:1A:F3:FD:24:48:A4:7A:EA:01:68:93:52:57:B9:46:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/323830333a3765303a3a2f33322d3332203d3e20323633373932.roa
Signing time:             Tue 05 Mar 2024 17:58:40 +0000
ROA not before:           Tue 05 Mar 2024 17:53:40 +0000
ROA not after:            Tue 04 Mar 2025 17:58:40 +0000
asID:                     263792
IP address blocks:        2803:7e0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 14:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b1:87:13:0a:29:f4:04:55:21:98:8e:36:e2:a1:eb:27:40:6a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F3113B81AF3FD2448A47AEA0168935257B94663
        Validity
            Not Before: Mar  5 17:53:40 2024 GMT
            Not After : Mar  4 17:58:40 2025 GMT
        Subject: CN=616FA792FBE42DB16D9DD4964439247CDDA7B35E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:50:57:7c:c1:d4:4c:28:e5:61:23:c6:8a:fa:
                    60:d3:d5:81:6a:d0:ce:b3:2e:46:f3:d9:d0:95:45:
                    f3:35:68:c1:31:25:a6:c1:31:3c:2f:fb:65:6d:c6:
                    c6:1f:d1:55:01:90:ba:47:3c:b3:eb:3f:8c:a5:73:
                    b9:3b:52:d9:48:d7:eb:fd:0f:6e:3a:9c:9c:3d:d0:
                    17:25:c0:fe:7e:5b:73:12:51:ce:a6:34:da:02:b4:
                    b9:d6:a1:60:4e:80:3b:c2:2b:7f:89:36:37:7a:57:
                    31:37:a9:e6:e5:ff:cd:f1:82:53:9e:c0:cc:6b:45:
                    eb:fd:5e:23:e0:47:ee:87:89:dc:e8:9f:58:03:3a:
                    ce:c6:1e:7f:3b:81:8a:8b:fd:3a:4e:27:d0:ba:cb:
                    3c:64:c9:e2:4c:4a:66:a3:58:bc:85:a8:3d:3f:e4:
                    3e:be:1d:e3:bb:e5:75:76:7c:68:19:5a:04:8e:90:
                    2b:21:69:b1:45:92:e6:4b:e5:7b:05:6d:d2:2c:16:
                    87:e5:a5:75:58:a7:af:c3:6f:c0:35:71:e1:6f:8c:
                    a0:d4:d3:12:60:3f:f8:ee:b0:81:e5:e5:f1:86:cb:
                    ce:8d:8f:36:b3:93:eb:fe:1c:6c:1c:1a:d3:fd:fc:
                    3e:44:25:c2:86:72:cb:7d:db:04:ca:12:89:c7:c1:
                    29:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6F:A7:92:FB:E4:2D:B1:6D:9D:D4:96:44:39:24:7C:DD:A7:B3:5E
            X509v3 Authority Key Identifier:
                keyid:3F:31:13:B8:1A:F3:FD:24:48:A4:7A:EA:01:68:93:52:57:B9:46:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/3F3113B81AF3FD2448A47AEA0168935257B94663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F3113B81AF3FD2448A47AEA0168935257B94663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE67CD8C92B1DE114AB4D3B2151D828AB834D06E8A890C1E2548B6BC74F7A9A9/0/323830333a3765303a3a2f33322d3332203d3e20323633373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:9e:03:1a:19:31:a4:0c:ef:12:a8:a0:b5:3c:cd:9e:5c:25:
         a0:45:18:91:67:0d:2a:04:17:85:95:24:93:f1:87:7e:0a:96:
         5f:5a:5b:11:28:36:54:87:f9:48:0b:5f:01:11:70:77:76:97:
         dc:5e:23:fe:2b:db:85:e1:fd:f8:b7:57:be:21:e2:5e:4d:d1:
         e5:3c:03:e9:e8:77:b3:68:b8:0d:e3:f5:15:b8:79:f5:4c:d9:
         1c:33:65:3a:7d:86:91:d7:0e:9a:ba:e7:be:ca:0f:ef:bd:cc:
         af:7a:5b:1b:32:38:d4:8a:45:d7:bd:27:b2:a5:e4:93:b3:13:
         cc:b2:17:7b:da:26:76:67:ae:d0:a1:e4:3b:ae:b0:32:6d:a1:
         d7:27:3a:c6:4d:98:b2:37:9c:e4:32:0c:68:3a:38:dd:75:b3:
         12:6c:46:4c:a9:85:bb:30:c6:27:9c:78:2b:c4:6d:80:65:b3:
         14:cd:bf:42:ef:d0:0e:64:7a:9a:9e:c4:58:41:50:6e:81:68:
         02:95:41:95:49:71:17:80:d4:cb:01:40:d6:9e:62:73:e3:5f:
         58:72:77:5e:72:f2:5f:38:e5:27:70:91:dd:25:02:39:d0:2c:
         a3:c2:04:28:46:02:fb:d7:eb:61:34:db:97:f6:6b:3e:3b:70:
         6f:7e:e0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----