Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/323830333a396265303a3a2f33322d3334203d3e20323730303931.roa
File:                     323830333a396265303a3a2f33322d3334203d3e20323730303931.roa (raw, json)
Hash identifier:          3y5HUrRszfx1XujGJVAs4xpXhiJvx4CXn18EygNpoxE=
Subject key identifier:   4F:7A:13:24:13:9D:E8:B3:BA:71:4C:FF:57:E6:A2:1C:AE:10:05:79
Certificate issuer:       /CN=6BA68E6954F674D809D554249D117B58A4F64EC0
Certificate serial:       078336260E343778783647399693C197E0C1F011
Authority key identifier: 6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/323830333a396265303a3a2f33322d3334203d3e20323730303931.roa
Signing time:             Mon 12 Aug 2024 19:30:00 +0000
ROA not before:           Mon 12 Aug 2024 19:25:00 +0000
ROA not after:            Mon 11 Aug 2025 19:30:00 +0000
asID:                     270091
IP address blocks:        2803:9be0::/32 maxlen: 34

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 22:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:83:36:26:0e:34:37:78:78:36:47:39:96:93:c1:97:e0:c1:f0:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BA68E6954F674D809D554249D117B58A4F64EC0
        Validity
            Not Before: Aug 12 19:25:00 2024 GMT
            Not After : Aug 11 19:30:00 2025 GMT
        Subject: CN=4F7A1324139DE8B3BA714CFF57E6A21CAE100579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:26:2b:91:29:81:6d:15:92:0a:d7:eb:3e:f8:
                    92:6b:c3:b3:07:19:b3:db:09:e3:c0:88:a0:ee:0b:
                    5e:25:ce:63:48:35:58:66:47:dd:35:b2:df:8a:1c:
                    13:f6:5f:18:6c:d8:ba:49:29:86:04:83:eb:0a:f3:
                    63:25:1e:39:d8:7b:bc:8d:0c:0d:82:ea:bd:84:f6:
                    34:2c:5d:99:7d:4e:05:68:f1:58:08:6c:6f:d2:bb:
                    32:44:32:41:c0:ba:33:39:5d:39:99:f5:03:be:bf:
                    18:99:96:a3:1f:09:6e:09:f8:fe:82:4c:09:38:17:
                    32:92:90:f5:cb:b0:38:35:d9:0e:47:8e:f2:10:5c:
                    b5:e3:6a:c1:86:b5:59:03:14:98:b6:62:a2:cb:1b:
                    e3:92:f5:be:24:27:29:9b:bd:bf:cc:45:db:d1:25:
                    ea:ef:b1:4e:73:3e:bc:42:11:a1:e3:59:98:d6:88:
                    43:d0:6e:ab:7f:b6:67:53:a0:9d:04:a3:8a:72:78:
                    f7:ad:fb:4f:02:55:e2:ac:a0:52:28:57:40:04:ed:
                    2f:22:c5:1b:b2:a9:17:76:e3:01:71:08:68:49:16:
                    76:3a:c4:56:ef:7d:b4:e2:79:05:df:a4:4e:a0:11:
                    6f:b3:4e:7d:9f:6d:48:cb:62:45:a3:8b:8e:1c:24:
                    b6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7A:13:24:13:9D:E8:B3:BA:71:4C:FF:57:E6:A2:1C:AE:10:05:79
            X509v3 Authority Key Identifier:
                keyid:6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/323830333a396265303a3a2f33322d3334203d3e20323730303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:26:71:ea:ac:89:f5:ef:17:ac:f2:9c:5d:7a:9f:9f:e9:65:
         8a:be:50:d3:38:ba:71:ae:71:e3:a3:ae:48:db:ae:05:7f:d3:
         b5:ee:67:72:43:a2:e7:a7:04:18:63:6c:df:67:de:6d:83:83:
         4e:29:fb:e1:4d:02:9c:41:68:49:a2:0c:3f:a7:0c:be:79:49:
         93:d0:d4:91:e1:7c:af:90:07:53:13:cd:2f:61:2b:67:73:4b:
         fd:17:57:ff:51:6c:1e:3a:c2:8b:fc:29:db:9d:49:68:75:e2:
         5e:7b:55:97:fd:30:67:0c:97:3d:9a:97:bc:68:2b:c9:d1:60:
         61:62:5a:fc:25:98:bb:ad:2f:25:a0:28:97:06:fe:fc:6e:33:
         2d:30:ad:eb:b9:f7:a0:fc:5c:97:d9:0b:d0:f7:85:94:b0:71:
         2b:62:61:9c:98:6e:36:40:58:2f:80:d2:d6:4e:8b:d4:a7:06:
         a1:38:2a:c0:97:49:ab:6d:f7:16:e8:11:79:24:03:1e:2d:e1:
         c1:bd:fc:7d:7c:db:58:28:f3:72:7b:d1:af:5f:af:3a:50:af:
         dd:91:4a:21:93:dd:a0:14:67:8c:2a:c1:f8:d0:de:87:00:1d:
         dc:61:c7:7a:9e:bc:f8:1c:fb:ff:da:cc:30:4a:48:72:d8:e6:
         e3:dd:09:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----