Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/323830333a616638303a636166333a3a2f34382d3438203d3e20323633373332.roa
File:                     323830333a616638303a636166333a3a2f34382d3438203d3e20323633373332.roa (raw, json)
Hash identifier:          MorzMAgy4S8GIciwEfwTo2V6Ep7KhZ1GwmhOlz0ZAwQ=
Subject key identifier:   C6:32:55:7F:8A:B4:7E:26:9F:07:C2:10:88:09:B8:19:38:F5:F7:01
Certificate issuer:       /CN=D65CF4F69AC888255A41BFC6B6F0E71DA81E954B
Certificate serial:       13CAC7BFD32120F3A82DB0CEA4091E39E8F4C843
Authority key identifier: D6:5C:F4:F6:9A:C8:88:25:5A:41:BF:C6:B6:F0:E7:1D:A8:1E:95:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/323830333a616638303a636166333a3a2f34382d3438203d3e20323633373332.roa
Signing time:             Tue 05 Mar 2024 18:11:30 +0000
ROA not before:           Tue 05 Mar 2024 18:06:30 +0000
ROA not after:            Tue 04 Mar 2025 18:11:30 +0000
asID:                     263732
IP address blocks:        2803:af80:caf3::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 25 Oct 2024 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ca:c7:bf:d3:21:20:f3:a8:2d:b0:ce:a4:09:1e:39:e8:f4:c8:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D65CF4F69AC888255A41BFC6B6F0E71DA81E954B
        Validity
            Not Before: Mar  5 18:06:30 2024 GMT
            Not After : Mar  4 18:11:30 2025 GMT
        Subject: CN=C632557F8AB47E269F07C2108809B81938F5F701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:39:30:0f:67:f2:a9:87:ae:d2:3b:4c:9a:
                    fd:bb:43:fc:c7:da:c4:ff:28:7e:19:33:a0:2e:f8:
                    da:d4:17:85:ea:f0:95:62:2c:d1:1c:53:c8:f7:d2:
                    a0:17:6e:f3:fc:4b:a8:67:d0:58:74:4c:85:f2:7f:
                    72:86:39:85:fa:b5:74:40:7a:a5:0b:43:e9:5c:6b:
                    70:0d:9b:47:fb:d6:82:36:20:da:32:78:42:af:b1:
                    df:74:dc:26:ad:0c:ff:6a:6c:8a:13:6e:d9:9c:b3:
                    fd:59:4c:d4:e2:c3:f7:98:d0:36:8d:43:88:bd:7e:
                    7a:0e:17:68:5f:35:e9:c9:83:f9:9a:14:84:39:24:
                    71:3e:e0:20:01:a3:6e:ad:b9:ae:54:f7:a7:8e:0f:
                    f9:fb:f8:ea:ad:e1:84:f9:6a:39:7f:47:c0:71:25:
                    d9:91:79:6a:d7:fd:49:cd:22:49:11:b7:85:94:30:
                    82:fe:32:12:a7:f0:f2:1b:5f:ab:36:e6:a1:39:6f:
                    8e:e5:cf:20:13:a2:a4:0e:5f:4f:ad:06:0e:34:c9:
                    e4:15:cc:b0:ba:98:29:14:8b:f8:c9:be:ef:1d:fc:
                    5a:e9:f4:2e:1b:36:56:04:75:c0:98:bb:6e:fa:8c:
                    a1:2f:f9:64:68:30:92:3a:32:a1:53:c5:e6:e8:08:
                    73:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:32:55:7F:8A:B4:7E:26:9F:07:C2:10:88:09:B8:19:38:F5:F7:01
            X509v3 Authority Key Identifier:
                keyid:D6:5C:F4:F6:9A:C8:88:25:5A:41:BF:C6:B6:F0:E7:1D:A8:1E:95:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/323830333a616638303a636166333a3a2f34382d3438203d3e20323633373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af80:caf3::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:a0:1a:bb:c7:7e:bd:87:92:08:78:14:0d:93:f1:0e:a3:62:
         bb:4c:14:9a:54:fe:2b:90:9d:29:55:a1:5c:ad:1c:0a:40:1e:
         08:b4:7f:c2:e3:ae:1e:d2:74:b8:47:c1:7b:b4:93:6e:0c:ef:
         1c:fe:01:4f:b9:37:54:8e:19:7e:5e:a8:5d:3b:2f:b0:dd:ff:
         eb:25:6b:c5:70:3f:09:b8:98:39:b3:59:46:9b:92:82:76:16:
         38:52:df:43:a7:59:de:61:15:2c:60:42:c3:8f:73:8b:ec:d5:
         99:9b:93:fd:da:8a:d3:10:08:f0:7a:19:9f:b4:4a:be:a2:c0:
         9e:fe:03:6c:a7:26:86:35:e2:26:4c:f0:d5:71:e7:74:16:f8:
         eb:d7:2d:3a:23:d4:39:0d:cd:dc:cf:7c:87:97:4c:26:75:10:
         cc:8c:4f:da:2a:49:0a:05:36:e5:91:c1:cc:ff:41:bf:ee:fd:
         d2:be:6e:42:ab:87:04:e3:22:d8:34:fa:a8:da:cd:8f:38:d4:
         b5:e5:ae:fa:21:b5:47:43:a1:0e:d3:4e:f3:49:18:67:65:9c:
         3c:85:95:c0:71:9e:a7:a9:d2:f7:6d:19:fa:79:6c:61:5c:ad:
         17:83:81:9e:ab:30:c0:0d:47:57:bd:23:d4:bb:ec:36:d8:79:
         df:f9:2d:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----