Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a333830303a3a2f33392d3339203d3e20323637383331.roa
File:                     323830333a383436303a333830303a3a2f33392d3339203d3e20323637383331.roa (raw, json)
Hash identifier:          scdxZDa3duRLE9IX2r1H3Z80xh2D3fgjlXilJSoQ5Fk=
Subject key identifier:   79:BF:5E:45:55:EB:D7:47:17:07:61:EF:5C:37:F7:B1:87:B5:DE:F7
Certificate issuer:       /CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
Certificate serial:       0B4E8E4E7A511F8555BF651E840AFBE37FBB83FE
Authority key identifier: 80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a333830303a3a2f33392d3339203d3e20323637383331.roa
Signing time:             Tue 05 Mar 2024 18:18:52 +0000
ROA not before:           Tue 05 Mar 2024 18:13:52 +0000
ROA not after:            Tue 04 Mar 2025 18:18:52 +0000
asID:                     267831
IP address blocks:        2803:8460:3800::/39 maxlen: 39

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 04:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4e:8e:4e:7a:51:1f:85:55:bf:65:1e:84:0a:fb:e3:7f:bb:83:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
        Validity
            Not Before: Mar  5 18:13:52 2024 GMT
            Not After : Mar  4 18:18:52 2025 GMT
        Subject: CN=79BF5E4555EBD747170761EF5C37F7B187B5DEF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a3:e5:00:4f:a0:73:68:a9:9b:31:00:eb:74:
                    02:d6:d4:68:4e:7e:00:e7:2e:97:88:d3:9d:52:d3:
                    f2:af:3e:ab:60:68:7e:2a:25:79:c7:f6:07:83:6d:
                    58:98:d0:73:7f:25:3d:20:b6:cc:9f:34:40:43:55:
                    e8:12:18:61:64:13:7f:ff:c3:ed:c8:6a:e4:a0:a4:
                    c7:6e:79:ad:96:01:0c:ba:e0:55:7a:63:5d:c4:1b:
                    4f:65:7f:a0:37:e0:11:77:7c:c5:71:44:67:94:e0:
                    ce:32:6b:39:0e:d3:95:73:22:f1:5f:52:8c:8a:da:
                    f0:c9:d4:ef:3b:3e:86:4a:1a:e9:c7:d2:a3:ea:e7:
                    f0:85:52:a9:69:58:68:fa:52:78:30:58:6e:cf:48:
                    72:9d:ae:d0:da:ca:b8:29:f2:a6:2f:ce:fc:45:d4:
                    fd:ab:40:57:80:c1:f3:d9:52:9c:b3:5f:24:12:24:
                    c0:4f:1b:c5:e1:27:fb:e0:9d:a8:21:3a:65:e5:12:
                    a5:db:13:fb:f7:d2:9c:13:9e:7b:b4:a0:07:b7:d7:
                    36:cb:97:18:a2:9c:56:d8:cb:33:ad:4a:07:e4:d5:
                    9f:58:3d:9e:ed:79:2b:f3:33:93:af:00:5e:25:10:
                    e1:ad:62:96:ed:b1:18:36:fa:14:af:6c:7f:80:dd:
                    a8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BF:5E:45:55:EB:D7:47:17:07:61:EF:5C:37:F7:B1:87:B5:DE:F7
            X509v3 Authority Key Identifier:
                keyid:80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a333830303a3a2f33392d3339203d3e20323637383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8460:3800::/39

    Signature Algorithm: sha256WithRSAEncryption
         8d:cc:8b:95:b7:3c:d2:72:79:93:4a:62:52:ea:96:8d:b2:f4:
         33:27:88:f8:19:d3:9e:cd:43:7d:04:b6:ba:6c:54:17:a4:c6:
         4c:01:39:ff:9a:71:2e:80:bf:5b:d3:64:09:a6:ca:cf:ce:21:
         f6:35:fc:75:d0:3c:1c:05:88:17:b0:e8:99:d7:9b:25:3f:1e:
         97:37:a8:8c:01:c9:ce:35:a9:27:cd:ff:8e:29:0f:47:b1:f8:
         6e:d3:4c:fd:53:f0:e8:e2:34:59:1c:1b:fd:28:26:16:c7:27:
         63:15:98:60:98:ba:e7:f1:df:85:20:a1:ae:13:46:74:bf:c7:
         e1:c1:d5:bb:cb:52:8e:0c:7f:9a:51:b5:46:14:df:43:93:84:
         c8:0a:d6:ec:05:89:12:2f:af:e3:f7:33:6d:08:0e:c2:73:04:
         f2:28:1f:2d:91:9a:b8:d0:ff:a9:83:28:f9:34:55:78:50:c3:
         6a:6e:48:b7:4b:ab:97:e5:a5:47:79:27:3e:c1:b7:b2:b2:f0:
         89:a4:6d:cc:1c:cd:e6:df:a0:fa:ad:31:38:c3:a8:89:56:0c:
         86:28:f9:20:3c:99:0f:6b:09:cb:19:cf:2b:7b:15:87:14:ef:
         11:16:23:eb:a0:44:c5:ba:74:ce:00:a3:ed:68:4c:c8:91:d7:
         b1:19:68:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----