Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/323830333a663063303a3a2f33322d3332203d3e20323634373733.roa
File:                     323830333a663063303a3a2f33322d3332203d3e20323634373733.roa (raw, json)
Hash identifier:          ub2p3C4xMZisuth0K4CwaemkuBWF2EM7gELtrEr2m+k=
Subject key identifier:   BF:10:4C:0C:9C:FF:0E:EB:1F:30:51:D3:FA:59:A1:E5:96:D8:A3:A8
Certificate issuer:       /CN=68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4
Certificate serial:       1E372E5E1B935B6DBF5433EDED2942B0C7B07FF0
Authority key identifier: 68:C8:54:2A:3C:A3:8B:CC:76:73:F1:7E:9F:11:BA:5D:D5:1B:25:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/323830333a663063303a3a2f33322d3332203d3e20323634373733.roa
Signing time:             Tue 05 Mar 2024 17:48:38 +0000
ROA not before:           Tue 05 Mar 2024 17:43:38 +0000
ROA not after:            Tue 04 Mar 2025 17:48:38 +0000
asID:                     264773
IP address blocks:        2803:f0c0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 24 Jul 2024 21:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:37:2e:5e:1b:93:5b:6d:bf:54:33:ed:ed:29:42:b0:c7:b0:7f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4
        Validity
            Not Before: Mar  5 17:43:38 2024 GMT
            Not After : Mar  4 17:48:38 2025 GMT
        Subject: CN=BF104C0C9CFF0EEB1F3051D3FA59A1E596D8A3A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:44:ab:2e:50:c5:91:81:77:9f:2f:f0:64:
                    4c:42:cb:26:a9:5a:a3:ca:c0:12:ab:5a:b7:24:0c:
                    6f:49:9e:36:c3:08:4a:13:94:82:a3:fd:f5:5a:0a:
                    36:16:b1:5b:45:01:1c:7e:4c:ec:04:ab:a6:a1:fa:
                    17:50:7f:39:73:13:56:ef:4c:61:b6:cb:95:1b:87:
                    f4:cb:ac:b2:60:ec:41:8f:5d:6e:92:84:29:2f:35:
                    f8:29:54:2d:55:15:5d:c7:a8:2c:e1:30:4d:7c:aa:
                    df:de:ba:4d:79:c8:ee:81:01:f2:1b:6f:3e:70:99:
                    81:47:1f:b1:f9:80:89:1c:82:dc:80:d5:25:b3:37:
                    27:8a:92:07:6e:da:5a:2b:87:67:26:d1:ef:48:8d:
                    23:54:38:da:d3:0b:18:f5:e8:41:ff:93:e7:87:e4:
                    b9:40:55:66:c5:e8:59:a2:44:d0:b1:01:f0:47:bc:
                    98:a7:49:e3:f0:32:df:8b:8e:f8:37:79:bb:75:e9:
                    47:56:30:fc:44:4d:d3:65:41:8e:35:9a:94:af:8e:
                    3e:8f:a3:70:91:42:60:78:a3:a0:e9:52:d7:86:94:
                    b0:b6:fe:b9:b2:1a:da:7b:eb:03:34:f0:24:19:e1:
                    08:58:84:a3:52:5d:72:e8:77:31:a9:05:96:48:e4:
                    6c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:10:4C:0C:9C:FF:0E:EB:1F:30:51:D3:FA:59:A1:E5:96:D8:A3:A8
            X509v3 Authority Key Identifier:
                keyid:68:C8:54:2A:3C:A3:8B:CC:76:73:F1:7E:9F:11:BA:5D:D5:1B:25:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/323830333a663063303a3a2f33322d3332203d3e20323634373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:e0:8e:97:21:fa:7b:06:82:32:a2:93:6a:27:e5:67:67:b7:
         b5:3b:9d:bb:b9:69:25:e9:1c:0f:7b:5c:9a:ad:81:aa:85:0f:
         53:1f:02:53:37:b7:52:66:f1:d0:fb:89:d9:98:58:82:21:ee:
         07:f2:fc:23:ff:c0:99:69:f6:3c:91:ce:c6:bb:12:e6:5f:29:
         3a:da:b1:cc:e6:a8:a2:06:91:e5:36:ee:01:ce:9f:8d:97:8a:
         3b:90:d6:1d:52:fd:ca:cb:8d:32:8e:d6:21:80:09:95:86:99:
         8b:c9:86:df:5f:b2:67:7c:d9:0b:64:fd:e2:4f:4a:31:2f:b6:
         b3:57:0f:91:c7:42:9f:55:8c:04:47:15:88:57:66:4c:b9:10:
         a4:a9:c9:84:da:6d:56:22:ca:f3:e0:00:ad:a1:8e:3e:83:04:
         eb:38:1c:cb:4b:18:92:f7:9d:cd:f5:35:3e:a6:0d:cd:0c:96:
         be:97:dd:8b:e9:b5:6d:99:c1:00:31:22:bb:9b:94:8f:46:c2:
         11:bb:0f:c1:2c:43:9a:6f:c9:c8:00:21:dd:c1:c7:e2:72:9a:
         57:30:40:d2:12:80:4f:7d:af:1f:8b:e7:f3:eb:87:43:a8:ee:
         47:3d:54:35:20:3c:f6:04:68:00:29:2b:1e:eb:34:ee:d5:d9:
         74:6c:10:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----