Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3a2f34382d3438203d3e20323732383639.roa
File:                     323830333a373239303a3a2f34382d3438203d3e20323732383639.roa (raw, json)
Hash identifier:          hfXHfkIVeaSSbgQ0Vq+ifPx8hQgVLL0gjcVQaaxaBLE=
Subject key identifier:   80:03:40:E8:1A:EA:A4:9B:9D:15:E0:D2:04:0B:F9:9A:EA:A7:22:2C
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       6273F96775ECACD949DDD31B315EEDFD742995E3
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3a2f34382d3438203d3e20323732383639.roa
Signing time:             Sun 28 Apr 2024 15:25:00 +0000
ROA not before:           Sun 28 Apr 2024 15:20:00 +0000
ROA not after:            Sun 27 Apr 2025 15:25:00 +0000
asID:                     272869
IP address blocks:        2803:7290::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 12 May 2024 00:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:73:f9:67:75:ec:ac:d9:49:dd:d3:1b:31:5e:ed:fd:74:29:95:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Apr 28 15:20:00 2024 GMT
            Not After : Apr 27 15:25:00 2025 GMT
        Subject: CN=800340E81AEAA49B9D15E0D2040BF99AEAA7222C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:33:25:0b:85:8c:92:ff:17:58:7b:49:6c:b8:
                    5f:16:28:cb:96:dd:87:9c:bb:f1:23:ab:52:4d:67:
                    1c:20:16:d2:12:d9:86:f7:2c:f3:3e:be:92:ef:fb:
                    cd:69:23:80:a8:84:38:a9:82:cb:8e:0b:b3:ca:53:
                    f2:a1:88:e5:55:a2:f4:f7:38:b5:55:51:a3:24:db:
                    de:f9:d7:80:a0:65:f5:50:9b:a3:9f:5d:07:02:06:
                    29:dd:c4:3c:1a:96:6a:2b:c5:48:37:bf:fc:2a:f7:
                    c5:05:93:e5:12:31:84:10:f0:5e:4c:08:00:9c:a8:
                    98:47:9d:b2:8a:85:fd:c8:7b:12:f4:fd:1d:d3:e1:
                    d5:43:23:b3:28:66:72:9a:9d:dc:3e:a9:e5:09:ba:
                    d5:04:58:ac:bb:f4:55:6b:ba:99:30:7f:c9:b6:93:
                    ff:ef:73:17:cf:1f:f6:dc:6e:4a:6d:4c:d1:ba:74:
                    f3:bf:b3:61:20:fa:b3:5f:d0:b9:ef:50:0c:4d:ba:
                    8e:09:c6:fe:79:90:24:2e:8c:4f:82:0c:99:c2:35:
                    56:aa:2b:05:ec:3e:4c:e5:9d:65:07:40:52:88:52:
                    c0:2c:55:94:b6:a3:0a:47:f7:7c:16:ec:76:21:b9:
                    87:3a:be:17:47:ea:fc:a6:fc:c0:18:84:79:cc:06:
                    e1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:03:40:E8:1A:EA:A4:9B:9D:15:E0:D2:04:0B:F9:9A:EA:A7:22:2C
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3a2f34382d3438203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:41:bd:40:0e:be:fb:33:6e:cc:5b:a1:d5:d1:52:a8:98:4b:
         80:6d:52:d8:70:0c:21:1b:f7:c8:fa:47:1d:26:b9:36:61:56:
         f5:a2:25:16:cc:57:ff:03:88:85:bf:5e:88:dd:96:85:cc:aa:
         4f:82:a8:55:87:ad:0a:31:b2:7e:1e:cd:1d:83:f8:04:fa:6c:
         cf:ae:66:b0:3b:07:31:c9:b2:33:be:36:6c:9f:07:5d:86:4d:
         99:81:59:8b:cf:1b:ec:d5:98:a0:e3:a3:7f:fb:42:de:b4:95:
         1f:bd:c5:bf:37:75:73:94:4e:08:99:26:6f:e1:c9:92:60:ca:
         27:e2:1c:38:ae:69:04:b3:e3:5a:30:8d:a0:01:ff:13:97:2c:
         76:05:f0:41:e2:a4:0d:66:4c:ad:3b:48:6e:4c:46:ab:18:ae:
         9c:9d:7a:c9:a5:32:f8:8d:65:a8:8c:0e:df:0f:be:6c:45:3c:
         3f:04:fb:8a:3e:c8:e1:35:4b:b7:ef:ac:69:59:20:d5:39:c1:
         29:00:e7:bd:7c:50:dd:14:4f:4f:56:d1:c5:2f:d5:26:39:7d:
         47:ed:e7:97:d1:88:4b:75:01:9c:87:a8:3d:58:b3:2e:26:c8:
         71:d3:84:95:9f:70:9f:78:d6:2d:94:e7:33:67:88:d2:48:9e:
         07:e7:66:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----