Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F27408D37BE9E3B51637AEBBB76EE810F22FA1F91A99AB95ED0CA1CDAEADAEEB/0/323830333a383735303a3a2f33322d3332203d3e20323733393233.roa
File:                     323830333a383735303a3a2f33322d3332203d3e20323733393233.roa (raw, json)
Hash identifier:          WgzbqvTPUPe2iS1OmHvzfEy2y2Cw/SiPr/zEQ1XTWgg=
Subject key identifier:   7F:A8:16:8C:EB:CE:8D:49:24:6F:70:64:65:AE:E4:33:5F:90:74:69
Certificate issuer:       /CN=CAD6BBA34BDEF53CDAC8570D7207CD3DD4DCDFF3
Certificate serial:       73095CCB51E29D921B71F7C4E23FD9263C9F45F3
Authority key identifier: CA:D6:BB:A3:4B:DE:F5:3C:DA:C8:57:0D:72:07:CD:3D:D4:DC:DF:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAD6BBA34BDEF53CDAC8570D7207CD3DD4DCDFF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F27408D37BE9E3B51637AEBBB76EE810F22FA1F91A99AB95ED0CA1CDAEADAEEB/0/323830333a383735303a3a2f33322d3332203d3e20323733393233.roa
Signing time:             Fri 27 Sep 2024 22:25:00 +0000
ROA not before:           Fri 27 Sep 2024 22:20:00 +0000
ROA not after:            Fri 26 Sep 2025 22:25:00 +0000
asID:                     273923
IP address blocks:        2803:8750::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 29 Oct 2024 22:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:09:5c:cb:51:e2:9d:92:1b:71:f7:c4:e2:3f:d9:26:3c:9f:45:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAD6BBA34BDEF53CDAC8570D7207CD3DD4DCDFF3
        Validity
            Not Before: Sep 27 22:20:00 2024 GMT
            Not After : Sep 26 22:25:00 2025 GMT
        Subject: CN=7FA8168CEBCE8D49246F706465AEE4335F907469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5e:07:cb:b1:11:66:d7:c7:1b:4d:95:b6:74:
                    6b:b4:6e:7a:45:a9:8f:7d:63:1d:21:58:fd:52:0b:
                    74:00:49:41:26:81:88:d7:53:c6:30:0d:bd:27:bb:
                    af:ee:cd:62:b1:d0:f6:09:49:2f:6a:22:86:ab:d4:
                    db:ff:a1:2b:4d:1c:39:ea:61:c8:5a:27:e9:a0:1f:
                    85:d0:13:1f:7a:5a:ed:e8:29:02:6e:08:ed:09:7b:
                    5c:b8:c6:a7:a1:ac:6c:11:50:c9:1c:32:33:43:4e:
                    a9:2f:c7:7f:9f:dc:d0:42:56:fe:82:10:70:28:44:
                    c2:ec:cd:b1:29:f5:fb:1c:c4:2e:fd:bd:41:71:eb:
                    f4:5e:f8:d5:53:a4:b8:be:97:b5:15:13:44:f6:02:
                    46:ae:36:c4:54:c2:82:d4:a7:4b:f5:8d:b6:8b:53:
                    79:d4:4d:f6:11:91:47:21:18:cd:ea:f7:7c:47:01:
                    bb:21:a5:4b:6f:bf:ee:c7:65:a7:e3:a5:36:60:2f:
                    25:a4:c0:de:7c:a6:7d:a6:34:52:2f:72:e7:4b:5d:
                    d4:e0:23:04:1a:98:18:d6:78:1c:0d:2e:96:37:44:
                    cf:18:a0:e1:1b:15:7b:6e:e7:99:52:3c:7f:55:7e:
                    1a:8f:ec:6a:f7:22:2e:6c:c8:be:ff:2a:96:1b:b8:
                    9f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A8:16:8C:EB:CE:8D:49:24:6F:70:64:65:AE:E4:33:5F:90:74:69
            X509v3 Authority Key Identifier:
                keyid:CA:D6:BB:A3:4B:DE:F5:3C:DA:C8:57:0D:72:07:CD:3D:D4:DC:DF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F27408D37BE9E3B51637AEBBB76EE810F22FA1F91A99AB95ED0CA1CDAEADAEEB/0/CAD6BBA34BDEF53CDAC8570D7207CD3DD4DCDFF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAD6BBA34BDEF53CDAC8570D7207CD3DD4DCDFF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F27408D37BE9E3B51637AEBBB76EE810F22FA1F91A99AB95ED0CA1CDAEADAEEB/0/323830333a383735303a3a2f33322d3332203d3e20323733393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8750::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:cc:7f:13:aa:a5:08:2b:df:0c:2f:6e:55:16:02:73:6b:e1:
         92:b1:82:00:12:2e:e0:ff:65:37:6c:c0:f0:35:38:4b:27:88:
         b3:9d:63:e5:fa:0b:e9:a8:88:cc:e3:ad:a1:ce:c6:a4:1b:5e:
         3f:e2:fc:77:bb:83:71:cd:c6:6d:0c:65:65:74:c6:74:d8:5e:
         13:29:b3:8e:dc:65:02:59:34:fb:31:e8:34:20:0d:b9:3d:a4:
         02:d2:45:5e:df:5e:8b:a5:42:e4:04:c6:77:76:df:0c:54:ec:
         f2:34:57:58:01:cb:96:32:f4:b2:99:61:7d:7b:71:a0:24:3e:
         c6:80:dc:47:8c:1d:18:03:64:bb:b8:44:55:f9:f2:e8:ea:a5:
         e8:2e:1f:bf:fb:9c:06:de:4b:cb:8e:ac:91:f7:e7:5e:3a:40:
         d7:2f:22:d8:f8:a7:aa:69:6a:9d:cb:d6:34:02:cf:6e:97:ad:
         7a:11:f8:02:9b:73:b6:d1:fc:42:d9:52:bd:4c:3d:46:2f:d9:
         5f:07:4f:3c:d2:56:4e:ac:af:81:46:f3:ff:23:82:98:98:6f:
         1c:a8:80:7e:2e:50:b5:9c:ba:6b:91:df:8a:e0:7e:51:1a:71:
         03:7f:07:0a:09:29:fe:2f:a4:b3:3b:1e:6a:93:43:82:7f:0a:
         09:ea:5d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----