Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/323830333a3834303a3a2f33322d3438203d3e20323633373933.roa
File:                     323830333a3834303a3a2f33322d3438203d3e20323633373933.roa (raw, json)
Hash identifier:          oT2iNYF7cj5loQkKswuYbIarmvnAWEtvTSIQuEnNIeQ=
Subject key identifier:   39:73:48:6D:61:61:40:10:95:CF:04:E8:18:59:B5:20:FC:71:ED:4B
Certificate issuer:       /CN=D7EE67424E7FC3136531741689B53CDA16769DD7
Certificate serial:       27DB520117E7804740A9E83DF110A29D351CA937
Authority key identifier: D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/323830333a3834303a3a2f33322d3438203d3e20323633373933.roa
Signing time:             Tue 05 Mar 2024 18:19:58 +0000
ROA not before:           Tue 05 Mar 2024 18:14:58 +0000
ROA not after:            Tue 04 Mar 2025 18:19:58 +0000
asID:                     263793
IP address blocks:        2803:840::/32 maxlen: 48

Validation:               Failed, certificate revoked on Wed 21 Aug 2024 17:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:db:52:01:17:e7:80:47:40:a9:e8:3d:f1:10:a2:9d:35:1c:a9:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7EE67424E7FC3136531741689B53CDA16769DD7
        Validity
            Not Before: Mar  5 18:14:58 2024 GMT
            Not After : Mar  4 18:19:58 2025 GMT
        Subject: CN=3973486D6161401095CF04E81859B520FC71ED4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:bb:fb:ea:63:df:6f:00:05:05:a8:17:57:
                    ca:63:ab:4f:bd:bc:fd:8d:a4:65:bc:f0:dd:a1:a6:
                    a0:3f:8e:01:b5:87:89:0f:15:c5:e9:1f:50:79:f8:
                    d5:71:fd:40:6b:e5:5b:e0:50:3a:eb:f0:ef:c1:b6:
                    6e:f1:49:09:eb:70:c5:e2:a5:54:05:2a:f2:c2:f1:
                    59:95:98:1c:97:90:44:e4:56:ec:de:f1:80:a7:bb:
                    9c:86:03:4c:c1:63:12:db:82:23:59:44:72:ab:58:
                    ff:29:19:e1:9e:f2:7b:31:82:e0:50:69:c3:38:62:
                    b1:76:c0:61:8f:4f:4d:16:43:24:4d:c9:ff:07:d2:
                    3b:2a:59:a1:8f:e7:7f:2e:de:dd:91:50:4c:0c:94:
                    e2:33:85:2d:53:81:dd:17:0b:c7:2e:69:0b:57:7e:
                    95:54:f0:b6:b8:13:71:41:5e:da:77:dc:73:8d:f5:
                    9a:ec:06:f3:06:73:81:10:f2:63:86:63:d7:4a:ca:
                    26:aa:12:1f:87:d7:37:29:a2:ca:98:38:8b:16:1d:
                    e9:d2:ca:8d:12:f5:12:06:83:94:7f:af:94:a5:4a:
                    db:7b:0a:cf:a3:49:38:4f:29:25:a4:c2:f4:a7:7f:
                    a6:ef:61:ba:72:da:02:6d:44:0f:79:2a:0e:eb:fd:
                    17:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:73:48:6D:61:61:40:10:95:CF:04:E8:18:59:B5:20:FC:71:ED:4B
            X509v3 Authority Key Identifier:
                keyid:D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/323830333a3834303a3a2f33322d3438203d3e20323633373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:840::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:37:c3:22:b0:ea:64:9f:c6:d2:4b:e3:6c:66:99:47:e2:a1:
         49:8a:ec:b2:62:81:79:2e:94:d2:ba:d1:95:97:f5:a8:3d:6e:
         69:a8:5a:50:69:99:4a:c3:09:cf:e5:2d:f7:be:eb:b9:ea:ff:
         95:a8:bf:4c:cc:ac:9c:c7:b3:72:fa:ce:7e:11:45:fd:f5:f7:
         ca:34:ea:c1:a3:1d:0c:f2:bc:de:b0:fb:4f:e8:b8:a7:61:4a:
         f3:a9:cb:da:85:8a:b3:7a:40:ce:97:3f:58:74:5e:82:a0:e1:
         f6:fe:af:e1:96:f5:cb:12:0f:79:04:ec:1d:35:31:0d:57:e4:
         e7:a2:c5:7b:6d:69:8b:f1:b0:be:86:e7:73:78:93:a5:20:36:
         ab:dc:16:76:a1:6d:c4:a7:80:7a:f9:22:78:f1:ba:8a:85:4c:
         91:13:6d:b0:ad:4a:74:a1:f5:57:f0:6a:a2:57:99:57:f5:81:
         bb:21:1d:1f:bf:53:cd:85:2a:46:21:e0:64:0c:6c:e6:64:0f:
         e2:f7:48:4d:37:6d:1c:b8:96:02:5f:96:21:ca:65:62:17:d9:
         b3:1c:89:e3:d2:07:bd:d6:0b:12:0f:49:97:ba:95:94:a1:e1:
         d3:0d:fd:2b:bd:50:41:21:bc:1d:ea:3a:b0:cc:1d:42:35:bf:
         74:b6:6d:dc
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUJ9tSARfngEdAqeg98RCinTUcqTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdFRTY3NDI0RTdGQzMxMzY1MzE3NDE2ODlCNTNDREEx
Njc2OURENzAeFw0yNDAzMDUxODE0NThaFw0yNTAzMDQxODE5NThaMDMxMTAvBgNV
BAMTKDM5NzM0ODZENjE2MTQwMTA5NUNGMDRFODE4NTlCNTIwRkM3MUVENEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtbLv76mPfbwAFBagXV8pjq0+9
vP2NpGW88N2hpqA/jgG1h4kPFcXpH1B5+NVx/UBr5VvgUDrr8O/Btm7xSQnrcMXi
pVQFKvLC8VmVmByXkETkVuze8YCnu5yGA0zBYxLbgiNZRHKrWP8pGeGe8nsxguBQ
acM4YrF2wGGPT00WQyRNyf8H0jsqWaGP538u3t2RUEwMlOIzhS1Tgd0XC8cuaQtX
fpVU8La4E3FBXtp33HON9ZrsBvMGc4EQ8mOGY9dKyiaqEh+H1zcposqYOIsWHenS
yo0S9RIGg5R/r5SlStt7Cs+jSThPKSWkwvSnf6bvYbpy2gJtRA95Kg7r/Re7AgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUOXNIbWFhQBCVzwToGFm1IPxx7UswHwYDVR0j
BBgwFoAU1+5nQk5/wxNlMXQWibU82hZ2ndcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzlBQjVCRTY2QTk4MDNENTIxOTg0NUEzNzI0ODE5OTk1
OTMyRkM5ODU2NjYzRDQ3RjQyMjI4QjJFRkVBQTMyLzAvRDdFRTY3NDI0RTdGQzMx
MzY1MzE3NDE2ODlCNTNDREExNjc2OURENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EN0VFNjc0MjRFN0ZDMzEzNjUz
MTc0MTY4OUI1M0NEQTE2NzY5REQ3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5QUI1QkU2NkE5ODAzRDUyMTk4NDVBMzcyNDgxOTk5NTkzMkZDOTg1
NjY2M0Q0N0Y0MjIyOEIyRUZFQUEzMi8wLzMyMzgzMDMzM2EzODM0MzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMjM2MzMzNzM5MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAwhAMA0G
CSqGSIb3DQEBCwUAA4IBAQARN8MisOpkn8bSS+NsZplH4qFJiuyyYoF5LpTSutGV
l/WoPW5pqFpQaZlKwwnP5S33vuu56v+VqL9MzKycx7Ny+s5+EUX99ffKNOrBox0M
8rzesPtP6LinYUrzqcvahYqzekDOlz9YdF6CoOH2/q/hlvXLEg95BOwdNTENV+Tn
osV7bWmL8bC+hudzeJOlIDar3BZ2oW3Ep4B6+SJ48bqKhUyRE22wrUp0ofVX8Gqi
V5lX9YG7IR0fv1PNhSpGIeBkDGzmZA/i90hNN20cuJYCX5YhymViF9mzHInj0ge9
1gsSD0mXupWUoeHTDf0rvVBBIbwd6jqwzB1CNb90tm3c
-----END CERTIFICATE-----