Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a3a2f34382d3438203d3e203230343733.roa
File:                     323830363a3431393a3a2f34382d3438203d3e203230343733.roa (raw, json)
Hash identifier:          hQ4vlBQz2zqpLuMDSSBy8P1TwHf8UKqX0ddlrZKgFq8=
Subject key identifier:   A0:B2:CB:6B:49:87:2F:1E:E5:4A:08:76:E7:DE:ED:BE:C4:7E:95:85
Certificate issuer:       /CN=7B20BC301183746CAE82E0BCAE353B6BC9A24568
Certificate serial:       7F0B8AF8567D879310C0E494A06710F06A7AA0D2
Authority key identifier: 7B:20:BC:30:11:83:74:6C:AE:82:E0:BC:AE:35:3B:6B:C9:A2:45:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a3a2f34382d3438203d3e203230343733.roa
Signing time:             Tue 05 Mar 2024 17:40:39 +0000
ROA not before:           Tue 05 Mar 2024 17:35:39 +0000
ROA not after:            Tue 04 Mar 2025 17:40:39 +0000
asID:                     20473
IP address blocks:        2806:419::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 01:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0b:8a:f8:56:7d:87:93:10:c0:e4:94:a0:67:10:f0:6a:7a:a0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B20BC301183746CAE82E0BCAE353B6BC9A24568
        Validity
            Not Before: Mar  5 17:35:39 2024 GMT
            Not After : Mar  4 17:40:39 2025 GMT
        Subject: CN=A0B2CB6B49872F1EE54A0876E7DEEDBEC47E9585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1f:44:2e:32:e4:44:04:f9:6c:68:a2:fc:72:
                    02:5e:11:a1:49:71:b0:6a:e6:1d:46:a8:47:76:da:
                    b7:b3:47:46:98:65:86:b8:f9:ab:1f:f4:92:9f:05:
                    98:67:5c:6f:a7:86:7e:43:26:0e:a7:3a:5a:f2:56:
                    fe:23:f7:ce:48:7d:94:f6:a7:a1:43:20:7a:51:71:
                    f7:3f:c0:62:d2:41:bc:3c:5f:d0:9c:8d:97:64:54:
                    c7:c5:46:6c:95:76:8d:8c:6e:31:73:d8:50:ee:4d:
                    a1:9c:89:c0:ce:a1:5f:af:af:38:ef:f5:c3:ce:40:
                    be:0a:b5:f7:6e:98:54:82:b8:18:39:3d:a4:c9:46:
                    7f:9d:23:a7:d6:e5:f7:ca:0e:86:39:bd:c6:38:b5:
                    d2:0f:61:3a:1f:ef:f3:a4:18:aa:15:fd:34:6f:85:
                    02:e5:32:4b:43:cf:c4:5d:9f:1e:d4:0b:94:18:22:
                    d1:3c:ee:79:02:77:8d:60:26:44:48:3a:0d:bd:1e:
                    7d:af:dc:b2:15:9d:6f:47:17:26:40:7c:c1:e5:6f:
                    52:f3:9c:be:66:75:61:e6:0d:97:88:f2:90:ca:b8:
                    bd:1f:87:20:35:db:65:03:6e:2a:fe:2b:1b:af:46:
                    49:75:b2:f8:ea:d1:d0:84:30:9d:6f:1b:13:60:9b:
                    70:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B2:CB:6B:49:87:2F:1E:E5:4A:08:76:E7:DE:ED:BE:C4:7E:95:85
            X509v3 Authority Key Identifier:
                keyid:7B:20:BC:30:11:83:74:6C:AE:82:E0:BC:AE:35:3B:6B:C9:A2:45:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a3a2f34382d3438203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:419::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:cb:9d:19:ea:f3:f6:d1:d3:69:9b:2f:f2:74:71:cf:09:0c:
         d4:e7:f5:d9:82:d4:80:46:08:42:bb:e3:31:5f:83:0b:c4:c4:
         eb:60:b1:b4:f8:f2:f8:43:1c:ba:5d:66:47:37:fc:1f:66:2a:
         9c:53:41:b6:f3:15:cd:d4:b5:3f:46:0d:9b:49:e3:56:74:96:
         9d:45:f4:c3:08:83:6f:c1:b2:80:3f:95:f3:8c:4b:03:ea:b1:
         ba:23:14:83:11:46:d4:b7:10:77:6f:b7:ea:68:76:59:d8:8d:
         66:97:36:4d:57:12:b0:e2:0f:76:05:fb:44:d9:4c:4c:df:ae:
         ae:62:1c:86:bc:96:df:99:78:6f:75:86:34:ef:57:5d:f2:37:
         ad:02:95:a6:a3:04:4a:d3:12:bf:45:6e:18:c5:c8:09:d1:2c:
         9b:e4:ac:31:b3:70:02:2e:56:d2:63:69:b4:35:df:51:86:fc:
         c4:41:8b:04:cf:cc:d0:18:93:7e:c7:b0:91:a7:75:72:81:96:
         db:8d:19:95:31:6e:c0:f7:fb:a7:2a:ae:74:fb:0b:ab:5c:3f:
         1a:9f:7f:37:a6:66:ab:5d:85:86:d3:d4:e9:f6:b8:3b:ea:56:
         85:27:38:91:ad:2d:8f:43:59:43:6b:ae:e4:6b:9e:2e:e6:87:
         81:e2:c3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----