Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/765a9a601dd092f8ea92479c73c2e12a9de314ff.roa
File:                     765a9a601dd092f8ea92479c73c2e12a9de314ff.roa (raw, json)
Hash identifier:          mKNj2sP27n3mS4omweW0dJY5OHHtuCT7J0n22oIssww=
Subject key identifier:   26:C0:2F:94:05:A8:FF:A2:B6:0A:6A:F3:8C:8A:D1:54:77:F2:C0:ED
Certificate issuer:       /CN=74ceb21261d995f6744c5614710320d1ad4b79f6
Certificate serial:       217A3F
Authority key identifier: FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/765a9a601dd092f8ea92479c73c2e12a9de314ff.roa
Signing time:             Fri 30 Jun 2023 08:30:02 +0000
ROA not before:           Thu 29 Jun 2023 08:30:02 +0000
ROA not after:            Sat 28 Jun 2025 08:30:02 +0000
asID:                     266706
IP address blocks:        2803:bd20::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 08 Feb 2024 00:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2193983 (0x217a3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ceb21261d995f6744c5614710320d1ad4b79f6
        Validity
            Not Before: Jun 29 08:30:02 2023 GMT
            Not After : Jun 28 08:30:02 2025 GMT
        Subject: CN=765a9a601dd092f8ea92479c73c2e12a9de314ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cc:84:ce:1e:63:b3:cb:9a:0f:88:db:6a:ee:
                    ca:a5:49:95:54:04:b7:91:dc:75:76:d0:2f:47:f8:
                    18:35:54:64:a3:56:6d:bf:11:a7:92:77:84:1e:16:
                    0a:55:c4:79:31:49:1b:3a:19:a7:32:db:76:f0:42:
                    62:24:f8:a8:72:39:5b:ea:d1:86:53:eb:c9:8f:35:
                    ce:e7:34:61:3a:d0:bf:cc:1a:e9:d1:fb:b3:6d:cc:
                    a8:2f:1d:9d:cf:9e:d7:f2:53:d4:2d:22:c7:9f:8f:
                    df:b0:b7:c2:1e:2f:14:ac:f0:1e:4c:b8:62:8c:b0:
                    8e:f0:b1:10:26:e1:8c:f4:e2:22:95:3e:d9:2b:5a:
                    9a:00:16:6f:b2:31:fd:8c:49:e5:4e:26:52:11:e8:
                    bb:3f:49:c0:6d:ca:15:e2:c4:1f:77:62:21:4c:9b:
                    aa:c1:de:be:08:6a:d9:13:0e:60:48:b4:25:9f:21:
                    b9:54:63:c3:55:a8:01:76:b5:ed:be:6f:53:69:5b:
                    37:cc:ca:2c:bc:b3:5a:04:d8:30:24:3a:b6:af:f2:
                    ec:64:24:68:38:2b:a5:3d:0e:49:06:35:9b:3d:a4:
                    35:a8:3b:ab:12:fe:72:54:01:52:e1:14:a5:cc:9e:
                    85:54:fb:31:21:44:55:74:05:7a:5c:20:d1:48:bc:
                    07:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C0:2F:94:05:A8:FF:A2:B6:0A:6A:F3:8C:8A:D1:54:77:F2:C0:ED
            X509v3 Authority Key Identifier:
                keyid:FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/765a9a601dd092f8ea92479c73c2e12a9de314ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/74ceb21261d995f6744c5614710320d1ad4b79f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bd20::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:ef:ea:37:40:9a:46:1b:f1:d3:1d:b0:7e:3a:b1:3d:a9:16:
         35:74:e8:44:d8:8a:67:0f:10:7a:3e:8c:cb:83:98:ca:f6:f6:
         af:e8:33:f6:bf:90:b8:e3:3c:0b:e6:43:51:6b:8b:c6:72:b3:
         16:44:7d:83:21:d5:cc:ff:a8:0d:95:48:6d:d1:69:82:40:26:
         2c:ff:cd:bc:a8:78:3e:59:bf:4a:2d:9b:0d:e0:03:33:44:42:
         b3:ec:82:1d:ff:50:3f:00:1e:26:20:7d:4a:c1:e9:18:14:c3:
         6c:77:e6:b6:ac:94:99:cd:8f:36:8d:1c:92:41:a4:0a:70:f5:
         64:d8:8c:a9:c2:1f:0d:bd:ac:16:24:ae:58:8a:9c:a7:95:a0:
         d6:ba:65:dc:af:ed:b7:d0:09:e5:61:18:52:fe:a7:20:89:f3:
         74:5a:73:96:99:81:eb:ae:7c:15:97:09:b2:34:00:65:0b:4a:
         aa:c2:67:92:74:75:5f:a5:65:65:75:5d:da:22:d7:42:f2:5a:
         b8:e7:09:73:bb:4a:23:66:0d:29:8c:21:56:e8:83:62:f4:b8:
         07:34:73:09:c5:d8:d8:2a:4a:fe:34:29:0a:94:cf:91:ee:3e:
         d2:d1:8f:f7:a0:5c:3f:a1:1a:c6:36:d4:92:2c:57:5c:92:33:
         2c:63:cc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----