Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/6044b73895ca08a4e9832f8e91daf40950fb6f94.roa
File:                     6044b73895ca08a4e9832f8e91daf40950fb6f94.roa (raw, json)
Hash identifier:          3Xv/rHK/gy2rYCltJWcVVfl/Xh47AO40n8un5qt42+s=
Subject key identifier:   9F:77:5C:99:D6:F5:AC:2B:D7:CA:C9:B1:C9:E9:CB:CD:8B:35:76:99
Certificate issuer:       /CN=3ead659559971c8e6c9735bc245323c57109fb64
Certificate serial:       0E3E14
Authority key identifier: FF:55:E0:A2:13:1B:59:A8:FA:6F:4C:26:E2:4C:50:78:90:F8:D6:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ead659559971c8e6c9735bc245323c57109fb64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/6044b73895ca08a4e9832f8e91daf40950fb6f94.roa
Signing time:             Tue 13 Feb 2024 16:57:16 +0000
ROA not before:           Tue 13 Feb 2024 16:57:16 +0000
ROA not after:            Fri 13 Feb 2026 16:57:16 +0000
asID:                     14080
IP address blocks:        2801:1c8::/41 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Apr 2024 20:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933396 (0xe3e14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ead659559971c8e6c9735bc245323c57109fb64
        Validity
            Not Before: Feb 13 16:57:16 2024 GMT
            Not After : Feb 13 16:57:16 2026 GMT
        Subject: CN=6044b73895ca08a4e9832f8e91daf40950fb6f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:05:ff:92:59:87:f8:6e:d8:05:9c:9b:3c:71:
                    26:07:28:ba:fa:0a:f9:c0:fb:1a:93:c6:13:44:2f:
                    df:a6:89:b1:bc:b9:73:ea:12:91:36:62:b4:d9:6b:
                    49:86:1a:67:2e:2e:36:0d:ba:c0:42:30:23:88:3c:
                    65:25:e3:61:ba:83:e2:dd:42:b5:55:30:43:b7:8e:
                    fb:8c:c6:8c:ba:f5:31:1c:ce:d4:f9:5a:e0:a5:dc:
                    ff:df:e7:72:e4:0e:18:34:70:65:f1:7e:a5:c4:9b:
                    00:e5:34:55:f8:29:03:ec:89:dc:c8:15:fb:79:b8:
                    e4:49:a1:bc:ad:af:15:36:20:af:62:55:24:1e:62:
                    02:49:10:29:23:44:aa:a4:39:62:9e:8b:0f:80:20:
                    97:79:d5:18:b3:52:a5:9e:4e:86:89:be:6d:ca:75:
                    bb:e4:df:c6:d9:e5:f6:45:53:59:97:ff:fb:2f:8f:
                    5a:db:32:66:be:08:82:2e:31:bb:1f:44:3c:9c:63:
                    f5:e2:70:6d:43:bb:83:4d:0d:69:79:8f:43:54:29:
                    43:b6:61:81:ca:7d:96:02:10:55:e5:b3:02:82:f7:
                    33:ac:f6:92:73:44:e7:46:19:ef:10:92:ab:71:e1:
                    fd:61:d9:cb:4b:31:a1:4f:e5:fa:f7:18:a9:cb:ee:
                    27:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:77:5C:99:D6:F5:AC:2B:D7:CA:C9:B1:C9:E9:CB:CD:8B:35:76:99
            X509v3 Authority Key Identifier:
                keyid:FF:55:E0:A2:13:1B:59:A8:FA:6F:4C:26:E2:4C:50:78:90:F8:D6:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ead659559971c8e6c9735bc245323c57109fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/6044b73895ca08a4e9832f8e91daf40950fb6f94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/3ead659559971c8e6c9735bc245323c57109fb64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c8::/41

    Signature Algorithm: sha256WithRSAEncryption
         73:f0:c2:94:5c:05:e3:96:aa:c1:81:fa:a5:93:47:0e:9e:b8:
         8c:ed:e4:42:0f:d5:88:e8:46:ab:2f:1a:91:68:0f:42:e4:b7:
         5d:e2:83:d4:8b:29:a2:38:ac:9a:19:1a:ce:60:7d:81:bc:f9:
         34:9d:88:ab:60:ef:c2:be:3b:6e:f9:69:bd:ba:8d:9a:fe:20:
         b3:d7:5e:38:a4:8c:5a:99:07:fc:b3:04:35:e5:d4:75:d3:45:
         dd:96:6c:b9:0f:93:fa:e3:89:c0:dc:6e:c1:db:9c:2a:26:66:
         c8:7e:24:0f:72:09:4b:aa:a0:83:6b:bc:1e:4d:ed:9e:15:60:
         22:68:fb:fc:e9:51:7d:24:1f:29:3e:8e:f0:11:af:39:f7:de:
         4f:55:1e:cb:df:bf:58:73:57:8e:21:45:02:43:b6:72:39:a0:
         27:3d:d0:a8:00:02:1e:92:58:53:aa:96:1c:df:31:b1:64:94:
         b9:d4:2c:10:78:7b:1b:39:df:d0:a2:64:f9:b8:4b:cc:95:6b:
         2e:83:a3:a2:c6:59:66:03:f9:2b:1b:d8:cb:cd:d7:9c:c9:aa:
         9f:9c:0a:17:6f:ee:8d:ad:bd:fa:83:79:58:e3:1b:ae:37:fd:
         7c:6e:58:f5:e4:c2:71:d7:98:11:f4:e0:4b:85:55:33:99:e3:
         b5:3b:67:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----