Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3a2f33332d3438203d3e203138363738.roa
File:                     323830303a3331303a3a2f33332d3438203d3e203138363738.roa (raw, json)
Hash identifier:          8dcEPYPSFrF5d7VC/bHg5KQODNtq4z0d4bcpffKX4iI=
Subject key identifier:   C2:5D:35:E5:9C:77:52:6F:33:06:FF:F0:85:C8:F0:F3:EE:F6:26:D2
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       213A83CC461781DB154D2B746FCA71CB6D404DB6
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3a2f33332d3438203d3e203138363738.roa
Signing time:             Thu 27 Feb 2025 15:50:00 +0000
ROA not before:           Thu 27 Feb 2025 15:45:00 +0000
ROA not after:            Thu 26 Feb 2026 15:50:00 +0000
asID:                     18678
IP address blocks:        2800:310::/33 maxlen: 48
Validation:               Failed, certificate revoked on Thu 27 Feb 2025 16:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3a:83:cc:46:17:81:db:15:4d:2b:74:6f:ca:71:cb:6d:40:4d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 27 15:45:00 2025 GMT
            Not After : Feb 26 15:50:00 2026 GMT
        Subject: CN=C25D35E59C77526F3306FFF085C8F0F3EEF626D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e0:ba:43:a9:bb:f4:28:53:86:48:2e:60:28:
                    d0:39:5f:fd:3e:68:c0:7c:6a:2a:9c:a8:c6:a9:f5:
                    8a:05:f4:c0:31:75:3d:e2:28:ff:01:ad:2b:48:93:
                    e5:9c:44:54:5a:75:91:f6:36:6e:1d:00:e4:12:45:
                    7d:82:ff:ae:5a:9f:0b:5b:7d:d4:e3:fa:a9:a6:0d:
                    19:a1:35:11:74:a5:27:1e:70:c6:06:6f:61:c3:91:
                    3b:78:08:22:8b:e7:1f:5a:fe:b9:c1:73:e3:9a:fe:
                    86:40:cb:9d:2a:6f:d7:79:0b:7c:c8:05:be:b9:78:
                    31:2c:6b:7a:db:ee:dd:c7:d4:b2:13:ed:52:67:84:
                    b1:35:cd:ef:a7:8c:aa:57:df:b7:21:04:0f:76:32:
                    a5:dc:84:98:07:f6:be:5e:21:78:95:33:c9:53:2d:
                    bd:88:9d:67:9f:9e:9b:9f:a7:98:2e:b6:b6:96:d5:
                    d1:6b:1c:18:39:d1:d8:0f:9c:c1:72:03:fa:1d:53:
                    f9:85:49:4a:cb:24:f4:43:8f:e2:55:71:91:9d:1a:
                    e4:17:99:25:14:9e:2b:a1:ad:a3:97:20:9c:89:1e:
                    8f:ef:19:68:06:98:f2:14:41:66:2c:20:b4:db:a5:
                    ae:c9:19:91:9b:af:fe:c7:c2:6e:94:38:82:00:2e:
                    3b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5D:35:E5:9C:77:52:6F:33:06:FF:F0:85:C8:F0:F3:EE:F6:26:D2
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a3a2f33332d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310::/33

    Signature Algorithm: sha256WithRSAEncryption
         68:cf:6e:fb:6b:3b:62:59:30:2c:63:82:ac:df:ab:bf:83:62:
         9c:f6:87:c2:22:6b:70:67:b7:bf:7d:a0:b5:99:09:87:46:8e:
         21:21:e2:6e:9c:ef:eb:31:5b:f6:55:c8:62:49:72:d6:fd:4e:
         59:71:c8:7b:7d:7f:bb:dd:44:d6:8b:97:dc:e6:34:f0:9f:8c:
         bc:80:b0:c9:23:14:ef:a4:e5:a3:6c:68:5f:c5:4c:30:c7:c7:
         84:da:ae:16:3f:87:38:0e:09:0d:0d:3b:86:9d:d2:d3:ec:4b:
         9c:2f:ac:4b:f6:2f:51:ac:46:0d:51:3c:2f:76:8b:c7:c5:83:
         ba:28:d2:ab:40:af:1f:89:b5:a9:14:27:4f:7a:d8:4d:df:d2:
         a2:d3:9a:e9:7a:b7:d9:36:01:5c:d4:2e:4e:be:7b:cc:dd:fb:
         b3:cd:79:d7:48:f8:8c:22:c8:98:6a:b4:3e:cf:27:18:75:89:
         d8:56:7e:24:e4:e2:82:12:a5:c7:de:98:82:32:df:02:ee:e6:
         da:f5:64:a4:fb:ef:86:ae:80:ba:b1:15:72:0e:f7:3f:d1:84:
         6b:dd:51:68:7a:6e:1c:6c:1e:84:10:a5:29:78:b9:be:51:13:
         b2:c8:59:87:f6:aa:45:d6:29:1a:15:78:7e:c6:e9:d1:1c:cb:
         90:d7:34:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----