Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/323830333a65303a3a2f33322d3332203d3e20323639383433.roa
File:                     323830333a65303a3a2f33322d3332203d3e20323639383433.roa (raw, json)
Hash identifier:          jpPM87BnUzXLxXxf1w+XGoMSD511CueBjmaDT21LYVs=
Subject key identifier:   5C:E1:63:1D:84:D2:AB:A7:9B:48:DA:1D:E9:B6:76:A5:49:C1:13:06
Certificate issuer:       /CN=E0013BE61C4781324203A7DB7D11674E5D707D02
Certificate serial:       1821049C63447281DC557FAE030B19C67438DAF1
Authority key identifier: E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/323830333a65303a3a2f33322d3332203d3e20323639383433.roa
Signing time:             Mon 03 Feb 2025 17:50:00 +0000
ROA not before:           Mon 03 Feb 2025 17:45:00 +0000
ROA not after:            Mon 02 Feb 2026 17:50:00 +0000
asID:                     269843
IP address blocks:        2803:e0::/32 maxlen: 32
Validation:               Failed, certificate revoked on Mon 03 Feb 2025 18:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:21:04:9c:63:44:72:81:dc:55:7f:ae:03:0b:19:c6:74:38:da:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0013BE61C4781324203A7DB7D11674E5D707D02
        Validity
            Not Before: Feb  3 17:45:00 2025 GMT
            Not After : Feb  2 17:50:00 2026 GMT
        Subject: CN=5CE1631D84D2ABA79B48DA1DE9B676A549C11306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2d:72:16:8d:70:bd:dd:a4:63:f0:ce:77:39:
                    6f:0f:28:ba:c5:cb:bf:7c:38:b1:70:80:59:06:a8:
                    53:98:c4:08:23:06:67:ce:2b:03:74:90:91:01:3a:
                    a9:dc:a7:ee:bc:d7:f7:77:fb:1e:6a:c3:6e:b3:40:
                    de:90:9b:2a:52:9c:2c:37:6c:99:6d:ee:5b:fa:c2:
                    5e:7f:70:f9:22:e3:03:16:00:0a:df:d1:be:65:8d:
                    c5:f2:56:e8:8f:59:e2:3a:53:18:63:36:03:18:0a:
                    a0:48:e9:fc:92:04:56:24:23:e5:f9:d1:01:45:af:
                    cf:c6:6b:ca:ae:94:85:d2:61:77:a6:d1:1a:1c:e1:
                    5f:02:ad:f4:7b:3b:48:b3:48:63:aa:4a:74:fd:f9:
                    4b:fa:14:4e:2c:db:60:50:77:11:66:ae:b3:6a:98:
                    85:92:e9:ee:86:41:72:bf:28:d8:de:d2:ec:47:e1:
                    42:ed:7a:63:3e:ec:ad:72:d3:e8:e7:13:ba:bd:0f:
                    19:b6:d4:c8:ad:eb:a6:5f:d4:c0:37:0f:a6:1c:bd:
                    64:25:f3:37:10:a8:ae:2d:63:7a:60:7c:9f:3c:fc:
                    79:cb:3e:04:54:7b:3b:db:5c:8d:ff:6a:56:f0:cb:
                    19:32:36:fd:e0:c2:e5:23:13:c7:9b:d0:fb:c0:14:
                    70:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E1:63:1D:84:D2:AB:A7:9B:48:DA:1D:E9:B6:76:A5:49:C1:13:06
            X509v3 Authority Key Identifier:
                keyid:E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/E0013BE61C4781324203A7DB7D11674E5D707D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/323830333a65303a3a2f33322d3332203d3e20323639383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:50:b7:79:dd:27:60:85:58:ae:2c:44:99:29:f5:cc:3c:ba:
         8d:8b:3f:89:aa:7e:83:35:ce:f6:54:8b:a7:fe:53:47:f8:99:
         5c:02:53:18:e0:b5:4f:8e:a4:47:76:01:fd:d5:30:09:95:c6:
         22:39:14:18:57:63:3b:db:5f:a3:8c:c4:a2:0c:5d:29:89:39:
         8b:4b:c1:d9:93:ca:c9:19:f0:01:f5:82:b3:09:af:5b:73:16:
         5e:01:88:95:59:07:82:0e:77:6e:44:37:14:36:1b:3f:bf:75:
         9e:7c:2c:81:61:d2:12:f2:9f:30:f0:47:6a:cb:8b:a2:c1:bc:
         4d:c0:03:67:42:a8:a2:ea:b5:21:26:da:c3:a8:e8:36:ec:6b:
         fe:91:cd:69:2f:b0:93:d3:19:14:4b:a9:15:cf:2d:cc:64:30:
         9c:17:18:1f:57:c2:17:4d:67:b1:5b:cc:d3:fd:cd:a8:d2:f7:
         1b:00:4d:6e:c2:45:75:4b:7a:a6:bf:b8:9c:45:1d:27:8c:ec:
         bd:fe:18:5a:3c:9d:1c:b9:55:62:75:fa:56:19:84:00:fe:f5:
         72:30:62:ee:0a:81:c0:20:2a:3f:66:13:8a:37:b6:3d:d0:e7:
         a7:ca:87:8c:df:7e:df:ea:7b:08:b8:e4:6e:ad:11:a4:39:be:
         8e:26:32:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----