Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/323830333a626663303a3a2f33322d3332203d3e20323635373837.roa
File:                     323830333a626663303a3a2f33322d3332203d3e20323635373837.roa (raw, json)
Hash identifier:          /W/ritA86Xhl9s1P+Sg/Mo26fZJlXTXL/V5Zclavlec=
Subject key identifier:   4F:E9:70:A2:61:0C:B7:44:DC:1E:3A:4A:2B:E4:A7:E6:5B:53:3A:5A
Certificate issuer:       /CN=7CE45D98F41C9AB7061F84A19C190414D5CB4FCA
Certificate serial:       083E63AF3C36F751E31C108FD7D3012DAFAC48AB
Authority key identifier: 7C:E4:5D:98:F4:1C:9A:B7:06:1F:84:A1:9C:19:04:14:D5:CB:4F:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/323830333a626663303a3a2f33322d3332203d3e20323635373837.roa
Signing time:             Tue 05 Mar 2024 17:47:14 +0000
ROA not before:           Tue 05 Mar 2024 17:42:14 +0000
ROA not after:            Tue 04 Mar 2025 17:47:14 +0000
asID:                     265787
IP address blocks:        2803:bfc0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 06 May 2024 15:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3e:63:af:3c:36:f7:51:e3:1c:10:8f:d7:d3:01:2d:af:ac:48:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE45D98F41C9AB7061F84A19C190414D5CB4FCA
        Validity
            Not Before: Mar  5 17:42:14 2024 GMT
            Not After : Mar  4 17:47:14 2025 GMT
        Subject: CN=4FE970A2610CB744DC1E3A4A2BE4A7E65B533A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:09:1e:55:1e:c7:e9:55:4d:5e:1f:7f:ff:66:
                    14:b2:14:50:01:89:96:a9:b6:c6:10:2e:2e:7f:77:
                    c8:6c:02:c1:42:03:fd:04:6f:ee:22:1e:a2:02:fe:
                    2b:f2:41:91:25:83:5f:bc:f1:02:c0:b8:cd:87:6f:
                    24:29:c5:ec:ce:da:86:67:27:55:57:e7:85:e5:05:
                    66:70:89:a5:94:5a:5c:85:0a:77:03:ab:ae:b3:cc:
                    ea:9c:b8:dc:57:ea:60:9c:08:6a:f8:44:e1:5f:d7:
                    c7:8d:d7:8c:57:c0:02:80:6a:36:10:3f:aa:30:a0:
                    0e:0e:9b:81:56:f1:fb:83:b6:18:23:18:84:ce:b6:
                    8b:04:00:53:0e:af:4b:c8:a2:b7:c5:f8:df:3d:c8:
                    60:c8:3d:23:b3:a3:06:88:e7:47:a7:39:16:ee:e5:
                    25:49:97:32:40:99:84:4a:2f:0d:b7:36:82:4b:4b:
                    78:fd:c3:1f:8b:a7:ed:76:19:8a:90:a2:d0:e9:bd:
                    80:70:3f:f8:e5:18:cb:c7:7d:14:db:59:82:3f:bd:
                    d7:fd:fb:4f:95:77:6d:f3:b6:43:80:69:0a:ab:50:
                    a8:4d:e5:8e:6b:f7:b2:9e:aa:1c:67:35:56:98:87:
                    9b:be:ce:9d:00:2d:67:23:cb:cf:b4:e8:14:64:f7:
                    c7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E9:70:A2:61:0C:B7:44:DC:1E:3A:4A:2B:E4:A7:E6:5B:53:3A:5A
            X509v3 Authority Key Identifier:
                keyid:7C:E4:5D:98:F4:1C:9A:B7:06:1F:84:A1:9C:19:04:14:D5:CB:4F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/323830333a626663303a3a2f33322d3332203d3e20323635373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bfc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:ab:b3:2b:7e:b9:8b:f5:24:81:49:70:8c:79:fb:8f:7e:d5:
         eb:bd:cc:96:03:cd:df:fe:d7:00:f1:e6:97:6e:20:0b:c8:d3:
         1d:52:be:a0:4c:f2:54:db:81:17:57:ea:30:43:30:b2:55:b6:
         f2:4d:89:d9:f6:ae:1c:14:f6:60:ee:84:f5:5e:54:1b:87:c3:
         02:e5:ea:dc:ea:1d:00:e7:ee:b5:5b:c3:97:6e:96:82:05:0f:
         db:69:03:6b:22:4b:66:9e:d9:18:5c:e7:04:b4:55:34:47:35:
         4e:be:c1:e0:39:a0:56:c4:d1:18:19:d2:15:0b:f4:da:a1:d2:
         4b:18:eb:80:59:08:c5:7b:79:52:c4:45:9a:71:44:9d:17:31:
         68:1d:2d:30:0e:6f:72:a3:99:92:bf:d7:28:b4:8d:8b:e4:53:
         f4:36:ed:6c:e0:50:f0:60:0c:a8:31:18:f8:62:c5:a4:09:d3:
         07:a1:e0:cc:18:21:a0:8e:70:f0:75:4e:06:7c:31:7b:30:eb:
         0c:77:e6:c5:95:99:91:52:17:5d:b1:ad:2e:43:c0:ab:79:29:
         bf:34:b1:0f:97:23:67:e1:a4:fe:38:c1:1b:d6:bf:b2:8d:10:
         e7:92:b1:3c:bb:51:0f:fd:c9:98:a0:de:19:b3:5a:61:b0:e7:
         c4:27:21:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----