Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/323830333a366565303a3a2f33322d3438203d3e203438343635.roa
File:                     323830333a366565303a3a2f33322d3438203d3e203438343635.roa (raw, json)
Hash identifier:          GLnYzJU9bid4CDmYpt4JZkeIO3rz7To0tT2U0uabs9o=
Subject key identifier:   B9:71:09:90:AE:30:FC:45:37:AF:54:1E:74:65:DB:11:99:1C:5A:A2
Certificate issuer:       /CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
Certificate serial:       3C96FE05550D119CB7D9D49BA21D2BFA2705A90F
Authority key identifier: 69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/323830333a366565303a3a2f33322d3438203d3e203438343635.roa
Signing time:             Sun 16 Jun 2024 01:45:00 +0000
ROA not before:           Sun 16 Jun 2024 01:40:00 +0000
ROA not after:            Sun 15 Jun 2025 01:45:00 +0000
asID:                     48465
IP address blocks:        2803:6ee0::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 17 Jun 2024 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:96:fe:05:55:0d:11:9c:b7:d9:d4:9b:a2:1d:2b:fa:27:05:a9:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
        Validity
            Not Before: Jun 16 01:40:00 2024 GMT
            Not After : Jun 15 01:45:00 2025 GMT
        Subject: CN=B9710990AE30FC4537AF541E7465DB11991C5AA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1b:ad:de:3b:5e:c7:91:9d:61:2d:d0:cc:36:
                    bd:3e:48:1e:51:26:b3:1b:a8:c7:95:5d:3b:82:dd:
                    05:32:c6:a8:c9:15:3b:fc:f2:a2:dc:b4:45:e7:f9:
                    fd:c1:69:c4:31:e3:99:cd:10:54:15:a2:21:11:3b:
                    76:3a:67:8b:73:eb:ec:77:38:70:dc:e2:72:c1:61:
                    0a:77:c2:cf:63:13:27:20:81:66:e0:8d:d2:f7:01:
                    44:18:2f:4d:6c:7c:d0:58:cf:96:38:91:92:b8:a1:
                    46:7b:2d:20:72:1d:8f:a2:85:af:2d:9f:2a:bc:d8:
                    f0:66:e9:34:5c:8d:91:3c:75:b9:c3:e2:be:df:5b:
                    ac:77:18:32:d2:44:d0:1c:b0:4e:58:8d:42:87:fb:
                    e5:da:0d:2d:d5:4b:02:6f:fd:4d:c1:90:40:8e:64:
                    8a:b7:a8:a4:10:14:57:e3:49:6c:f0:92:08:ff:fb:
                    15:f1:47:1f:dc:5e:b2:85:cf:70:95:4c:03:05:c0:
                    ac:7f:b7:02:6a:c8:09:71:4b:89:4f:1c:73:62:5b:
                    1c:e8:7a:b5:f9:15:dd:29:82:52:4b:c2:b5:f3:9c:
                    e2:81:45:a7:0f:45:6a:5a:06:d6:c5:66:92:2f:39:
                    21:89:fa:92:72:15:80:ce:21:bb:dc:e3:80:7a:95:
                    3b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:71:09:90:AE:30:FC:45:37:AF:54:1E:74:65:DB:11:99:1C:5A:A2
            X509v3 Authority Key Identifier:
                keyid:69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/323830333a366565303a3a2f33322d3438203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:c2:f2:33:5c:da:2a:f4:ff:c2:69:a9:a0:85:9c:7c:3e:81:
         b7:e2:dc:00:4d:f0:4c:f9:db:68:51:8e:8b:dc:86:76:7b:ca:
         b8:34:bc:65:7e:ae:aa:54:7a:81:db:4c:79:3a:8d:36:9d:59:
         37:fa:05:8d:ac:b3:34:e7:00:a6:7f:5e:b2:bd:a5:e7:08:93:
         91:01:de:bd:6e:34:48:62:b9:11:13:c6:a0:77:a7:75:9d:f7:
         ff:e8:13:9e:83:85:8e:96:9e:b1:35:a8:00:77:36:4f:28:7e:
         55:47:68:bd:b2:bf:bf:2a:d4:8c:4f:2a:c3:38:c6:db:0b:7f:
         6f:77:71:10:7f:96:0f:52:26:b6:f4:c2:5e:a8:66:ae:ca:c0:
         4a:31:de:19:55:89:45:bc:38:50:f2:06:f7:93:c5:0f:7c:b6:
         dc:9b:3f:96:2c:d4:03:3d:59:d1:0d:2d:7f:f4:e8:2c:05:5d:
         92:9e:8c:97:1e:e0:be:71:db:7e:89:20:63:67:f6:14:c0:c3:
         86:48:b3:d2:3e:41:d1:c7:af:f7:7e:7e:93:bc:88:ed:a9:4d:
         03:4b:48:d8:90:9c:ec:9f:30:95:6c:af:0c:87:a3:20:84:88:
         ef:f8:e5:65:79:f2:b5:a5:56:b3:e9:86:54:25:ba:36:ed:4c:
         83:85:00:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----