Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/323830333a366565303a3a2f33322d3634203d3e203237393634.roa
File:                     323830333a366565303a3a2f33322d3634203d3e203237393634.roa (raw, json)
Hash identifier:          XRWQPBN/znoJaFz/FcpIqi6SyfAZj3fcgoRNEUsJiBc=
Subject key identifier:   61:49:8D:F0:9D:68:9B:39:A2:91:11:22:E5:5B:49:2E:F2:88:4C:8C
Certificate issuer:       /CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
Certificate serial:       2CB7A156D9542991447F2DD320542C0D979007FA
Authority key identifier: 69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/323830333a366565303a3a2f33322d3634203d3e203237393634.roa
Signing time:             Tue 05 Mar 2024 18:21:11 +0000
ROA not before:           Tue 05 Mar 2024 18:16:11 +0000
ROA not after:            Tue 04 Mar 2025 18:21:11 +0000
asID:                     27964
IP address blocks:        2803:6ee0::/32 maxlen: 64

Validation:               Failed, certificate revoked on Sun 16 Jun 2024 01:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b7:a1:56:d9:54:29:91:44:7f:2d:d3:20:54:2c:0d:97:90:07:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
        Validity
            Not Before: Mar  5 18:16:11 2024 GMT
            Not After : Mar  4 18:21:11 2025 GMT
        Subject: CN=61498DF09D689B39A2911122E55B492EF2884C8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:73:1c:99:89:38:5c:2a:3c:94:7c:1d:b3:f3:
                    97:f7:19:29:51:8c:69:b3:82:14:22:8d:a3:e0:03:
                    00:c7:e6:d7:1d:5c:0b:13:aa:bf:04:c6:1d:35:34:
                    d1:68:c7:19:ca:63:03:5d:6c:ab:a3:7e:93:f1:7a:
                    ac:89:51:69:dd:25:94:fc:b3:50:86:c6:0b:e9:cc:
                    25:21:a5:2e:85:4c:68:60:16:1e:86:22:ea:08:97:
                    5c:f3:02:4d:af:4e:29:b8:bf:da:47:e9:9e:66:15:
                    fe:56:33:c4:35:7f:a9:7e:b9:9d:c2:e2:95:83:4b:
                    62:f5:65:42:08:33:fb:97:99:97:d0:bb:58:7c:e5:
                    bd:2e:14:bf:a8:c5:06:a4:63:4f:46:54:0c:dd:3e:
                    21:67:05:66:dc:70:42:ca:91:8c:fd:9d:74:ca:9f:
                    b9:54:9b:5d:7a:05:8b:4e:8f:34:58:fe:74:c9:d3:
                    a8:ab:a3:77:7a:51:e6:37:36:8c:eb:5a:d9:36:23:
                    3f:dc:96:97:b8:4d:39:de:c1:9b:c9:8c:d0:8b:9c:
                    b4:70:a6:9c:e9:88:35:b5:ff:68:a9:d2:5a:db:98:
                    b0:6d:c3:7c:f6:4f:48:c4:21:f0:32:25:51:a7:36:
                    f2:21:e2:24:14:51:b0:1b:61:20:51:5d:7c:23:52:
                    93:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:49:8D:F0:9D:68:9B:39:A2:91:11:22:E5:5B:49:2E:F2:88:4C:8C
            X509v3 Authority Key Identifier:
                keyid:69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/323830333a366565303a3a2f33322d3634203d3e203237393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:ac:e0:e3:47:ba:01:d4:34:d1:3f:c7:95:19:11:52:02:23:
         dc:98:07:3f:1e:5e:04:87:9f:17:c1:91:2d:a3:ab:92:b7:de:
         83:6c:45:4b:06:04:96:e8:5a:1a:6d:9b:d1:8d:73:85:8e:47:
         f7:c9:57:53:08:31:6d:32:e1:8c:1e:c6:e6:08:62:78:05:df:
         34:cb:1b:8b:ad:bd:ef:1c:45:18:36:7e:51:61:e2:3e:93:74:
         1a:03:5b:c1:23:6f:3b:4b:3c:e4:ec:a9:49:d6:45:3f:73:f6:
         ae:fb:54:a5:6c:a8:e0:fc:59:12:8b:49:7f:84:01:22:9d:b7:
         d7:1c:a6:81:5b:8d:23:d1:23:a2:d4:dd:74:98:1b:93:8c:06:
         b4:e2:f3:eb:17:a6:d1:03:70:7b:ab:08:64:eb:e8:7a:9e:02:
         c6:bc:14:fc:7b:f5:9b:f1:54:ce:99:30:5a:df:98:55:e4:6a:
         47:2b:f8:4e:6a:a1:28:e7:83:ee:05:85:51:b9:ec:b7:c3:6f:
         56:94:80:d6:55:0f:ad:c8:b8:99:e3:5a:db:a3:8d:0f:ed:a5:
         da:6e:d3:1b:73:bd:42:38:bb:70:28:5b:d2:21:34:c5:83:32:
         37:fc:88:30:c9:80:28:6b:a6:d3:f8:ff:8e:9a:91:fb:a1:05:
         1f:55:0f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----