Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a373030303a3a2f33362d3336203d3e20323639393138.roa
File:                     323830333a646438303a373030303a3a2f33362d3336203d3e20323639393138.roa (raw, json)
Hash identifier:          GUc+VXDsXJcQLGz4+Y+Cz5VEj1fX+sfLWd/AdUx1RrA=
Subject key identifier:   E7:FC:14:45:3F:E8:E6:41:22:BA:CE:9B:27:41:E1:59:80:D8:1D:77
Certificate issuer:       /CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
Certificate serial:       7BF95DD23D901776CA2076C47427AF9C917E7B2B
Authority key identifier: 00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a373030303a3a2f33362d3336203d3e20323639393138.roa
Signing time:             Tue 17 Sep 2024 15:05:03 +0000
ROA not before:           Tue 17 Sep 2024 15:00:03 +0000
ROA not after:            Tue 16 Sep 2025 15:05:03 +0000
asID:                     269918
IP address blocks:        2803:dd80:7000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 04 Oct 2024 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f9:5d:d2:3d:90:17:76:ca:20:76:c4:74:27:af:9c:91:7e:7b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
        Validity
            Not Before: Sep 17 15:00:03 2024 GMT
            Not After : Sep 16 15:05:03 2025 GMT
        Subject: CN=E7FC14453FE8E64122BACE9B2741E15980D81D77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:91:b4:3a:b3:9d:1f:e5:97:9e:2c:2f:ec:ee:
                    92:9e:a4:a0:72:2f:40:d7:1e:84:c4:a9:6f:e4:1b:
                    03:05:63:63:0a:7a:c7:93:8d:e5:dd:49:ea:06:33:
                    6f:7a:4d:83:a2:1e:30:1a:fb:7e:ab:3d:34:6f:35:
                    e6:27:37:74:c0:ad:b9:d3:ea:62:fb:f2:2c:a1:3b:
                    3f:3e:b3:e2:c3:dd:00:ab:cc:fe:74:0d:d6:08:07:
                    99:2f:8f:4c:8f:1b:12:86:b9:9d:5f:99:8b:98:4c:
                    52:7a:c9:33:30:eb:e2:ee:f6:2c:8b:a8:a8:45:25:
                    21:1e:30:4d:eb:e2:3d:a9:7e:e5:b7:1f:2a:c7:da:
                    c9:b3:ff:fa:56:d5:12:91:7e:43:ce:97:5b:62:5a:
                    22:fc:47:11:b9:1f:62:b8:b8:2a:2b:f6:b1:c2:25:
                    bd:3a:a4:39:c5:61:7c:8d:87:8c:47:2b:3b:68:16:
                    6e:5c:0c:18:7f:24:de:bb:2b:5f:24:cf:60:d0:61:
                    fe:af:90:63:35:b6:8f:8a:e4:6f:82:f0:f6:ed:33:
                    e5:49:e2:73:6f:d3:10:d1:00:c9:0a:0e:a0:10:c7:
                    bc:e5:e8:7a:47:1f:6d:70:30:90:af:dd:da:e5:9f:
                    4b:30:ae:e2:19:ca:b3:56:6b:41:c6:b4:93:c6:1c:
                    59:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FC:14:45:3F:E8:E6:41:22:BA:CE:9B:27:41:E1:59:80:D8:1D:77
            X509v3 Authority Key Identifier:
                keyid:00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a373030303a3a2f33362d3336203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         86:e1:d9:4e:48:a0:ec:4d:7f:cf:b3:a8:fd:eb:4f:d4:10:e0:
         e9:db:28:b3:5b:33:5a:41:d1:b1:40:91:22:db:ab:46:25:4c:
         58:bd:cb:ac:8f:76:30:47:00:d5:85:df:a5:91:1e:7a:66:00:
         63:fe:e2:e0:b0:e1:ef:90:12:e5:c7:92:08:8a:6c:07:4a:32:
         13:16:28:5d:da:38:6a:5a:f0:05:5b:c4:83:d3:c6:a1:8b:99:
         76:67:f6:4a:fe:27:f8:5b:69:10:f9:d5:97:56:14:ef:3f:85:
         6a:89:fd:95:2e:df:38:bd:92:9d:f6:ac:b7:46:e5:55:0b:e2:
         ed:3e:09:ed:2e:42:b4:03:5b:7c:10:c4:54:b7:45:aa:6a:79:
         9f:b1:d4:3b:ca:0b:71:fc:1b:de:23:24:14:fe:e5:ec:0f:af:
         8a:e7:f4:82:ca:f9:5a:5e:35:a7:73:dc:a7:e6:dc:f8:29:9c:
         65:41:15:8b:34:e9:6c:02:92:9a:9b:98:03:1b:27:83:b4:e7:
         01:d5:fd:e2:26:f0:77:50:8d:af:47:e4:9e:51:8b:54:33:b1:
         6d:ab:a6:d3:24:74:cb:d6:ee:3b:54:ed:45:06:91:07:2e:92:
         14:92:c5:48:9b:7f:e3:47:18:9c:90:d8:5a:9d:a8:e4:34:0b:
         09:92:6a:8b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----