Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a623030303a3a2f33362d3336203d3e20323639393138.roa
File:                     323830333a646438303a623030303a3a2f33362d3336203d3e20323639393138.roa (raw, json)
Hash identifier:          A49fea9xOMf5Pa27I1xUvG81Bsf+rmUuiO87TXTdiV8=
Subject key identifier:   A9:14:C8:C4:4C:D2:5D:D4:10:D6:47:58:72:CC:60:86:06:EE:7A:6B
Certificate issuer:       /CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
Certificate serial:       03E81A6F9281304D1B8316238A6AC12A31E7E030
Authority key identifier: 00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a623030303a3a2f33362d3336203d3e20323639393138.roa
Signing time:             Tue 17 Sep 2024 15:05:00 +0000
ROA not before:           Tue 17 Sep 2024 15:00:00 +0000
ROA not after:            Tue 16 Sep 2025 15:05:00 +0000
asID:                     269918
IP address blocks:        2803:dd80:b000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 04 Oct 2024 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e8:1a:6f:92:81:30:4d:1b:83:16:23:8a:6a:c1:2a:31:e7:e0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
        Validity
            Not Before: Sep 17 15:00:00 2024 GMT
            Not After : Sep 16 15:05:00 2025 GMT
        Subject: CN=A914C8C44CD25DD410D6475872CC608606EE7A6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:87:16:04:b5:5e:a7:66:62:78:1d:68:e5:e0:
                    06:de:75:e5:e2:a0:3f:e9:78:06:1d:8c:ec:5e:7f:
                    47:fc:3c:f9:26:a6:35:f0:89:5a:b6:59:5d:9b:51:
                    7a:75:87:32:d3:80:84:6a:22:01:43:2e:85:c5:ba:
                    74:81:98:f2:26:69:81:ed:86:98:b2:38:22:09:58:
                    70:d4:74:d5:ca:cf:7f:c5:d8:7e:48:1a:a1:ac:7e:
                    2c:df:b8:26:d5:72:38:05:94:1a:dd:19:4f:31:d5:
                    89:4e:d7:ef:d7:18:02:18:f7:d9:02:7c:e2:d5:3f:
                    24:8b:35:3f:35:5b:29:79:fa:75:a7:57:3d:b2:d9:
                    69:b2:f5:ba:65:ed:b7:ec:7a:ff:9c:91:e7:93:10:
                    69:5e:39:e4:38:03:0f:65:80:78:61:23:80:9e:24:
                    9c:bd:88:28:72:73:db:50:e6:b9:4f:d6:97:12:bc:
                    21:d9:80:b3:09:f0:00:a7:2e:aa:fd:ab:5f:2e:ca:
                    c8:8d:0f:56:e5:f8:50:c0:ce:71:1e:3d:1c:f4:4b:
                    4a:11:5d:b5:43:15:3e:02:1e:6a:e0:fe:50:ca:e9:
                    d5:c3:c4:2b:41:51:e5:ff:2b:e5:f0:28:89:27:4c:
                    42:47:9a:95:33:f6:8d:14:d0:da:de:d0:07:88:67:
                    c8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:14:C8:C4:4C:D2:5D:D4:10:D6:47:58:72:CC:60:86:06:EE:7A:6B
            X509v3 Authority Key Identifier:
                keyid:00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a623030303a3a2f33362d3336203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         70:da:84:66:63:03:0b:80:f7:1f:e9:db:1e:f7:65:b0:85:47:
         67:82:f1:2d:87:ab:ab:39:fe:de:b6:65:c2:3f:1a:32:c8:50:
         fd:2a:7a:56:71:e0:ca:5c:cc:c9:9e:d1:ef:5a:bf:d0:e6:a0:
         df:2a:17:e9:8a:2b:83:95:24:b3:5a:47:b6:e3:4d:bc:c0:78:
         1f:8f:0b:e9:8e:88:e0:d5:de:5f:39:05:ac:a7:55:67:aa:1b:
         44:a7:90:79:4f:84:5c:fc:1a:a7:d1:96:c6:64:e3:4f:ac:a6:
         de:9f:83:51:57:f4:a2:e2:02:f0:11:6a:9b:05:fe:3c:1f:82:
         e2:ef:2c:83:e0:8c:5e:97:54:18:7b:aa:5b:d0:dc:93:30:3b:
         11:42:50:a7:ac:20:68:94:19:e4:1a:ec:fa:92:94:87:43:17:
         db:77:8b:c0:bb:54:a9:b7:9f:5f:df:25:5a:ef:f0:87:bd:d9:
         b8:1d:d0:d7:ba:88:7a:fa:4b:f9:da:38:e3:bc:40:ff:64:d0:
         19:c8:12:23:45:c9:ea:61:3c:54:d7:cf:0b:19:3d:53:06:43:
         9a:9d:3d:84:82:ad:f6:a9:8b:97:07:ff:b3:7c:17:6d:19:ec:
         f2:6d:8d:0d:84:85:eb:97:7c:67:d7:3e:14:00:e8:eb:11:69:
         f8:b0:96:96
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIUA+gab5KBME0bgxYjimrBKjHn4DAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA5RjVEN0YxMzg1QThGQUM0OTRDQTdCMzQ4QkU0RjBD
NjgwRTY2RjAeFw0yNDA5MTcxNTAwMDBaFw0yNTA5MTYxNTA1MDBaMDMxMTAvBgNV
BAMTKEE5MTRDOEM0NENEMjVERDQxMEQ2NDc1ODcyQ0M2MDg2MDZFRTdBNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMhxYEtV6nZmJ4HWjl4AbedeXi
oD/peAYdjOxef0f8PPkmpjXwiVq2WV2bUXp1hzLTgIRqIgFDLoXFunSBmPImaYHt
hpiyOCIJWHDUdNXKz3/F2H5IGqGsfizfuCbVcjgFlBrdGU8x1YlO1+/XGAIY99kC
fOLVPySLNT81Wyl5+nWnVz2y2Wmy9bpl7bfsev+ckeeTEGleOeQ4Aw9lgHhhI4Ce
JJy9iChyc9tQ5rlP1pcSvCHZgLMJ8ACnLqr9q18uysiND1bl+FDAznEePRz0S0oR
XbVDFT4CHmrg/lDK6dXDxCtBUeX/K+XwKIknTEJHmpUz9o0U0Nre0AeIZ8i3AgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUqRTIxEzSXdQQ1kdYcsxghgbuemswHwYDVR0j
BBgwFoAUAJ9dfxOFqPrElMp7NIvk8MaA5m8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMzI4QjE4QzU2NzZBOTM3QUNENDZEMTk1NjUwNkMxQTlE
RDc4MUYyNzBEMjk5MkM1MjlCMTc1ODVDMDY1QjU5LzAvMDA5RjVEN0YxMzg1QThG
QUM0OTRDQTdCMzQ4QkU0RjBDNjgwRTY2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMDlGNUQ3RjEzODVBOEZBQzQ5
NENBN0IzNDhCRTRGMEM2ODBFNjZGLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDMyOEIxOEM1Njc2QTkzN0FDRDQ2RDE5NTY1MDZDMUE5REQ3ODFGMjcw
RDI5OTJDNTI5QjE3NTg1QzA2NUI1OS8wLzMyMzgzMDMzM2E2NDY0MzgzMDNhNjIz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzOTMxMzgucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA92AsDANBgkqhkiG9w0BAQsFAAOCAQEAcNqEZmMDC4D3H+nbHvdlsIVH
Z4LxLYerqzn+3rZlwj8aMshQ/Sp6VnHgylzMyZ7R71q/0Oag3yoX6Yorg5Uks1pH
tuNNvMB4H48L6Y6I4NXeXzkFrKdVZ6obRKeQeU+EXPwap9GWxmTjT6ym3p+DUVf0
ouIC8BFqmwX+PB+C4u8sg+CMXpdUGHuqW9DckzA7EUJQp6wgaJQZ5Brs+pKUh0MX
23eLwLtUqbefX98lWu/wh73ZuB3Q17qIevpL+do447xA/2TQGcgSI0XJ6mE8VNfP
Cxk9UwZDmp09hIKt9qmLlwf/s3wXbRns8m2NDYSF65d8Z9c+FADo6xFp+LCWlg==
-----END CERTIFICATE-----