Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a633030303a3a2f33362d3336203d3e20323639393138.roa
File:                     323830333a646438303a633030303a3a2f33362d3336203d3e20323639393138.roa (raw, json)
Hash identifier:          5C+32TgX7JMOXUJ9GNRP+TJ35pRm2hYv4zkQowYrqyE=
Subject key identifier:   11:75:70:7B:48:6D:DB:E0:0E:26:C2:92:13:E7:EF:34:20:B3:BC:A5
Certificate issuer:       /CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
Certificate serial:       58C523496F24A276023F314718E296EB7BC128B7
Authority key identifier: 00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a633030303a3a2f33362d3336203d3e20323639393138.roa
Signing time:             Tue 17 Sep 2024 15:05:00 +0000
ROA not before:           Tue 17 Sep 2024 15:00:00 +0000
ROA not after:            Tue 16 Sep 2025 15:05:00 +0000
asID:                     269918
IP address blocks:        2803:dd80:c000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 04 Oct 2024 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c5:23:49:6f:24:a2:76:02:3f:31:47:18:e2:96:eb:7b:c1:28:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
        Validity
            Not Before: Sep 17 15:00:00 2024 GMT
            Not After : Sep 16 15:05:00 2025 GMT
        Subject: CN=1175707B486DDBE00E26C29213E7EF3420B3BCA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8e:12:04:ae:e5:da:f6:bb:65:cb:3f:17:31:
                    65:f0:f4:ac:2e:70:ef:c1:dd:99:c2:27:c6:86:ba:
                    59:15:be:2b:0a:8f:5c:cb:69:ba:51:b6:ca:51:b3:
                    f5:9f:6c:16:9e:75:e8:56:2a:f4:c0:6a:31:90:04:
                    36:7c:a7:c3:1f:39:bc:90:e1:3f:9b:d7:11:34:49:
                    ef:7e:c6:3a:0d:7c:d6:76:d2:74:6f:70:75:d6:28:
                    36:47:f0:ae:e1:a9:a8:2c:be:38:ca:1e:99:c0:c6:
                    d0:f9:5c:40:06:92:08:88:36:c0:ad:5e:06:69:a6:
                    3a:38:e8:85:7a:4e:f2:84:7c:d6:ec:b0:e9:1b:3b:
                    c6:19:ba:62:14:cf:00:dd:e4:70:71:b8:90:8f:92:
                    4e:9d:57:f8:49:48:4f:01:01:ae:de:8f:ac:9f:32:
                    67:5a:bb:38:0b:8e:f9:11:17:4f:47:e9:84:4e:52:
                    7b:03:69:2d:19:77:6a:c1:02:c7:09:ed:2c:69:f8:
                    ea:c8:0c:aa:9e:27:dc:03:57:be:fe:5e:0f:5a:41:
                    1a:62:59:61:fd:24:f2:36:7e:ca:98:42:b3:ca:b4:
                    ca:0a:ed:bf:49:68:9a:fd:e0:3a:c0:79:e9:17:a0:
                    5b:26:ed:78:fa:f5:d3:c4:ce:83:83:01:ac:b6:7a:
                    c8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:75:70:7B:48:6D:DB:E0:0E:26:C2:92:13:E7:EF:34:20:B3:BC:A5
            X509v3 Authority Key Identifier:
                keyid:00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a633030303a3a2f33362d3336203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         39:fa:db:b1:ad:9c:75:53:a9:41:3a:5a:7b:f0:c0:af:f0:1f:
         fe:5c:eb:2d:4a:c5:eb:9a:e0:70:bf:c4:47:9f:fb:04:de:ce:
         64:b3:4e:e0:26:92:95:2b:3f:99:1e:ac:68:1b:cd:42:ff:9a:
         ba:d0:38:b1:6c:d9:cd:e0:91:ae:78:c6:87:b7:2a:a2:8c:a5:
         a0:03:47:07:6f:d6:23:46:2c:83:ca:03:b3:74:b5:1b:87:4a:
         e7:14:70:50:3f:1d:b4:c0:79:53:30:5d:c6:7e:c1:e4:84:b4:
         f4:33:87:1a:9c:27:2c:05:5c:0c:b2:06:7e:50:e5:67:ac:45:
         3e:e1:a0:7b:fe:b5:cc:30:2a:81:4a:54:86:ef:15:3c:b1:6a:
         21:86:36:bd:59:bf:a4:06:fb:e4:cb:48:79:d6:fe:9d:9e:dc:
         2c:fd:61:4f:72:83:14:a5:17:c2:1a:9e:78:7f:8e:aa:fc:55:
         d5:5d:7a:81:5e:c3:d3:26:2f:86:7c:ce:e4:6f:7d:ab:e6:0b:
         13:04:db:d4:df:6f:9c:67:6a:68:0c:9f:60:9b:83:4f:b0:9d:
         7c:ed:a1:26:9b:54:01:5b:63:5b:81:d3:69:b9:bb:00:c8:f8:
         e5:1f:13:5a:0d:fa:55:b4:fc:68:31:8d:d0:ca:26:06:55:5f:
         7f:66:2f:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----