Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a653030303a3a2f33362d3336203d3e20323639393138.roa
File:                     323830333a646438303a653030303a3a2f33362d3336203d3e20323639393138.roa (raw, json)
Hash identifier:          EDb8DvkBvT98KzeddhV2hFNV3BmO1WtR3nactBjQbeg=
Subject key identifier:   FD:E9:C8:52:A4:AC:4E:9F:36:74:3C:9E:6B:C4:A9:BD:3E:67:12:EF
Certificate issuer:       /CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
Certificate serial:       09EAD180BCD4C93C74502817A8F4ECB601CABAE4
Authority key identifier: 00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a653030303a3a2f33362d3336203d3e20323639393138.roa
Signing time:             Tue 17 Sep 2024 15:05:04 +0000
ROA not before:           Tue 17 Sep 2024 15:00:04 +0000
ROA not after:            Tue 16 Sep 2025 15:05:04 +0000
asID:                     269918
IP address blocks:        2803:dd80:e000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 04 Oct 2024 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ea:d1:80:bc:d4:c9:3c:74:50:28:17:a8:f4:ec:b6:01:ca:ba:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
        Validity
            Not Before: Sep 17 15:00:04 2024 GMT
            Not After : Sep 16 15:05:04 2025 GMT
        Subject: CN=FDE9C852A4AC4E9F36743C9E6BC4A9BD3E6712EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:ec:64:00:b4:82:e3:2a:e8:22:db:25:bc:
                    12:68:8f:97:5a:07:60:97:01:2a:21:ca:c5:eb:ba:
                    4e:75:78:b6:24:12:2f:a4:b3:b4:0e:2c:c9:fa:d4:
                    1a:2d:44:4a:89:da:e8:46:67:3c:93:cc:a3:1f:ba:
                    97:1d:79:ff:0d:59:07:e2:ec:9f:2e:49:20:21:a9:
                    a9:bc:9c:0f:c3:fb:27:41:f7:d5:70:d3:f7:0c:e6:
                    b0:60:cc:e5:ab:0a:4b:5a:9e:a3:37:46:df:da:7b:
                    ee:ad:19:fe:3d:d5:60:4b:6d:b3:fa:25:55:7b:95:
                    0f:c4:85:9f:e1:62:eb:59:53:63:d0:67:e1:04:1d:
                    0f:2b:f0:e3:77:66:50:5d:71:82:9a:d5:de:a1:03:
                    cd:ad:18:59:28:6f:0f:01:1f:13:3e:f2:47:e1:34:
                    e2:b7:2d:6f:bf:9a:73:4f:98:cf:46:ae:a6:be:d3:
                    21:16:4b:93:4a:30:75:a4:df:dc:e2:78:0b:19:26:
                    ae:48:55:b0:4c:73:e1:61:6e:93:55:05:77:e2:7a:
                    f1:c1:ae:a7:09:a6:6e:eb:19:0b:88:76:9b:e5:06:
                    b4:1d:d3:c9:d2:30:47:44:68:a5:04:1e:26:b7:79:
                    62:b0:22:8b:ee:14:ec:43:97:45:5d:c0:11:4f:1f:
                    dc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E9:C8:52:A4:AC:4E:9F:36:74:3C:9E:6B:C4:A9:BD:3E:67:12:EF
            X509v3 Authority Key Identifier:
                keyid:00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a653030303a3a2f33362d3336203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         90:92:93:1a:52:c2:39:26:57:61:55:4c:a1:17:18:47:f1:6b:
         70:d3:45:a3:54:b5:b1:72:08:15:72:40:a9:54:49:bf:5a:b7:
         8c:0f:37:a7:74:18:7b:23:41:de:11:4a:30:89:ce:2d:73:cd:
         4e:2a:30:b9:5f:b9:09:21:e7:c9:d2:0b:ff:25:e6:b4:35:45:
         57:52:6d:d4:13:51:e0:2c:16:8d:53:e4:6d:ee:1b:27:51:fb:
         61:c2:54:d9:76:d8:07:87:b2:ec:cf:61:7a:70:3f:9d:3d:b6:
         b0:c2:a9:1d:fb:2c:5f:40:fa:fd:22:9c:b8:d3:a9:63:47:15:
         d8:2a:86:bc:33:f6:64:99:db:13:f0:f6:df:2a:de:d8:f3:69:
         01:10:bc:43:d9:d4:a2:43:a6:10:14:a0:46:55:f3:fc:ff:8d:
         6d:87:18:dd:06:12:b6:f8:c4:4f:3a:13:f1:8e:dd:ca:d5:88:
         35:c6:52:48:ea:8a:9c:79:d6:c8:24:1b:04:dd:be:6a:2a:3e:
         69:ee:4d:62:64:cd:4e:71:7c:7b:ac:75:89:67:3c:e4:c5:f7:
         70:a8:ac:0a:2c:ae:b4:1d:33:6c:af:70:0c:7d:25:85:40:30:
         fc:c8:a0:d4:1c:56:53:eb:46:37:1b:a3:02:af:ef:63:e5:16:
         9c:ea:81:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----