Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a663030303a3a2f33362d3336203d3e20323639393138.roa
File:                     323830333a646438303a663030303a3a2f33362d3336203d3e20323639393138.roa (raw, json)
Hash identifier:          8SAAmezBywOcSBOU2RyfWHIcU1oESIMQNVsSkRKbX3Y=
Subject key identifier:   9D:82:38:F1:D2:B4:73:3F:31:1F:61:BF:87:C8:6D:C1:F6:69:91:43
Certificate issuer:       /CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
Certificate serial:       1F04E1F2F7A28B6C00CAD3678C77DC8955233DB3
Authority key identifier: 00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a663030303a3a2f33362d3336203d3e20323639393138.roa
Signing time:             Tue 17 Sep 2024 15:05:01 +0000
ROA not before:           Tue 17 Sep 2024 15:00:01 +0000
ROA not after:            Tue 16 Sep 2025 15:05:01 +0000
asID:                     269918
IP address blocks:        2803:dd80:f000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 04 Oct 2024 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:04:e1:f2:f7:a2:8b:6c:00:ca:d3:67:8c:77:dc:89:55:23:3d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
        Validity
            Not Before: Sep 17 15:00:01 2024 GMT
            Not After : Sep 16 15:05:01 2025 GMT
        Subject: CN=9D8238F1D2B4733F311F61BF87C86DC1F6699143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:b8:e4:68:eb:61:03:36:7a:22:04:e9:9a:
                    06:3c:25:4c:4d:bb:45:14:9f:56:61:83:b3:82:4b:
                    aa:dc:b4:50:c6:b9:4d:64:6b:60:bf:8e:47:50:06:
                    e6:6f:df:fb:14:bb:49:42:1a:49:98:44:1c:f4:3f:
                    9b:d1:51:ad:6d:57:38:76:db:2b:91:d9:83:90:3c:
                    e7:7c:1f:3a:f5:19:8c:06:4a:0d:25:6d:0b:59:6c:
                    67:b3:37:42:4c:63:55:41:ac:b7:1f:82:b4:5a:03:
                    71:59:e7:2e:1c:c6:ea:a7:d7:38:a8:8e:c6:7a:13:
                    1a:1a:6c:d7:1f:bd:17:20:7e:c0:a5:3e:b0:91:79:
                    52:6b:2d:d3:bb:48:ff:ac:01:b6:73:fb:e6:9e:8c:
                    03:7e:f6:f5:7e:d4:ed:c0:ea:df:bd:41:35:d8:17:
                    14:90:46:af:30:45:31:ea:17:5d:e2:fc:a8:44:32:
                    1a:84:f8:48:93:7e:01:22:0e:56:b3:c8:d5:28:55:
                    e7:42:57:d1:7a:e8:25:64:b4:88:af:12:e4:44:29:
                    b5:91:09:a6:68:62:5f:0d:af:dc:c1:77:fd:66:c1:
                    0a:4d:e2:0e:8f:83:23:a8:fa:0b:55:93:39:d2:6b:
                    69:92:3d:94:29:81:2f:ca:12:12:0c:bc:27:82:77:
                    84:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:82:38:F1:D2:B4:73:3F:31:1F:61:BF:87:C8:6D:C1:F6:69:91:43
            X509v3 Authority Key Identifier:
                keyid:00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a663030303a3a2f33362d3336203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8e:0d:a0:d6:73:d8:7b:33:e4:05:4b:49:57:b8:19:10:f0:e1:
         c8:88:2e:41:91:88:48:fc:9e:2d:0e:1a:fc:99:c8:80:e9:60:
         c2:59:52:cb:ff:3e:66:dd:f7:28:d4:e4:63:20:2d:6b:4f:54:
         ec:46:bc:dc:fb:01:f8:6e:2c:27:1f:4e:77:d8:3e:6d:ee:4c:
         1e:f9:1a:cb:ac:b1:f5:37:bb:5e:b5:2e:7d:38:b5:0e:76:31:
         d1:70:49:ff:74:b2:e2:61:38:e2:79:8e:e5:b7:85:2e:e9:6d:
         38:ca:3a:a6:8e:ca:9f:04:5c:f2:68:47:d5:c6:da:48:2d:38:
         1e:75:15:b8:fc:c6:e2:c3:89:a3:57:46:a1:01:ef:36:07:fc:
         c9:c0:d8:d3:39:29:48:46:3d:4d:e1:fd:c7:2b:df:88:03:0b:
         96:d3:60:38:ae:be:fd:71:37:d4:ef:40:1d:d7:09:e2:7a:46:
         2a:da:e3:14:4c:30:05:73:7b:f8:70:60:d6:97:d3:16:9c:6c:
         a3:bd:9e:1f:17:d0:12:88:f3:0c:db:fe:14:ed:35:c0:da:5a:
         4f:11:16:b2:ae:86:19:03:ad:5d:27:f3:bb:94:b1:68:61:52:
         f3:12:b9:65:a2:21:ff:5b:ac:11:c3:ab:f4:8b:e9:37:e7:0f:
         a1:70:83:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----