Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086296C1CEE54B18BB2DC1FAE50C6A216318CFA5EE30DFC70BE0C8240CAC89A4/0/323830333a393035303a3a2f33322d3332203d3e20323733303937.roa
File:                     323830333a393035303a3a2f33322d3332203d3e20323733303937.roa (raw, json)
Hash identifier:          ziS/DP6LQh1QQOlbYgczv9UksIOUCP+uBTqyaw2MX3E=
Subject key identifier:   34:24:90:E8:F5:CF:C3:0E:03:3E:5D:CD:45:61:84:D9:67:00:8C:73
Certificate issuer:       /CN=06ED0ED732E4FA6FFDCF295D970EE30AA4C6F0F5
Certificate serial:       08E46FC22858206711CF2A57F6DF200FE353999A
Authority key identifier: 06:ED:0E:D7:32:E4:FA:6F:FD:CF:29:5D:97:0E:E3:0A:A4:C6:F0:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06ED0ED732E4FA6FFDCF295D970EE30AA4C6F0F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086296C1CEE54B18BB2DC1FAE50C6A216318CFA5EE30DFC70BE0C8240CAC89A4/0/323830333a393035303a3a2f33322d3332203d3e20323733303937.roa
Signing time:             Mon 02 Dec 2024 18:35:00 +0000
ROA not before:           Mon 02 Dec 2024 18:30:00 +0000
ROA not after:            Mon 01 Dec 2025 18:35:00 +0000
asID:                     273097
IP address blocks:        2803:9050::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 09 Dec 2024 16:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e4:6f:c2:28:58:20:67:11:cf:2a:57:f6:df:20:0f:e3:53:99:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06ED0ED732E4FA6FFDCF295D970EE30AA4C6F0F5
        Validity
            Not Before: Dec  2 18:30:00 2024 GMT
            Not After : Dec  1 18:35:00 2025 GMT
        Subject: CN=342490E8F5CFC30E033E5DCD456184D967008C73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:40:4e:87:ce:17:18:46:d1:d1:8a:74:7e:97:
                    95:b2:7f:ed:bd:d5:89:d2:90:ed:08:ac:26:03:96:
                    f3:6a:82:95:9e:57:75:d2:d1:05:15:91:13:b3:de:
                    bb:23:98:b9:ce:00:f4:a9:09:2f:77:7c:95:d1:4d:
                    e1:6a:91:87:30:16:db:8d:b5:36:d4:f9:39:86:af:
                    e6:db:b4:72:ac:34:88:46:69:0f:e6:27:21:a9:ac:
                    d6:59:ef:c4:e3:84:83:29:64:3f:35:e9:99:8f:e8:
                    f0:89:25:f7:4c:c6:43:5b:20:8b:0e:ee:f6:b9:3a:
                    62:65:04:8a:a1:fa:5a:43:8f:55:77:53:3d:39:da:
                    36:3e:9b:7d:e9:d4:5a:be:a6:37:42:fc:ad:65:1b:
                    1c:25:73:3e:ef:59:b9:37:1c:60:b9:88:7e:62:a5:
                    a9:45:89:12:2e:9e:bd:ba:1c:32:11:ac:e2:9f:11:
                    55:88:8a:ab:5e:b5:43:a9:75:f1:56:81:01:3a:bc:
                    23:2d:77:0b:00:ae:16:dd:76:62:c2:87:17:75:db:
                    40:33:e6:6f:0d:d1:b1:ba:58:ba:28:f4:86:dd:4d:
                    35:b6:23:5a:3c:19:2f:c3:ec:d1:c9:5a:55:a6:a1:
                    0b:2a:08:ce:fd:25:bd:19:62:1f:1a:7a:9a:3a:58:
                    ba:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:24:90:E8:F5:CF:C3:0E:03:3E:5D:CD:45:61:84:D9:67:00:8C:73
            X509v3 Authority Key Identifier:
                keyid:06:ED:0E:D7:32:E4:FA:6F:FD:CF:29:5D:97:0E:E3:0A:A4:C6:F0:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086296C1CEE54B18BB2DC1FAE50C6A216318CFA5EE30DFC70BE0C8240CAC89A4/0/06ED0ED732E4FA6FFDCF295D970EE30AA4C6F0F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06ED0ED732E4FA6FFDCF295D970EE30AA4C6F0F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086296C1CEE54B18BB2DC1FAE50C6A216318CFA5EE30DFC70BE0C8240CAC89A4/0/323830333a393035303a3a2f33322d3332203d3e20323733303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9050::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:34:3a:65:f1:a6:93:1a:d1:12:34:57:cf:53:8b:46:d3:c7:
         18:c9:c7:f0:f6:8f:c1:61:d4:37:e9:3e:15:a0:a3:38:48:d9:
         ba:ba:f4:2e:df:f5:fb:8e:3d:80:c4:0f:61:c4:5d:15:30:1c:
         ea:8d:7a:4e:1b:14:c3:3a:17:6f:c1:b9:82:18:bf:36:8e:1b:
         55:d4:d5:da:5a:c6:8f:ca:e3:14:c3:f0:09:63:e0:f5:94:55:
         7d:63:62:c6:49:d3:d7:f0:17:6f:68:42:eb:c6:6b:96:52:aa:
         29:76:d7:fa:8e:42:e7:e0:25:8f:43:e3:ca:05:75:04:48:44:
         f7:7f:ec:0a:43:cc:3d:0b:43:30:7c:56:c5:9c:0d:32:8b:9d:
         5c:46:9d:11:59:89:ad:81:3d:5b:bd:c7:b4:4a:81:0e:cf:a5:
         24:8b:bd:6c:38:29:e8:90:ff:87:fa:36:e9:a9:6d:e5:8c:61:
         07:5b:5c:0c:cd:39:0e:a3:b6:1b:09:d5:78:a6:17:dc:c0:84:
         a5:68:1f:16:3e:1e:39:3b:04:ca:5e:94:7b:31:93:f5:73:2d:
         84:59:40:4d:d6:61:6a:16:de:02:ef:c5:b3:f0:6b:93:56:e4:
         8c:36:4a:26:bf:6b:99:0c:c3:36:ed:04:c1:ee:20:bd:33:7d:
         3e:e7:fb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----