Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a3a2f33322d3336203d3e20323733383433.roa
File:                     323830333a623935303a3a2f33322d3336203d3e20323733383433.roa (raw, json)
Hash identifier:          +daiLvw8RuuuKJjW+YXuSJBFaPHingHXWN8nmi4N1IA=
Subject key identifier:   99:16:D2:FB:7C:62:77:43:C8:A1:A8:56:53:20:26:39:67:64:C3:67
Certificate issuer:       /CN=6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B
Certificate serial:       0CAA7FFF2C1740AC4D99B6C3379704A637A82EB2
Authority key identifier: 6A:7C:2E:8A:34:57:84:5B:DA:C3:CD:C5:F3:46:F0:D6:BA:4E:7D:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a3a2f33322d3336203d3e20323733383433.roa
Signing time:             Thu 30 May 2024 15:45:00 +0000
ROA not before:           Thu 30 May 2024 15:40:00 +0000
ROA not after:            Thu 29 May 2025 15:45:00 +0000
asID:                     273843
IP address blocks:        2803:b950::/32 maxlen: 36

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:aa:7f:ff:2c:17:40:ac:4d:99:b6:c3:37:97:04:a6:37:a8:2e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B
        Validity
            Not Before: May 30 15:40:00 2024 GMT
            Not After : May 29 15:45:00 2025 GMT
        Subject: CN=9916D2FB7C627743C8A1A856532026396764C367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:15:48:e2:62:79:4b:6d:d1:10:b8:48:39:fb:
                    6e:ad:66:48:6b:3e:af:94:c1:9c:33:32:01:10:e6:
                    8e:17:bc:f2:72:eb:f2:d7:a1:61:b5:a6:e7:e2:76:
                    d4:65:85:85:5e:e0:a4:ca:98:f9:38:49:b8:23:73:
                    76:35:56:86:bd:40:6b:11:c7:7a:27:1d:7f:cc:7a:
                    90:ce:62:46:5b:68:94:3b:ad:a9:03:bd:e7:10:5d:
                    e0:46:5f:7c:d5:bd:cf:88:d4:ec:06:05:46:54:f7:
                    ab:05:e0:ee:ca:54:1c:3e:82:d1:ad:59:59:95:e0:
                    77:59:ef:fc:d0:e6:9f:4f:58:e3:c2:d5:bb:f8:b0:
                    7e:c7:36:88:6e:2d:a6:31:cb:8c:e4:36:26:1c:ec:
                    e7:bd:47:14:74:0e:92:c6:16:32:60:4f:a7:cc:e3:
                    fa:91:cf:2f:e4:d3:97:69:b4:d9:38:14:41:bb:1e:
                    18:2d:9a:72:0a:fb:80:b6:ed:95:f6:14:c7:56:9a:
                    5d:b2:f6:20:95:f2:cf:0f:ca:c9:8b:ce:f0:23:d5:
                    a9:45:65:b7:af:34:3c:5a:20:9c:d6:84:3b:aa:59:
                    49:9e:02:ae:80:c2:c3:9e:ef:3a:af:f8:9b:06:49:
                    dd:5f:33:18:89:b3:63:cc:28:a9:94:ed:88:42:e4:
                    e9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:16:D2:FB:7C:62:77:43:C8:A1:A8:56:53:20:26:39:67:64:C3:67
            X509v3 Authority Key Identifier:
                keyid:6A:7C:2E:8A:34:57:84:5B:DA:C3:CD:C5:F3:46:F0:D6:BA:4E:7D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A7C2E8A3457845BDAC3CDC5F346F0D6BA4E7D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D1F4438B683413F798C1D702F449F2637FD855D3B5B084FC60D9F975A89A109/0/323830333a623935303a3a2f33322d3336203d3e20323733383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b950::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:b1:2a:9e:35:3a:1c:0a:a0:a0:54:63:39:e8:65:49:6a:a0:
         32:b2:6d:69:fa:e9:b9:63:54:16:61:69:c2:97:39:47:c0:b3:
         11:73:11:3f:b5:38:f9:a6:4e:8d:53:4a:db:7c:b2:dd:ac:16:
         84:77:12:5d:d9:be:31:d3:27:3a:24:7f:9f:8e:f4:1a:65:f2:
         ab:f3:50:31:de:f9:b8:9f:89:dc:26:f7:25:ac:af:d6:8a:cd:
         07:0e:b9:2b:40:4a:cd:0c:62:88:26:24:4d:f5:08:9f:be:e5:
         bc:b5:1c:1a:c6:b0:ac:09:49:4e:17:b5:c8:95:61:57:40:53:
         dc:c2:f8:de:09:5a:73:ae:a0:9f:51:a7:c8:b6:73:8a:3a:fb:
         0e:59:f2:dd:ef:6e:6e:a2:0f:ec:91:a7:03:ea:52:94:7c:ff:
         07:c2:63:6d:d3:f9:95:1e:f7:bd:aa:56:73:9c:ad:e0:da:a6:
         7a:e7:45:b5:5e:a7:4c:b6:d3:6a:75:0a:a7:d0:d0:bd:a0:0e:
         30:29:68:22:81:30:6f:67:e6:9c:47:af:d0:04:f5:a6:be:13:
         54:32:de:a7:01:81:72:3b:18:81:71:74:71:fe:68:93:8e:77:
         8c:1e:4e:ba:b0:cc:be:1c:23:86:42:60:13:83:e5:a4:84:55:
         d6:ba:fe:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----