Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323830313a3136383a333a3a2f34382d3438203d3e203634313036.roa
File:                     323830313a3136383a333a3a2f34382d3438203d3e203634313036.roa (raw, json)
Hash identifier:          wLDUq+m27rBkDeOOEgIZZlsUmjaByXA2nv5V1/epJGY=
Subject key identifier:   43:0F:E6:C5:49:CD:9E:72:09:71:43:EE:A8:C1:68:12:0C:36:F2:E2
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       7D2FF767AEFD0039346334392AFC294F1781C842
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323830313a3136383a333a3a2f34382d3438203d3e203634313036.roa
Signing time:             Tue 05 Mar 2024 18:15:57 +0000
ROA not before:           Tue 05 Mar 2024 18:10:57 +0000
ROA not after:            Tue 04 Mar 2025 18:15:57 +0000
asID:                     64106
IP address blocks:        2801:168:3::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 14 May 2024 13:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2f:f7:67:ae:fd:00:39:34:63:34:39:2a:fc:29:4f:17:81:c8:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:10:57 2024 GMT
            Not After : Mar  4 18:15:57 2025 GMT
        Subject: CN=430FE6C549CD9E72097143EEA8C168120C36F2E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:56:87:76:97:6b:2c:1a:21:e9:7c:3c:37:9b:
                    43:59:5d:03:2f:52:93:59:c8:d0:37:f0:46:b7:b0:
                    9f:e7:df:7d:39:c7:96:0f:d1:6f:e9:25:d3:a8:52:
                    a9:b1:2f:d9:ed:d8:01:0f:0f:3e:80:77:f4:ab:8c:
                    de:5b:38:ff:df:2d:87:f8:6b:8e:4f:d4:29:c0:78:
                    81:dc:4d:08:b9:54:d0:a3:f1:2e:3e:67:12:65:3f:
                    c4:42:1f:f3:eb:38:3f:94:1a:45:46:27:0a:5a:ca:
                    11:5c:79:f8:a3:a7:70:74:50:7b:7f:18:07:7a:c3:
                    c2:d6:ec:3a:fa:cf:b1:1c:4c:95:f1:16:cb:38:b2:
                    a5:c8:b8:6c:2f:8d:58:d5:5b:29:2f:10:9d:3d:7a:
                    8f:5d:22:85:73:6c:93:b8:4a:47:15:81:d4:6f:9d:
                    59:c7:6c:62:06:f2:06:aa:7e:32:76:97:07:ba:11:
                    b0:fa:52:28:68:d8:8d:e8:85:c6:d1:d5:c4:68:2d:
                    4b:e5:80:46:79:18:d4:e8:f6:2c:06:fb:ec:f3:68:
                    8b:c0:7b:03:35:8e:22:50:1c:29:3f:13:e3:55:78:
                    dc:6b:4e:f0:e6:4e:9b:c2:15:8e:ff:3d:23:b9:e5:
                    75:68:1e:65:13:55:22:c7:81:a5:ea:cc:db:a3:c0:
                    fd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0F:E6:C5:49:CD:9E:72:09:71:43:EE:A8:C1:68:12:0C:36:F2:E2
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323830313a3136383a333a3a2f34382d3438203d3e203634313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:168:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:68:f7:91:4f:ac:80:04:4c:54:47:47:13:4b:ae:74:59:75:
         d2:8d:04:3c:34:8f:a7:60:37:3e:51:49:96:f3:02:fc:96:4f:
         16:2d:a0:bc:7f:6d:ac:20:21:a7:3a:d3:0e:86:f4:57:2b:01:
         01:0b:ff:5a:93:3a:0a:0d:d5:80:78:84:e4:4b:d3:d0:e3:81:
         42:4c:e4:6a:2e:d7:9a:24:af:54:83:7d:dd:b5:a4:33:fe:a1:
         df:8f:b5:44:82:b2:df:3b:dd:de:31:c9:5e:f1:fa:64:72:da:
         8d:9f:e9:d3:82:91:1e:8c:00:a9:c0:f0:b2:c5:3e:e1:3f:cc:
         a1:07:df:de:3a:b0:b3:3f:0e:ca:eb:3e:d2:a3:18:c3:38:03:
         0d:62:bb:9c:5c:96:54:ff:f6:6f:86:86:b3:6a:6a:e3:23:49:
         56:f1:46:7d:64:02:ed:81:2c:8e:bc:02:43:67:b3:37:ed:9e:
         0b:20:b7:91:a9:58:dc:09:d2:bb:b2:5f:7b:27:0a:c5:3f:6f:
         4c:16:ff:6f:d8:e8:85:dd:b4:7e:18:e2:bc:b3:4c:b1:39:48:
         e5:06:ca:cd:25:17:ed:a0:cb:61:60:7d:f4:20:33:61:ae:6e:
         a0:76:2a:ea:ae:c0:c0:e7:48:bc:6a:52:14:73:f1:9c:0b:f3:
         58:d9:95:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----