Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a3a2f33322d3438203d3e20323633373530.roa
File:                     323830333a396261303a3a2f33322d3438203d3e20323633373530.roa (raw, json)
Hash identifier:          rP4Lk5kuIeePrXZcWwz8vG545HcHmW/9WvKKsXtACGE=
Subject key identifier:   D4:08:D4:10:36:D5:75:29:40:58:F3:A5:40:D2:D7:6D:D8:1D:98:3D
Certificate issuer:       /CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
Certificate serial:       5F7C4F539DEAA7CA8EC9AB67E36B32E878907C10
Authority key identifier: 1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a3a2f33322d3438203d3e20323633373530.roa
Signing time:             Fri 28 Jun 2024 19:50:00 +0000
ROA not before:           Fri 28 Jun 2024 19:45:00 +0000
ROA not after:            Fri 27 Jun 2025 19:50:00 +0000
asID:                     263750
IP address blocks:        2803:9ba0::/32 maxlen: 48

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 13:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7c:4f:53:9d:ea:a7:ca:8e:c9:ab:67:e3:6b:32:e8:78:90:7c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E87F3433FDDF23DDC5FC2EC90876F490B603D74
        Validity
            Not Before: Jun 28 19:45:00 2024 GMT
            Not After : Jun 27 19:50:00 2025 GMT
        Subject: CN=D408D41036D575294058F3A540D2D76DD81D983D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:46:4d:59:db:1d:a9:13:de:c9:21:00:f7:1d:
                    f4:31:15:bb:02:46:b5:d8:8c:12:5f:cc:c8:77:53:
                    b6:6e:14:7f:b1:aa:a8:10:59:c9:0c:dc:00:e4:f1:
                    a3:09:ea:f4:1e:49:19:7a:36:df:b8:50:0c:92:40:
                    85:85:25:54:be:b3:1e:af:67:c9:a6:71:9f:ce:06:
                    b0:96:01:88:14:ed:8d:ac:84:03:a9:3d:f6:a4:d0:
                    eb:c3:a3:e7:14:ba:e2:01:4d:a6:56:19:c6:40:04:
                    4a:42:47:34:11:87:ca:58:93:5c:2f:91:e9:27:04:
                    7d:52:9d:b2:c6:11:3f:40:f7:a3:09:ec:fc:b2:2c:
                    b9:73:93:1c:03:12:82:91:21:1b:1c:b0:a1:1c:98:
                    af:09:e8:42:bf:68:7a:4d:0b:f6:8a:0d:0e:8a:93:
                    93:bc:76:b3:76:9f:f7:bd:0d:af:61:bf:dc:b4:66:
                    b4:89:72:7e:19:95:7a:94:e6:e1:e8:8c:04:97:1c:
                    a3:c6:7b:18:6d:01:23:00:99:28:8c:7f:f1:25:5a:
                    fe:ce:c6:a0:7c:0a:a3:fb:1c:ca:c2:98:ff:63:eb:
                    08:d9:db:17:38:0b:9b:3b:14:74:69:a5:84:62:39:
                    90:05:69:4f:55:ee:00:96:84:e3:42:da:b3:92:aa:
                    fa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:08:D4:10:36:D5:75:29:40:58:F3:A5:40:D2:D7:6D:D8:1D:98:3D
            X509v3 Authority Key Identifier:
                keyid:1E:87:F3:43:3F:DD:F2:3D:DC:5F:C2:EC:90:87:6F:49:0B:60:3D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E87F3433FDDF23DDC5FC2EC90876F490B603D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/238D9F1C871BB8D10BEF45581E950BB81331EC4D3FE388FE1F4746AEA33ACB8F/0/323830333a396261303a3a2f33322d3438203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:d1:89:17:29:54:58:07:b7:3e:4f:29:4a:bb:40:55:46:37:
         54:5b:c0:54:66:66:cd:c5:34:08:e1:6d:ed:e9:a4:b5:61:b3:
         fc:63:d1:7d:9e:50:f4:3c:8a:0f:a1:af:88:2b:cc:32:95:b7:
         d5:d6:cc:77:41:4d:c8:72:92:14:3c:14:19:5c:f9:c2:af:63:
         20:4f:f6:11:01:13:f0:68:35:0d:21:a7:98:68:77:e0:d2:da:
         14:1d:93:6d:6a:98:27:42:f4:56:83:19:8c:c7:ed:07:4f:0b:
         75:0c:5f:d6:90:39:86:bf:90:f9:c4:e1:4e:a9:89:1b:88:40:
         1b:22:74:32:b7:11:a4:f3:4c:d3:3e:c3:66:ad:c2:c2:ee:cf:
         84:c0:ff:c6:7d:d2:e8:04:3f:61:66:fc:d0:a1:26:7c:3e:a9:
         e7:b8:05:dc:6b:4c:ed:32:0f:d1:3f:4a:e4:3c:80:1c:1b:62:
         04:24:8c:4f:80:7c:19:65:5e:7b:6a:fa:2a:ca:d8:14:c6:44:
         b9:fe:88:f2:28:ec:6e:e6:39:63:7c:d3:c1:5d:51:19:38:cf:
         fc:64:e8:0d:03:eb:03:42:42:6b:76:0c:61:ef:14:bd:f5:95:
         15:27:aa:aa:e7:31:5c:35:e0:e6:93:52:6d:3b:31:8f:4f:4b:
         68:c5:d3:33
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUX3xPU53qp8qOyatn42sy6HiQfBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU4N0YzNDMzRkRERjIzRERDNUZDMkVDOTA4NzZGNDkw
QjYwM0Q3NDAeFw0yNDA2MjgxOTQ1MDBaFw0yNTA2MjcxOTUwMDBaMDMxMTAvBgNV
BAMTKEQ0MDhENDEwMzZENTc1Mjk0MDU4RjNBNTQwRDJENzZERDgxRDk4M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSRk1Z2x2pE97JIQD3HfQxFbsC
RrXYjBJfzMh3U7ZuFH+xqqgQWckM3ADk8aMJ6vQeSRl6Nt+4UAySQIWFJVS+sx6v
Z8mmcZ/OBrCWAYgU7Y2shAOpPfak0OvDo+cUuuIBTaZWGcZABEpCRzQRh8pYk1wv
keknBH1SnbLGET9A96MJ7PyyLLlzkxwDEoKRIRscsKEcmK8J6EK/aHpNC/aKDQ6K
k5O8drN2n/e9Da9hv9y0ZrSJcn4ZlXqU5uHojASXHKPGexhtASMAmSiMf/ElWv7O
xqB8CqP7HMrCmP9j6wjZ2xc4C5s7FHRppYRiOZAFaU9V7gCWhONC2rOSqvolAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU1AjUEDbVdSlAWPOlQNLXbdgdmD0wHwYDVR0j
BBgwFoAUHofzQz/d8j3cX8LskIdvSQtgPXQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMzhEOUYxQzg3MUJCOEQxMEJFRjQ1NTgxRTk1MEJCODEz
MzFFQzREM0ZFMzg4RkUxRjQ3NDZBRUEzM0FDQjhGLzAvMUU4N0YzNDMzRkRERjIz
RERDNUZDMkVDOTA4NzZGNDkwQjYwM0Q3NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRTg3RjM0MzNGRERGMjNEREM1
RkMyRUM5MDg3NkY0OTBCNjAzRDc0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjM4RDlGMUM4NzFCQjhEMTBCRUY0NTU4MUU5NTBCQjgxMzMxRUM0RDNG
RTM4OEZFMUY0NzQ2QUVBMzNBQ0I4Ri8wLzMyMzgzMDMzM2EzOTYyNjEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzM3MzUzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDm6Aw
DQYJKoZIhvcNAQELBQADggEBABvRiRcpVFgHtz5PKUq7QFVGN1RbwFRmZs3FNAjh
be3ppLVhs/xj0X2eUPQ8ig+hr4grzDKVt9XWzHdBTchykhQ8FBlc+cKvYyBP9hEB
E/BoNQ0hp5hod+DS2hQdk21qmCdC9FaDGYzH7QdPC3UMX9aQOYa/kPnE4U6piRuI
QBsidDK3EaTzTNM+w2atwsLuz4TA/8Z90ugEP2Fm/NChJnw+qee4BdxrTO0yD9E/
SuQ8gBwbYgQkjE+AfBllXntq+irK2BTGRLn+iPIo7G7mOWN808FdURk4z/xk6A0D
6wNCQmt2DGHvFL31lRUnqqrnMVw14OaTUm07MY9PS2jF0zM=
-----END CERTIFICATE-----