Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/323830333a633630303a3a2f33322d3332203d3e203237393031.roa
File:                     323830333a633630303a3a2f33322d3332203d3e203237393031.roa (raw, json)
Hash identifier:          sJDBxo8XEGVoh/67Pv6z78eQggMnnNaNsBF24oVKGOU=
Subject key identifier:   E1:D4:F5:56:91:A0:C2:2F:C0:9D:31:8F:64:02:07:B6:9C:1F:A1:36
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       1C12FFC747EF8912AC65C4325D43E746D9EEC743
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/323830333a633630303a3a2f33322d3332203d3e203237393031.roa
Signing time:             Tue 05 Mar 2024 17:42:43 +0000
ROA not before:           Tue 05 Mar 2024 17:37:43 +0000
ROA not after:            Tue 04 Mar 2025 17:42:43 +0000
asID:                     27901
IP address blocks:        2803:c600::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:12:ff:c7:47:ef:89:12:ac:65:c4:32:5d:43:e7:46:d9:ee:c7:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Mar  5 17:37:43 2024 GMT
            Not After : Mar  4 17:42:43 2025 GMT
        Subject: CN=E1D4F55691A0C22FC09D318F640207B69C1FA136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6f:e3:7d:b1:d9:f8:68:4a:5e:57:12:b0:70:
                    c4:c0:ab:c8:ac:de:5a:fa:5f:dd:fe:fa:03:e6:c5:
                    ff:ab:2e:4a:52:1d:82:6e:cd:8f:64:45:95:70:31:
                    d9:64:f0:f9:98:24:d2:e5:ef:81:7c:d3:20:61:4c:
                    a7:9f:2f:2a:5a:80:8e:e9:ef:d6:91:e3:0f:97:c3:
                    0a:c9:37:b9:24:7e:c7:46:8e:3f:c7:2d:a1:a8:a0:
                    9d:3c:2b:08:ca:83:29:6e:5f:88:77:0e:b6:8b:2f:
                    99:69:e4:4d:5a:9b:9e:2f:d0:76:23:77:41:b8:56:
                    ae:73:e6:14:bd:3a:35:2d:d4:e9:e5:69:0d:32:cf:
                    7c:28:c1:4a:74:a9:53:24:fb:cd:36:9b:a3:b8:ec:
                    b4:81:3a:21:31:42:74:e0:c4:3a:bb:7f:17:0a:ec:
                    81:43:8d:25:cd:41:9d:e3:e2:0c:49:82:4d:c1:01:
                    0a:42:70:72:43:83:fe:50:bc:5b:2e:ad:13:b1:5c:
                    e5:9c:af:e6:a6:6a:c1:42:52:9d:64:35:27:34:42:
                    c8:95:79:46:a7:08:e3:3e:55:eb:2b:a8:42:c8:97:
                    b5:b1:25:94:54:6a:cf:1b:66:7d:1b:3c:92:9c:e4:
                    f4:c2:c7:67:e8:71:fe:97:4b:5b:0f:ac:22:25:79:
                    b2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D4:F5:56:91:A0:C2:2F:C0:9D:31:8F:64:02:07:B6:9C:1F:A1:36
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/323830333a633630303a3a2f33322d3332203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c600::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:1e:ce:b5:0e:eb:e8:88:d8:33:85:61:fc:06:e4:27:e3:b3:
         37:6b:b8:83:8c:00:c6:ab:b3:d2:db:90:1e:56:07:45:b2:c9:
         50:39:54:2c:23:9d:63:8b:85:f7:a2:80:07:10:44:f3:4d:29:
         5a:68:f0:f7:82:db:8a:56:ef:c2:71:2e:6c:a1:85:f2:c7:04:
         b8:13:e5:02:b6:d6:06:4f:75:77:75:7f:b9:df:f8:35:5a:f9:
         6e:ed:77:ff:d9:db:a9:34:af:9f:04:51:ad:d4:c1:d6:2d:19:
         fb:f8:00:c9:c0:30:52:0c:77:66:ba:e3:ad:ca:1d:9a:bc:58:
         82:33:ce:43:29:50:f4:fc:46:c7:9e:76:63:70:f5:9b:70:b2:
         9a:b3:20:19:b5:c7:ed:bf:fa:f3:ae:9b:85:3f:10:69:b5:bd:
         1f:3f:77:62:c9:35:18:83:67:f0:0f:81:a7:c1:2a:5e:97:7c:
         b5:e4:ca:ba:27:78:ba:8f:ee:82:f4:5c:06:5c:11:a7:01:88:
         c5:57:01:85:7c:d6:88:1b:f1:52:7e:60:64:3b:1c:68:3e:4f:
         b1:00:f5:66:97:1f:8d:92:08:1b:ef:c1:4e:62:cd:6b:3d:fd:
         ce:08:a9:aa:05:d4:7d:5d:3b:d3:04:41:30:94:b1:1f:aa:6f:
         5d:77:a1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----