Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/323830333a333734303a3a2f33322d3332203d3e20323634373337.roa
File:                     323830333a333734303a3a2f33322d3332203d3e20323634373337.roa (raw, json)
Hash identifier:          dKrN+mHb+Lkmmb+jL1rpwbRUmMa3qQtGGcEz3KS6Y2M=
Subject key identifier:   04:97:41:1B:3F:DC:CE:01:BB:3D:61:D7:04:43:93:1C:99:36:CA:CA
Certificate issuer:       /CN=0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF
Certificate serial:       3EBB18477CFC3CF24B3B1ED75330262DC178FE9C
Authority key identifier: 0F:95:9E:8E:89:90:C6:B4:68:4A:74:EC:F5:D6:A8:A2:BE:22:B2:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/323830333a333734303a3a2f33322d3332203d3e20323634373337.roa
Signing time:             Sat 27 Jul 2024 15:25:00 +0000
ROA not before:           Sat 27 Jul 2024 15:20:00 +0000
ROA not after:            Sat 26 Jul 2025 15:25:00 +0000
asID:                     264737
IP address blocks:        2803:3740::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sat 27 Jul 2024 18:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:bb:18:47:7c:fc:3c:f2:4b:3b:1e:d7:53:30:26:2d:c1:78:fe:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF
        Validity
            Not Before: Jul 27 15:20:00 2024 GMT
            Not After : Jul 26 15:25:00 2025 GMT
        Subject: CN=0497411B3FDCCE01BB3D61D70443931C9936CACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:41:29:e7:13:36:d2:db:fc:5c:a7:60:83:a8:
                    46:0d:84:73:47:e1:9f:b6:ec:dc:e5:a9:8b:54:b0:
                    63:73:51:74:b9:9c:fb:22:eb:27:c8:24:9a:fa:ef:
                    87:1b:a0:11:8b:c5:ce:19:f5:6a:d0:b6:50:f2:0b:
                    f7:30:f1:e3:3d:01:72:bf:3b:95:0e:0e:14:ca:eb:
                    ae:91:81:68:ae:d4:fd:90:1d:90:2d:b1:4e:69:7a:
                    5f:ce:cd:e0:6d:f5:e4:41:2a:67:7b:69:6a:31:a6:
                    2f:ed:84:d1:61:9d:e2:44:31:fa:e6:fe:d9:d7:ef:
                    bb:7e:57:e9:19:04:62:6e:80:69:c9:19:ac:40:43:
                    a2:94:cb:b8:2a:1f:1d:3d:f1:db:17:8a:48:fc:91:
                    0f:08:ed:d0:0e:84:e1:fd:6b:b2:2d:b1:41:90:70:
                    f5:5d:61:1a:04:9c:2a:7d:7a:0a:c8:f1:ad:62:a6:
                    c1:86:4b:18:ed:c8:4b:05:97:97:f5:27:97:cd:9e:
                    a5:7e:e8:1d:b7:90:8a:42:99:33:8d:b3:e8:dc:a7:
                    46:c1:bb:d7:54:4b:53:40:39:bd:39:de:e3:25:68:
                    13:49:5d:bb:26:c2:5f:d3:4c:de:41:ec:02:c5:d7:
                    af:86:e8:c8:ce:3b:63:4e:cf:48:3a:03:fd:0f:29:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:97:41:1B:3F:DC:CE:01:BB:3D:61:D7:04:43:93:1C:99:36:CA:CA
            X509v3 Authority Key Identifier:
                keyid:0F:95:9E:8E:89:90:C6:B4:68:4A:74:EC:F5:D6:A8:A2:BE:22:B2:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/323830333a333734303a3a2f33322d3332203d3e20323634373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3740::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:8e:40:88:7e:73:52:b5:72:be:d6:51:e4:2b:24:22:6d:fb:
         ee:83:3b:f5:ad:cb:e2:7e:43:11:2c:cb:82:cd:19:69:e0:6f:
         87:2b:b6:d5:24:9d:ee:90:33:36:a2:16:a7:50:0d:37:5d:3a:
         c5:36:1d:00:4d:a7:4c:51:78:01:ef:3d:57:bf:37:21:6f:23:
         cc:f0:13:22:20:a7:46:50:1c:da:07:8f:79:09:bf:09:15:cc:
         70:7d:5d:e1:cc:1f:9e:d6:78:47:7a:90:48:ec:c1:43:23:e5:
         84:9d:ff:57:c4:f6:d0:ec:22:2b:be:62:eb:00:3d:47:d8:a3:
         55:03:ec:ae:01:5b:41:1f:b2:42:ed:92:25:c6:af:dd:ea:47:
         4c:b3:86:4b:fe:94:4a:61:78:02:ca:c9:64:02:e6:74:20:75:
         a9:57:84:3c:50:9e:9e:80:f9:e7:d7:2d:43:ca:39:46:18:ae:
         a9:7d:14:cc:36:47:0d:c9:95:98:ac:57:ad:39:9c:d4:7e:3e:
         9c:e6:7b:64:07:63:61:6e:44:e4:9d:c6:69:a2:26:66:46:31:
         32:e3:67:44:c7:8b:af:59:51:1c:64:9f:a7:34:6b:73:b8:f7:
         0c:ab:de:fe:53:ed:fd:11:79:30:06:00:e3:3a:f3:13:a2:d3:
         80:83:0b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----