Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/323830313a3133353a3a2f34342d3438203d3e20323733313635.roa
File:                     323830313a3133353a3a2f34342d3438203d3e20323733313635.roa (raw, json)
Hash identifier:          0l47JvohixtaNNYe3SdT9nK1g1igmKJEVn0aCUVtMoQ=
Subject key identifier:   4C:B2:40:73:1C:9B:9E:D9:AB:2E:03:6B:E9:DE:0F:69:AE:B6:F4:12
Certificate issuer:       /CN=F4F8147BF99626D17AFEE91E12422301459D2C55
Certificate serial:       23E4AB2BAC91787DA83D356D805BFA8C22B26AA2
Authority key identifier: F4:F8:14:7B:F9:96:26:D1:7A:FE:E9:1E:12:42:23:01:45:9D:2C:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4F8147BF99626D17AFEE91E12422301459D2C55.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/323830313a3133353a3a2f34342d3438203d3e20323733313635.roa
Signing time:             Fri 07 Jun 2024 12:50:00 +0000
ROA not before:           Fri 07 Jun 2024 12:45:00 +0000
ROA not after:            Fri 06 Jun 2025 12:50:00 +0000
asID:                     273165
IP address blocks:        2801:135::/44 maxlen: 48

Validation:               Failed, certificate revoked on Sat 26 Oct 2024 11:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e4:ab:2b:ac:91:78:7d:a8:3d:35:6d:80:5b:fa:8c:22:b2:6a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4F8147BF99626D17AFEE91E12422301459D2C55
        Validity
            Not Before: Jun  7 12:45:00 2024 GMT
            Not After : Jun  6 12:50:00 2025 GMT
        Subject: CN=4CB240731C9B9ED9AB2E036BE9DE0F69AEB6F412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3e:e6:d2:57:4c:19:2c:4f:38:d3:66:e4:68:
                    5c:21:00:8e:aa:21:0d:b2:92:c9:2f:37:8c:f7:a3:
                    ed:8c:10:d1:f2:cf:dc:a9:c7:89:1b:bd:92:fd:06:
                    62:fc:68:13:ee:d6:c6:a8:83:ce:43:a7:61:7b:5a:
                    a2:53:94:bd:0f:96:00:a5:1f:c4:ac:b2:6f:0f:e0:
                    5d:39:ea:3c:3b:eb:0e:4c:8f:6d:73:4b:d9:07:5e:
                    d6:0e:78:ac:27:03:3f:17:4c:35:5a:61:e3:70:19:
                    b7:ca:18:7f:51:c0:99:dc:78:f0:70:62:ac:f8:92:
                    6c:c6:7c:6d:8d:df:54:f1:30:90:6b:ff:9a:72:30:
                    01:16:d1:e4:da:d4:7b:b3:f2:e6:94:87:e6:23:ca:
                    0f:cf:84:40:71:dc:77:8c:72:35:f2:1d:ee:a4:93:
                    5b:0f:a9:2e:b5:f8:10:fe:aa:cc:67:4e:26:5a:d4:
                    23:bf:a3:b1:aa:7b:b4:9e:cb:32:34:da:fd:42:42:
                    37:a7:c3:69:d4:7f:dc:b4:bd:71:eb:57:94:44:86:
                    96:4e:e9:ef:cd:3b:6f:a5:3d:d2:4b:72:5e:d4:af:
                    bf:01:5a:22:0a:b3:7c:0a:8c:91:87:a4:e4:2b:f8:
                    b7:94:2f:2a:37:18:5d:09:38:ed:47:74:95:29:03:
                    85:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B2:40:73:1C:9B:9E:D9:AB:2E:03:6B:E9:DE:0F:69:AE:B6:F4:12
            X509v3 Authority Key Identifier:
                keyid:F4:F8:14:7B:F9:96:26:D1:7A:FE:E9:1E:12:42:23:01:45:9D:2C:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/F4F8147BF99626D17AFEE91E12422301459D2C55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4F8147BF99626D17AFEE91E12422301459D2C55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/323830313a3133353a3a2f34342d3438203d3e20323733313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:135::/44

    Signature Algorithm: sha256WithRSAEncryption
         59:b7:23:98:b1:02:c1:d9:7d:5a:f3:8d:68:37:1c:2d:e7:d3:
         df:c8:07:83:5e:7a:7f:88:f9:02:ea:67:e7:b7:3c:9e:bb:b2:
         ef:c4:6f:5f:12:6d:9f:50:0e:37:ae:e6:10:4c:3d:52:22:79:
         58:d2:37:9b:9e:b7:1f:03:e3:47:ac:5b:ac:1e:cf:3b:1a:fe:
         7b:e9:f7:91:f6:53:07:99:92:42:36:02:9c:3e:c0:cf:e0:be:
         c9:e8:8b:df:c4:cf:72:b6:3b:48:ab:cf:b1:d1:44:1b:0c:ff:
         13:ab:b4:16:84:97:b9:55:8a:4a:d4:55:71:e2:38:dc:2f:07:
         ee:5e:f2:ff:f2:df:81:62:7f:d3:b1:1a:bf:14:a6:d2:52:e8:
         1c:ee:76:19:1a:aa:92:b2:52:a1:21:59:55:ed:4d:8e:4f:3b:
         e3:87:dd:5d:8f:13:73:64:af:95:e7:7a:96:62:fd:e4:b7:a3:
         d8:13:96:33:5b:58:6d:1f:59:e1:31:89:b9:c7:33:f4:fb:8e:
         05:08:e2:58:a6:fa:0a:d1:cf:5f:05:4d:63:b7:2a:36:8d:64:
         e5:1d:3e:84:ca:39:95:3b:4b:20:42:2e:18:c8:23:ca:ca:96:
         3c:d7:db:fb:bd:ba:84:0a:6a:4f:f2:97:e2:50:f5:1b:92:36:
         28:6d:19:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----