Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/323830303a3431303a3a2f33322d3332203d3e203130323639.roa
File:                     323830303a3431303a3a2f33322d3332203d3e203130323639.roa (raw, json)
Hash identifier:          PVuJpcHXCSfz1p3CZIBh/JTKsGGsBQYWzCC9ynRQiyI=
Subject key identifier:   F9:7F:96:48:4C:D2:44:5A:46:EC:67:42:91:19:0C:8E:68:44:81:01
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       4B8C350546B4FB9D8042C1264221D5E586FD1222
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/323830303a3431303a3a2f33322d3332203d3e203130323639.roa
Signing time:             Tue 05 Mar 2024 17:46:35 +0000
ROA not before:           Tue 05 Mar 2024 17:41:35 +0000
ROA not after:            Tue 04 Mar 2025 17:46:35 +0000
asID:                     10269
IP address blocks:        2800:410::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 05 Sep 2024 19:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8c:35:05:46:b4:fb:9d:80:42:c1:26:42:21:d5:e5:86:fd:12:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Mar  5 17:41:35 2024 GMT
            Not After : Mar  4 17:46:35 2025 GMT
        Subject: CN=F97F96484CD2445A46EC674291190C8E68448101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:9b:fa:cb:1d:c2:f6:ea:99:6b:59:27:55:
                    b0:a7:81:40:68:20:5f:93:e7:ab:a7:99:33:f4:fb:
                    a3:67:b8:4f:61:dd:81:c6:01:f8:0b:4d:03:36:31:
                    c4:d5:80:15:0d:fd:9f:20:56:ba:ce:19:4a:25:53:
                    84:de:98:33:94:e7:7b:f1:c3:39:8f:ad:11:0b:1a:
                    6b:45:9d:82:ab:6f:9a:5c:02:5f:af:8d:be:10:28:
                    a1:0b:b9:4c:41:e3:a1:08:1d:d6:da:ba:c4:83:35:
                    3d:e1:8c:4c:d3:86:d6:4a:ff:40:9c:7f:83:76:4b:
                    7b:70:a6:11:e8:ad:43:85:ac:2a:c7:a9:c9:5c:9c:
                    61:63:52:58:b5:a0:61:d3:39:14:d8:00:74:73:0e:
                    3b:65:e2:4b:91:f0:f8:bc:fe:d6:92:aa:da:3f:bc:
                    7e:3e:f9:8f:21:30:7e:4a:9d:11:b3:df:fa:91:46:
                    23:6d:9d:92:c8:b1:02:cb:f9:e9:02:ce:5e:46:f3:
                    19:41:fd:55:27:a8:b8:1c:db:4c:f9:bd:2b:dd:95:
                    dd:ee:85:89:b2:27:2b:d1:a3:57:0b:00:31:1b:7c:
                    50:06:ea:a2:39:1a:d1:55:31:8c:d7:11:03:ba:51:
                    d5:c9:d9:55:6c:be:72:03:65:53:3c:0e:a2:d2:89:
                    4c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7F:96:48:4C:D2:44:5A:46:EC:67:42:91:19:0C:8E:68:44:81:01
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/323830303a3431303a3a2f33322d3332203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:410::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:42:25:25:90:dc:ad:75:9e:58:c5:97:2d:f5:df:50:31:9e:
         3b:f6:15:22:8c:c1:ef:63:26:a5:93:7a:63:43:f8:e0:28:b0:
         1b:96:78:36:75:7f:ba:24:61:e7:ea:1a:d1:c3:41:6b:e3:c5:
         8b:44:c9:b5:2d:5e:ca:35:04:a2:24:1c:00:1a:4e:ac:bb:41:
         68:b0:2c:af:2a:85:ff:61:64:74:50:c2:27:8a:e5:7b:a4:18:
         4a:cb:cd:2c:a7:80:02:de:8e:51:b4:f8:c6:47:ae:03:a9:a4:
         35:fa:16:fe:11:a2:af:d9:e5:d5:6c:2e:9f:a9:84:35:68:76:
         99:ed:97:e8:0e:2b:c0:b9:21:32:49:6c:81:aa:94:ec:05:7b:
         22:36:85:94:43:cf:db:14:81:ff:0c:07:6f:95:be:ef:0c:10:
         f9:a1:a9:79:da:5d:55:a9:74:2a:31:15:06:60:77:4c:50:fa:
         77:7e:04:25:20:eb:72:1b:a2:d6:5a:31:c8:3b:88:f5:eb:c0:
         2d:a9:6a:90:47:25:45:09:19:58:d2:06:05:6e:fc:4e:cd:30:
         9f:c7:8b:21:99:9d:8b:98:8d:d3:35:a7:22:1f:c3:27:c2:2d:
         32:00:17:19:72:e8:58:9d:3f:dd:fa:92:de:9e:bc:6b:c6:79:
         74:87:33:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----