Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34FB7AC9120F0B9258E8044F9CF3702E8D527E52ACA65446F47DCF174A0C45F4/0/323830333a613335303a3a2f33322d3332203d3e203733383837.roa
File:                     323830333a613335303a3a2f33322d3332203d3e203733383837.roa (raw, json)
Hash identifier:          dgfi5mJYnQhiv4SQQHhnuvVf4dLjOSDWACHlDNyg3ek=
Subject key identifier:   99:52:CC:30:AD:BB:9D:75:63:CB:75:02:32:83:AB:5E:CD:BE:D9:33
Certificate issuer:       /CN=B4CFC98E99CCBC2B83D74FD58E0609E3022C7BC7
Certificate serial:       546172D21B59F61DEF2BEDC7639378D820A90CF6
Authority key identifier: B4:CF:C9:8E:99:CC:BC:2B:83:D7:4F:D5:8E:06:09:E3:02:2C:7B:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CFC98E99CCBC2B83D74FD58E0609E3022C7BC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34FB7AC9120F0B9258E8044F9CF3702E8D527E52ACA65446F47DCF174A0C45F4/0/323830333a613335303a3a2f33322d3332203d3e203733383837.roa
Signing time:             Mon 29 Jul 2024 22:15:00 +0000
ROA not before:           Mon 29 Jul 2024 22:10:00 +0000
ROA not after:            Mon 28 Jul 2025 22:15:00 +0000
asID:                     73887
IP address blocks:        2803:a350::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 00:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:61:72:d2:1b:59:f6:1d:ef:2b:ed:c7:63:93:78:d8:20:a9:0c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4CFC98E99CCBC2B83D74FD58E0609E3022C7BC7
        Validity
            Not Before: Jul 29 22:10:00 2024 GMT
            Not After : Jul 28 22:15:00 2025 GMT
        Subject: CN=9952CC30ADBB9D7563CB75023283AB5ECDBED933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:15:06:3b:56:31:e7:68:f1:a3:b5:ad:66:22:
                    26:9b:f7:7c:9d:a9:6f:51:c7:ad:c2:11:3b:88:e7:
                    1d:e4:0a:ab:f4:cf:05:98:5f:f7:1e:a4:23:e0:fe:
                    1f:58:4d:05:63:5b:39:51:50:27:b9:32:4f:a8:55:
                    a4:ce:89:37:73:66:63:66:40:a3:7b:99:ec:fe:4d:
                    e4:81:51:f0:0f:4d:e7:18:23:59:89:56:56:35:9f:
                    6a:20:34:6b:46:5c:4d:e1:fe:2e:f2:62:8d:35:50:
                    a1:d8:33:b5:e0:71:eb:31:4a:20:02:51:da:18:65:
                    2a:6c:48:7a:3c:a4:e3:7d:d6:76:41:48:6c:90:6b:
                    c5:9c:61:19:0d:8e:9c:fe:c6:e6:5b:af:5a:51:89:
                    ab:19:52:e5:d7:1c:20:07:11:f4:4c:d6:f4:0f:99:
                    5a:3f:f3:8f:6a:55:2e:65:0f:3e:45:74:83:0c:f5:
                    2c:12:16:c7:88:0c:4b:bd:60:d7:76:a7:e3:36:66:
                    53:3b:4e:51:be:86:62:bd:50:a7:5e:b2:ab:cf:fe:
                    18:58:85:ea:50:64:70:7b:2f:28:e6:df:82:1d:da:
                    a1:11:d1:03:7b:46:da:d7:eb:03:74:6d:e3:c6:56:
                    05:f1:ab:2f:dd:c3:12:2c:3f:67:ba:b1:e4:60:88:
                    0d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:52:CC:30:AD:BB:9D:75:63:CB:75:02:32:83:AB:5E:CD:BE:D9:33
            X509v3 Authority Key Identifier:
                keyid:B4:CF:C9:8E:99:CC:BC:2B:83:D7:4F:D5:8E:06:09:E3:02:2C:7B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34FB7AC9120F0B9258E8044F9CF3702E8D527E52ACA65446F47DCF174A0C45F4/0/B4CFC98E99CCBC2B83D74FD58E0609E3022C7BC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CFC98E99CCBC2B83D74FD58E0609E3022C7BC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34FB7AC9120F0B9258E8044F9CF3702E8D527E52ACA65446F47DCF174A0C45F4/0/323830333a613335303a3a2f33322d3332203d3e203733383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a350::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:80:5b:b2:e0:00:cf:8b:54:26:7b:d9:d6:51:11:02:73:67:
         82:96:20:ff:9f:1b:41:de:09:16:84:b7:dc:e8:ce:fd:45:54:
         06:f1:fa:98:3c:f2:77:09:c6:20:4d:27:35:25:96:4e:96:f2:
         16:a9:fe:05:bc:42:cf:43:b1:94:71:b1:6d:09:fa:5a:7b:50:
         16:cd:97:0d:ca:6c:e8:f0:37:1f:b8:d6:c1:f5:6c:4e:5c:cf:
         c6:7e:d5:5b:1f:13:bb:2c:c2:3f:a2:32:b9:5c:04:0a:f9:d6:
         5a:e5:18:a0:70:96:ad:dd:5e:0e:ad:15:3b:a3:94:6d:87:bf:
         84:29:37:9b:25:25:bf:b9:ac:57:34:eb:63:c2:91:7a:b7:c8:
         d3:17:2c:86:5e:1a:1b:83:68:8c:71:3b:72:87:f6:e8:fe:e4:
         ec:6b:4c:8f:cc:03:98:1c:bb:86:df:56:86:c5:7f:76:e0:5c:
         cf:d3:5c:9d:a1:fb:78:fe:e2:c4:53:cc:0e:82:51:ca:8f:4d:
         60:51:fd:38:d0:e2:cc:01:ba:d2:17:0f:83:70:27:14:a0:e5:
         9b:1c:31:01:29:b0:ee:bc:7b:56:cc:98:36:c1:1c:6a:7d:2e:
         f6:be:20:d7:d5:c8:54:37:d6:76:88:4d:64:b7:58:77:bb:7a:
         81:e0:80:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----