Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36AE5B587E5546A30AFBE693BD61B4B634D7A6198DC7FCFB4A0939FB9CD3FCF7/0/323830333a376335303a3a2f33322d3332203d3e20323733313534.roa
File:                     323830333a376335303a3a2f33322d3332203d3e20323733313534.roa (raw, json)
Hash identifier:          s8GjPz0oNFtM40yADlmYBF1lJpWRqlhgjd1xxXVebUo=
Subject key identifier:   03:55:6F:E5:A3:A1:21:5E:3B:78:DB:0B:8E:9C:B8:92:E0:4F:9E:22
Certificate issuer:       /CN=93ED4FCE78C288E48F0F2D57E326100A93D1A90E
Certificate serial:       3B8C19137AA493FA3E6A3589B651145993FD45EF
Authority key identifier: 93:ED:4F:CE:78:C2:88:E4:8F:0F:2D:57:E3:26:10:0A:93:D1:A9:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93ED4FCE78C288E48F0F2D57E326100A93D1A90E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36AE5B587E5546A30AFBE693BD61B4B634D7A6198DC7FCFB4A0939FB9CD3FCF7/0/323830333a376335303a3a2f33322d3332203d3e20323733313534.roa
Signing time:             Tue 05 Mar 2024 18:21:37 +0000
ROA not before:           Tue 05 Mar 2024 18:16:37 +0000
ROA not after:            Tue 04 Mar 2025 18:21:37 +0000
asID:                     273154
IP address blocks:        2803:7c50::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 15:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8c:19:13:7a:a4:93:fa:3e:6a:35:89:b6:51:14:59:93:fd:45:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ED4FCE78C288E48F0F2D57E326100A93D1A90E
        Validity
            Not Before: Mar  5 18:16:37 2024 GMT
            Not After : Mar  4 18:21:37 2025 GMT
        Subject: CN=03556FE5A3A1215E3B78DB0B8E9CB892E04F9E22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:a3:a0:e4:d4:f3:75:c2:9f:df:7b:13:ae:
                    12:bc:20:0a:cf:70:61:dc:37:3d:9a:76:ce:78:e8:
                    76:7f:c4:ef:bf:e6:88:ca:79:99:73:4b:81:37:cf:
                    2b:0c:ae:bf:51:e5:fd:6d:4c:74:02:e3:f6:13:45:
                    c6:b4:b7:41:87:94:15:e9:38:b5:95:b8:e2:9b:63:
                    5b:f6:d1:1f:53:2d:6d:7e:10:84:91:3f:27:30:9d:
                    c8:8f:ef:2b:a5:85:c0:85:78:6a:89:86:72:c4:c4:
                    59:f5:08:ce:be:3a:52:e3:c8:9d:8c:ec:75:39:85:
                    13:18:0b:fa:e2:a3:4a:81:56:11:b8:28:c8:d7:1e:
                    f5:7b:4e:4e:d7:51:6d:09:75:19:5a:da:22:98:d8:
                    d2:0b:88:1a:0e:6a:97:e6:d2:a4:b7:fc:ca:f5:3d:
                    65:fc:32:9c:2d:ae:3d:cf:74:7c:50:d5:29:25:c6:
                    11:db:c2:32:74:3c:95:44:e7:73:00:e8:73:8f:fe:
                    1a:bf:e9:36:7f:30:db:77:75:3d:e9:34:b2:af:15:
                    96:21:8c:9d:65:03:e0:61:f5:b0:52:e3:24:c3:bc:
                    53:57:c5:7c:d4:6b:74:86:fb:dc:63:fd:47:9a:f3:
                    87:2c:47:48:10:6c:fd:2c:26:14:c4:e4:f4:8d:01:
                    3f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:55:6F:E5:A3:A1:21:5E:3B:78:DB:0B:8E:9C:B8:92:E0:4F:9E:22
            X509v3 Authority Key Identifier:
                keyid:93:ED:4F:CE:78:C2:88:E4:8F:0F:2D:57:E3:26:10:0A:93:D1:A9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36AE5B587E5546A30AFBE693BD61B4B634D7A6198DC7FCFB4A0939FB9CD3FCF7/0/93ED4FCE78C288E48F0F2D57E326100A93D1A90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93ED4FCE78C288E48F0F2D57E326100A93D1A90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36AE5B587E5546A30AFBE693BD61B4B634D7A6198DC7FCFB4A0939FB9CD3FCF7/0/323830333a376335303a3a2f33322d3332203d3e20323733313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:37:eb:ef:86:b4:dc:69:c6:e4:e1:24:80:dc:76:d8:0a:61:
         a3:f8:95:1a:72:0f:de:c0:a6:69:d5:3a:27:82:1e:79:81:be:
         28:02:98:5f:84:02:66:f4:ce:ee:fe:b4:f2:48:2f:dd:ea:5e:
         a1:45:e5:e9:6f:95:dc:ca:2d:e5:a6:f8:1b:56:90:37:27:20:
         97:37:e4:b6:28:7c:d7:4e:9d:37:a0:2f:15:c2:fd:f8:21:5b:
         fe:12:4b:45:23:52:2c:8d:db:83:8a:c9:4d:cc:69:51:04:fa:
         bd:a7:09:33:a8:95:7c:31:20:cf:95:93:7e:a5:60:c0:f3:15:
         b0:18:7f:52:7f:3c:94:d4:96:44:33:4c:7f:d9:d8:10:91:f6:
         2a:90:6a:5e:2d:6e:1b:75:5d:bc:d4:ec:b0:5d:6c:1c:8e:71:
         8e:e9:bf:1c:ce:a2:d8:a9:f3:20:0e:e5:02:a6:cf:4f:51:af:
         29:2b:d2:48:da:cf:26:22:6d:ce:38:34:7d:de:cb:eb:01:74:
         0a:52:ca:85:3a:f5:07:0b:de:25:9c:62:9d:e7:e3:04:6b:81:
         97:40:b5:64:f1:d7:0e:7f:e5:81:db:65:d0:7c:6c:a6:ce:46:
         e2:0b:e6:af:3a:0a:92:58:e0:f8:c6:92:f0:86:14:34:b8:c8:
         3c:7a:8a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----