Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44869AB4530405FFE7EDCF2B50F8BA81244F8BC1F72827C804E95CE7785665A9/0/323830333a393765303a3a2f33322d3332203d3e203237373531.roa
File:                     323830333a393765303a3a2f33322d3332203d3e203237373531.roa (raw, json)
Hash identifier:          LNPG3NWuWLyRP7QdVuBpjLW7Cio1D9YXYJOOCu0gaQo=
Subject key identifier:   74:91:FC:0A:A9:49:39:18:96:52:2F:4A:C7:DF:AE:CB:8A:BA:A5:AC
Certificate issuer:       /CN=09C50B7474321823614A1B0D1BED884AB007C32D
Certificate serial:       2CFAC663E32775D62FDAE4B0CEEC3BAEBDCAE849
Authority key identifier: 09:C5:0B:74:74:32:18:23:61:4A:1B:0D:1B:ED:88:4A:B0:07:C3:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09C50B7474321823614A1B0D1BED884AB007C32D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44869AB4530405FFE7EDCF2B50F8BA81244F8BC1F72827C804E95CE7785665A9/0/323830333a393765303a3a2f33322d3332203d3e203237373531.roa
Signing time:             Tue 05 Mar 2024 18:04:08 +0000
ROA not before:           Tue 05 Mar 2024 17:59:08 +0000
ROA not after:            Tue 04 Mar 2025 18:04:08 +0000
asID:                     27751
IP address blocks:        2803:97e0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 28 Oct 2024 16:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:fa:c6:63:e3:27:75:d6:2f:da:e4:b0:ce:ec:3b:ae:bd:ca:e8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09C50B7474321823614A1B0D1BED884AB007C32D
        Validity
            Not Before: Mar  5 17:59:08 2024 GMT
            Not After : Mar  4 18:04:08 2025 GMT
        Subject: CN=7491FC0AA949391896522F4AC7DFAECB8ABAA5AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ef:da:c2:41:6f:c7:75:ac:d8:16:53:06:9d:
                    a0:a9:f7:17:06:55:96:c5:72:d7:c1:71:b8:1e:7e:
                    68:40:f9:3b:0d:2a:6b:cb:52:08:8c:5a:04:62:2f:
                    19:0f:72:c0:c8:31:97:e0:84:32:58:d6:ac:42:ad:
                    f3:58:76:56:b8:23:e6:a8:27:bc:a8:9d:e0:81:91:
                    bd:9b:74:bd:cf:ac:8a:3f:3d:1e:21:0d:dc:70:e5:
                    0b:05:60:95:44:84:71:55:bb:76:f5:ec:ed:df:25:
                    67:1e:5e:5b:01:b4:e9:54:5c:4a:19:42:d9:7f:d4:
                    0c:19:6e:58:e4:b9:cf:6a:9a:88:7c:c6:cf:d7:de:
                    d3:60:80:5d:6e:f4:dc:51:08:94:30:ef:74:53:a4:
                    e1:bd:61:79:0c:77:16:e0:cc:7d:54:ef:fb:30:b4:
                    09:cf:43:77:11:73:01:d1:49:eb:bc:8b:b0:ad:f4:
                    40:b6:a5:57:4c:da:83:e4:ce:76:ec:08:b5:e7:61:
                    d1:d2:89:76:bd:bb:31:b2:e8:3b:90:55:5f:11:66:
                    54:92:b1:bb:7b:b4:2a:bf:4e:9e:26:d4:5c:54:ae:
                    71:54:ed:dc:d3:8d:89:d6:06:78:90:2d:57:52:e5:
                    76:81:50:e9:ad:d6:7d:16:14:58:b9:9f:4b:8e:df:
                    98:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:91:FC:0A:A9:49:39:18:96:52:2F:4A:C7:DF:AE:CB:8A:BA:A5:AC
            X509v3 Authority Key Identifier:
                keyid:09:C5:0B:74:74:32:18:23:61:4A:1B:0D:1B:ED:88:4A:B0:07:C3:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44869AB4530405FFE7EDCF2B50F8BA81244F8BC1F72827C804E95CE7785665A9/0/09C50B7474321823614A1B0D1BED884AB007C32D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09C50B7474321823614A1B0D1BED884AB007C32D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44869AB4530405FFE7EDCF2B50F8BA81244F8BC1F72827C804E95CE7785665A9/0/323830333a393765303a3a2f33322d3332203d3e203237373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:97e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:98:2c:a0:a1:e8:63:c7:8a:e3:f4:5f:40:22:25:94:f5:db:
         19:04:73:55:21:ee:65:45:7f:70:af:70:24:2f:fc:a1:d4:77:
         39:67:68:9f:c6:3c:7f:04:67:c7:0d:df:db:7d:88:67:a1:63:
         4c:91:69:0d:b3:d6:ae:de:94:6f:74:ce:e4:92:d9:be:57:c7:
         42:1a:49:5f:af:92:80:b1:05:59:35:64:ff:01:64:d5:90:fb:
         75:77:c9:a4:4c:ab:6a:83:c7:03:62:72:84:72:d5:64:55:cf:
         b6:68:14:69:fa:48:9b:ec:3d:a4:a4:82:79:28:93:6a:0f:cd:
         08:56:44:a5:84:26:d8:54:a5:94:ef:64:ff:ad:9a:d7:ae:07:
         99:c2:00:6b:5d:2c:a3:96:35:7c:ab:15:91:5c:a8:79:45:5c:
         a9:ab:f7:d2:6a:95:f9:86:39:4e:84:ec:d1:0d:22:c4:85:6b:
         b9:e2:47:93:11:69:85:7c:8f:29:5f:f7:b9:4a:de:0c:c8:10:
         3f:18:bd:e8:a5:e5:6c:12:20:6d:0a:98:6c:03:64:6c:cb:55:
         4c:bb:5c:87:ce:66:a6:03:f4:cf:8a:e2:eb:4d:e8:8f:a3:45:
         80:72:a7:ee:8c:ff:55:53:d9:39:0b:2a:16:86:22:5a:33:c1:
         21:fc:32:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----