Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48B39E079A7B248FAAEC56E63DF90B4B1E89B775963D47105A8AFF4D08BF347C/0/323830333a333631303a3a2f33322d3332203d3e20323731393531.roa
File:                     323830333a333631303a3a2f33322d3332203d3e20323731393531.roa (raw, json)
Hash identifier:          RoVASGbxzSO3dvwonE/EKDxu+UE4+RwrIl/5kBN+rGs=
Subject key identifier:   C0:8D:FC:E4:81:6D:32:E7:B8:6F:27:A1:9F:5E:53:B8:83:BF:8C:32
Certificate issuer:       /CN=7F8154FBFA7869CE49F7C27290C85E6C51C47697
Certificate serial:       69D6D6BCDCB6D99ED3617CBE8DB3006407222AE1
Authority key identifier: 7F:81:54:FB:FA:78:69:CE:49:F7:C2:72:90:C8:5E:6C:51:C4:76:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F8154FBFA7869CE49F7C27290C85E6C51C47697.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48B39E079A7B248FAAEC56E63DF90B4B1E89B775963D47105A8AFF4D08BF347C/0/323830333a333631303a3a2f33322d3332203d3e20323731393531.roa
Signing time:             Tue 05 Mar 2024 17:44:56 +0000
ROA not before:           Tue 05 Mar 2024 17:39:56 +0000
ROA not after:            Tue 04 Mar 2025 17:44:56 +0000
asID:                     271951
IP address blocks:        2803:3610::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sat 05 Oct 2024 03:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d6:d6:bc:dc:b6:d9:9e:d3:61:7c:be:8d:b3:00:64:07:22:2a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F8154FBFA7869CE49F7C27290C85E6C51C47697
        Validity
            Not Before: Mar  5 17:39:56 2024 GMT
            Not After : Mar  4 17:44:56 2025 GMT
        Subject: CN=C08DFCE4816D32E7B86F27A19F5E53B883BF8C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:fe:8d:7d:6f:43:95:9c:72:6d:5d:f3:44:
                    21:63:b7:8c:28:32:e0:f9:21:03:aa:cf:1b:f3:14:
                    7b:38:58:cf:1d:5c:6c:f2:fe:7b:b1:3e:7b:ec:23:
                    25:e8:13:51:d5:35:3b:1c:3e:f0:ce:80:95:69:2b:
                    2d:21:d1:d1:7b:86:ad:ba:61:84:2c:be:1b:c5:3f:
                    ee:14:28:28:2b:8d:07:f1:d7:d6:95:a3:3c:d6:ec:
                    56:f4:75:3a:36:a5:b1:bc:ba:6c:66:16:20:e3:eb:
                    3e:a3:95:71:ce:ca:f7:0a:9f:e1:7a:0d:b9:b3:8a:
                    5d:22:a9:1c:01:0b:53:d6:4a:82:bb:1d:39:7c:cb:
                    c4:63:06:d9:58:b4:c2:bd:56:ec:77:5e:ed:3a:9e:
                    3e:9b:7c:16:e7:77:d3:f9:07:a6:3b:5c:f3:d3:c7:
                    1a:a7:e4:e9:86:5d:cc:69:e0:88:b1:77:6f:e8:69:
                    6f:b0:c3:15:8d:cb:fb:c1:f2:9f:5e:33:7a:97:e1:
                    e1:05:e5:fa:7d:21:a6:5c:53:92:01:fb:4c:b0:62:
                    07:f1:39:5a:33:ec:9c:6e:79:2a:f2:29:31:d8:8c:
                    c9:4c:93:00:d6:06:82:64:94:b6:83:cf:75:d0:53:
                    d4:10:33:5b:26:87:4f:7e:ed:e9:37:3d:bf:6d:06:
                    3a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8D:FC:E4:81:6D:32:E7:B8:6F:27:A1:9F:5E:53:B8:83:BF:8C:32
            X509v3 Authority Key Identifier:
                keyid:7F:81:54:FB:FA:78:69:CE:49:F7:C2:72:90:C8:5E:6C:51:C4:76:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48B39E079A7B248FAAEC56E63DF90B4B1E89B775963D47105A8AFF4D08BF347C/0/7F8154FBFA7869CE49F7C27290C85E6C51C47697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F8154FBFA7869CE49F7C27290C85E6C51C47697.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48B39E079A7B248FAAEC56E63DF90B4B1E89B775963D47105A8AFF4D08BF347C/0/323830333a333631303a3a2f33322d3332203d3e20323731393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3610::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:88:5b:a5:2d:d3:3d:ca:78:a3:62:55:3a:b9:09:68:f5:bd:
         ad:17:79:18:90:0d:79:56:23:d5:f2:57:9d:d0:49:1d:60:20:
         f1:d0:5e:c1:f3:45:8b:8a:fe:44:e2:06:8a:73:4f:61:0d:6b:
         a4:e7:54:87:97:12:b7:98:77:94:85:9e:f8:83:b3:96:55:c3:
         d1:a5:c1:31:40:b9:60:18:ae:84:b6:9e:05:ab:67:c9:3a:54:
         86:a6:b6:20:7a:41:d2:88:d2:2e:31:75:59:af:bc:34:e2:95:
         8d:8b:d0:ff:cb:5c:95:3a:fe:54:22:0e:28:d4:35:97:25:20:
         1c:d4:31:11:43:36:a9:f3:67:21:62:fd:da:42:24:9b:b0:65:
         f5:54:51:34:45:e1:76:81:61:a0:dc:1f:c0:b8:3f:23:36:3f:
         0b:81:7b:e0:26:7f:24:34:86:eb:72:52:c5:0e:59:a3:d4:23:
         63:f0:67:39:c5:83:c9:0a:03:ce:bb:82:9b:f7:14:e0:be:92:
         c6:8e:5d:57:f1:52:b2:a0:19:3b:ea:6d:f1:52:09:39:c5:32:
         71:dd:b7:a0:d5:c2:9f:09:fc:66:50:84:de:33:f8:f9:2d:23:
         93:37:6e:fc:24:63:93:ff:e2:f8:d8:f0:2f:58:93:7d:f5:36:
         6a:00:2a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----