Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830333a6438303a3a2f32392d3438203d3e203133343839.roa
File:                     323830333a6438303a3a2f32392d3438203d3e203133343839.roa (raw, json)
Hash identifier:          8QHeUCGiD6DvIKlmJB7FnwU3XvSE+ZZaWIvALs9FHmY=
Subject key identifier:   51:01:85:5E:2A:65:28:13:4D:58:B3:1D:27:A5:0B:D9:A3:F1:D5:12
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       0B3676A136D0A0D878157DAA77B3F72A1125B429
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830333a6438303a3a2f32392d3438203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:06:55 +0000
ROA not before:           Tue 05 Mar 2024 18:01:55 +0000
ROA not after:            Tue 04 Mar 2025 18:06:55 +0000
asID:                     13489
IP address blocks:        2803:d80::/29 maxlen: 48

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:36:76:a1:36:d0:a0:d8:78:15:7d:aa:77:b3:f7:2a:11:25:b4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar  5 18:01:55 2024 GMT
            Not After : Mar  4 18:06:55 2025 GMT
        Subject: CN=5101855E2A6528134D58B31D27A50BD9A3F1D512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:72:06:f7:d3:9e:1f:0b:ed:0c:ac:37:17:
                    52:46:9f:98:2f:ad:de:26:83:f9:40:f5:b7:28:52:
                    73:e6:44:10:8e:86:fe:b0:3c:eb:33:11:a3:33:0c:
                    17:48:2e:2e:1e:0f:f7:b2:ca:19:57:78:1f:00:4a:
                    2b:85:90:1c:7e:fa:52:8a:34:df:5f:31:46:d0:3e:
                    3b:1b:da:1f:76:28:ff:dd:0e:2f:52:54:c7:2d:b4:
                    d6:bc:bf:4d:ce:51:e8:1f:05:b9:f3:5b:31:66:bf:
                    5e:bd:dc:33:09:95:24:66:25:88:83:a4:0b:3a:5c:
                    0e:c1:34:88:34:27:a0:4f:60:c6:4c:c2:ad:98:26:
                    c4:a3:7c:87:e0:07:b7:62:80:ed:31:56:8c:24:36:
                    d5:74:9c:ef:1b:52:5c:8a:9b:04:56:80:11:69:c2:
                    e7:36:8e:16:1b:be:14:7e:54:a5:f7:2e:11:2a:5c:
                    1e:a8:d9:44:0b:9b:95:d1:b7:87:e1:03:14:c3:68:
                    02:e7:40:da:29:4f:64:1a:22:43:6e:9a:fc:96:13:
                    ea:d8:44:c9:59:9c:75:66:87:0d:86:b7:72:ed:da:
                    16:e6:90:df:5b:3e:96:68:40:dc:fa:db:fe:2c:03:
                    3f:2b:f2:4c:b3:49:da:84:da:88:54:73:d9:22:86:
                    5f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:01:85:5E:2A:65:28:13:4D:58:B3:1D:27:A5:0B:D9:A3:F1:D5:12
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830333a6438303a3a2f32392d3438203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         1d:f4:5d:fc:43:f9:cf:c4:3b:0a:fd:c5:18:3c:09:42:a1:de:
         4c:1c:45:c2:94:35:36:75:35:2f:43:90:63:ef:f0:e4:78:77:
         96:a7:00:b8:2c:04:46:89:03:5a:29:60:88:64:45:59:1e:de:
         9c:8c:f0:77:3d:86:1a:64:65:39:15:37:0a:af:33:11:ae:b4:
         6d:6e:2b:77:5c:a1:48:61:16:9d:b9:d4:4d:fe:0d:b5:f1:fb:
         47:fc:fb:04:a8:8b:5b:40:ad:62:ff:e0:ff:45:ee:97:31:48:
         fc:c0:28:81:3d:b7:f4:fd:33:e3:a3:a6:1e:8d:4b:24:7a:c2:
         1d:f6:c9:d3:de:75:8b:f9:26:12:1e:52:07:4a:46:18:af:85:
         08:94:84:2e:cd:fb:53:77:77:0e:9d:e4:d9:67:87:f5:df:64:
         ff:ff:82:5b:b3:ab:ee:0d:e1:4d:2a:da:75:36:9c:bc:68:55:
         8b:37:00:2e:36:0f:1b:c9:eb:1c:75:db:66:57:1e:6b:fe:b9:
         87:79:c8:a5:1d:cb:80:e0:d6:a6:9a:ae:f2:1a:16:51:03:59:
         ab:07:3d:18:a8:98:1f:60:95:c7:00:6f:65:04:ca:ca:db:f3:
         35:1d:15:b4:3c:db:9b:ff:d8:48:63:fe:93:1a:3f:cd:8e:3c:
         38:d6:7b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----