Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/323830303a3836303a3a2f33322d3332203d3e20323632313937.roa
File:                     323830303a3836303a3a2f33322d3332203d3e20323632313937.roa (raw, json)
Hash identifier:          r8P+gwI7xXuFpg99xWoboC+m21AtNVYJS3si0aBXTKo=
Subject key identifier:   CD:12:1A:87:F9:A1:29:A5:8D:B6:D2:C0:C7:A6:CB:84:56:0F:87:2F
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       292D161216DFC5CCEA251CA0C1EF99A8C7137389
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/323830303a3836303a3a2f33322d3332203d3e20323632313937.roa
Signing time:             Tue 05 Mar 2024 18:00:02 +0000
ROA not before:           Tue 05 Mar 2024 17:55:02 +0000
ROA not after:            Tue 04 Mar 2025 18:00:02 +0000
asID:                     262197
IP address blocks:        2800:860::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 08 May 2024 20:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2d:16:12:16:df:c5:cc:ea:25:1c:a0:c1:ef:99:a8:c7:13:73:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:55:02 2024 GMT
            Not After : Mar  4 18:00:02 2025 GMT
        Subject: CN=CD121A87F9A129A58DB6D2C0C7A6CB84560F872F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c2:2f:84:43:93:04:ab:46:82:3f:b6:c9:fc:
                    dc:d2:cf:93:c5:d8:f9:1c:d6:26:1b:3f:cd:ec:da:
                    c9:d9:31:8e:c2:58:2d:da:64:37:b0:6b:fa:6a:17:
                    a0:19:94:04:ad:0c:ed:2a:15:85:96:d2:f4:a7:93:
                    6c:a9:48:de:b9:d0:2b:8b:81:dd:36:62:c1:cc:73:
                    3b:29:1b:da:25:37:db:61:d6:03:10:96:6e:4c:13:
                    59:21:d0:23:9f:f5:83:32:de:c8:5d:cc:e2:55:7d:
                    f5:28:12:95:e9:60:10:a7:5d:66:63:ac:5e:b8:ce:
                    ee:81:0f:1a:67:93:04:93:94:c5:21:63:63:32:3a:
                    4f:9e:bf:1c:87:06:f4:48:3b:97:19:76:2d:a3:d7:
                    66:5f:d5:8b:87:fb:c8:b4:19:29:82:df:51:87:50:
                    d3:ab:a9:24:b3:f2:14:f4:59:c7:2c:0e:c6:fa:3d:
                    75:80:fc:14:33:7f:10:83:b0:d0:4e:c8:aa:3d:1b:
                    f7:dd:b8:35:8b:98:b2:0f:66:67:57:c7:7d:e9:19:
                    d5:71:61:47:e5:82:6b:bb:d0:8c:15:74:dc:85:23:
                    eb:10:4a:7a:3b:72:e6:86:9a:55:88:27:e6:dd:97:
                    e6:44:3c:7c:e2:55:bb:26:42:de:2b:fd:4d:ed:a5:
                    2d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:12:1A:87:F9:A1:29:A5:8D:B6:D2:C0:C7:A6:CB:84:56:0F:87:2F
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/323830303a3836303a3a2f33322d3332203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:860::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:38:36:5f:88:52:ca:07:ff:9a:0b:d1:fa:a7:15:56:84:79:
         be:4d:87:7a:f0:3d:f5:c9:f3:8d:fd:58:b1:ca:f7:04:2b:be:
         57:01:d0:cc:78:fd:35:ec:c5:c0:0d:96:77:af:7f:c5:bb:8d:
         b8:3a:b0:24:1c:4c:1d:5a:17:13:f8:9c:59:6d:11:d4:66:73:
         ee:30:a3:fd:f5:6e:fc:6a:5b:e5:71:79:d3:a2:0a:d6:20:5a:
         cd:1b:f7:5a:e4:0c:3f:fb:13:fe:0b:c8:92:29:1f:65:b6:c7:
         04:3f:7c:6f:ad:34:49:03:60:52:61:0a:ca:07:70:fb:3d:76:
         6e:4d:4c:26:f0:6c:81:eb:bf:a0:fc:91:eb:9a:b1:bf:5b:93:
         25:db:51:d7:0e:55:f6:8a:ef:c1:a7:2e:6e:02:8e:b4:f3:13:
         d5:41:49:ca:14:81:78:d9:60:5f:41:0c:c3:6f:28:7f:bc:5d:
         81:28:31:1d:c9:04:d6:a4:64:f3:39:9d:32:c9:d5:89:dc:f7:
         1d:14:f5:9d:57:77:07:64:5c:e9:1a:32:2a:ad:91:26:b4:e5:
         dd:8d:48:3b:8f:2c:71:94:96:ba:b5:8e:42:23:a8:16:25:10:
         be:ce:fe:7c:87:dc:bf:96:da:50:92:74:47:a2:61:9d:51:af:
         15:75:77:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----