Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032303a3a2f34382d3438203d3e203238303030.roa
File:                     323030313a313363373a373032303a3a2f34382d3438203d3e203238303030.roa (raw, json)
Hash identifier:          3tndEHlP9qixeKztXaf9PaeBqqLxngfdojPXgokv3RU=
Subject key identifier:   9C:C9:D1:BD:18:90:A4:18:7C:97:9B:1B:74:DD:96:E2:BF:4A:61:54
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       20BA3FA3FE7F9C8ACABDC534B74AFF7C36DFBBB4
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032303a3a2f34382d3438203d3e203238303030.roa
Signing time:             Tue 05 Mar 2024 17:39:56 +0000
ROA not before:           Tue 05 Mar 2024 17:34:56 +0000
ROA not after:            Tue 04 Mar 2025 17:39:56 +0000
asID:                     28000
IP address blocks:        2001:13c7:7020::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 02 May 2024 18:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ba:3f:a3:fe:7f:9c:8a:ca:bd:c5:34:b7:4a:ff:7c:36:df:bb:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:56 2024 GMT
            Not After : Mar  4 17:39:56 2025 GMT
        Subject: CN=9CC9D1BD1890A4187C979B1B74DD96E2BF4A6154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c0:50:d8:c2:ca:79:70:0c:86:92:60:8c:a7:
                    7b:b1:0e:9b:e7:42:f3:c3:3e:c8:dd:c8:e4:fc:99:
                    6b:27:89:e8:5e:8b:5a:33:9a:a1:41:42:20:d3:90:
                    1e:58:5d:5f:81:09:3f:ac:69:b3:9c:2f:13:41:aa:
                    d7:be:dc:52:1e:2a:07:72:78:a3:5e:e5:fe:c9:41:
                    99:35:e2:20:0f:7d:5f:a5:83:b7:97:31:d7:0b:34:
                    27:f8:05:c5:8f:f4:a3:2a:74:1b:4d:23:87:4a:e0:
                    a4:3e:c4:6d:ce:a4:96:b4:1e:bd:3a:10:3a:94:40:
                    b5:74:dd:25:6b:db:bb:e8:29:99:02:a5:4d:fe:0e:
                    2d:99:53:4a:60:a0:ae:e6:11:3d:b4:1d:26:fb:c6:
                    0b:8b:bd:4e:3b:32:7b:eb:80:c2:2b:bd:67:a5:58:
                    45:f0:b2:4a:b0:7e:1c:a9:e2:b8:ea:f9:de:1d:cf:
                    2f:19:b9:cd:c1:cd:84:93:51:2d:e0:44:a1:7c:50:
                    1d:ef:b9:31:b5:cc:ec:2a:57:82:b5:65:1b:b3:d6:
                    11:15:19:49:a5:51:52:28:e2:d9:ec:aa:c6:bc:4b:
                    20:7c:7c:24:cf:b1:bb:41:5c:96:8a:65:97:ab:4b:
                    39:7b:79:01:be:cd:0c:eb:37:ab:a0:df:30:89:31:
                    6e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C9:D1:BD:18:90:A4:18:7C:97:9B:1B:74:DD:96:E2:BF:4A:61:54
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032303a3a2f34382d3438203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:c5:90:03:a3:4c:53:5f:84:23:56:8e:3c:aa:d9:9e:9f:42:
         41:26:46:c9:45:f3:42:0a:93:79:c4:64:b9:78:21:06:2a:38:
         5d:4a:89:c3:bc:f2:e8:67:d9:5b:74:24:1c:61:d2:c3:7b:4e:
         f7:9a:40:9a:ee:2e:61:83:71:7a:7d:56:16:b7:a9:08:95:5b:
         f3:d9:b0:72:8d:e1:0e:26:fb:86:75:18:ba:cc:10:86:b8:36:
         bb:62:c7:e9:2f:fa:87:a5:a6:64:8b:4b:53:8a:8f:90:39:e7:
         dc:fc:b5:72:69:5d:22:79:7a:68:69:05:43:ff:48:00:ad:6b:
         8e:92:a5:10:05:a7:92:42:a3:fe:90:06:19:db:97:73:20:fb:
         00:ae:65:29:9e:fc:d1:6f:63:b6:57:92:85:84:65:e9:bf:cf:
         07:a5:bd:f8:0b:c3:92:90:ed:51:ba:f9:44:a6:d7:1c:37:0e:
         f6:96:3c:8b:38:6a:19:c7:17:5d:70:f9:98:04:33:80:67:9e:
         df:17:6b:58:8b:25:88:53:a7:96:34:39:9a:39:4f:d1:90:8d:
         cf:0d:a7:11:5c:1d:19:46:e1:c2:15:59:20:68:9a:31:94:4f:
         78:f0:7d:c3:14:9f:9d:87:00:00:8e:fc:98:b7:34:e1:87:fc:
         4d:12:fc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----