Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032303a3a2f34382d3536203d3e20323634383435.roa
File:                     323030313a313363373a373032303a3a2f34382d3536203d3e20323634383435.roa (raw, json)
Hash identifier:          FHKKP/uR49Wo+loxS8r4ToYh0hGbGp+liS253VErtuk=
Subject key identifier:   52:04:21:9A:0B:DC:85:FC:EC:A3:3F:71:35:11:04:85:FC:B0:29:8C
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       452DA414719F8C33EC1C177DEFF4D63290CBEF6F
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032303a3a2f34382d3536203d3e20323634383435.roa
Signing time:             Tue 05 Mar 2024 17:39:52 +0000
ROA not before:           Tue 05 Mar 2024 17:34:52 +0000
ROA not after:            Tue 04 Mar 2025 17:39:52 +0000
asID:                     264845
IP address blocks:        2001:13c7:7020::/48 maxlen: 56

Validation:               Failed, certificate revoked on Thu 02 May 2024 18:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2d:a4:14:71:9f:8c:33:ec:1c:17:7d:ef:f4:d6:32:90:cb:ef:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:52 2024 GMT
            Not After : Mar  4 17:39:52 2025 GMT
        Subject: CN=5204219A0BDC85FCECA33F7135110485FCB0298C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:77:92:51:b5:5e:1d:a3:43:b8:04:8f:85:
                    a3:0b:ef:cc:68:e2:15:de:dc:53:79:76:db:b3:9b:
                    e1:f4:cd:e7:d4:ae:d3:1b:e7:f2:e8:e7:6f:b0:3e:
                    96:04:86:40:4e:4b:00:2a:45:2b:ff:0d:ed:ff:28:
                    f1:bd:8c:e9:9f:12:3c:66:a3:db:26:a8:2d:9d:ca:
                    dd:4d:42:d5:3e:9e:3a:83:af:89:62:5d:8b:4c:02:
                    3d:4a:8a:5f:00:5b:f8:f5:c8:d6:9e:c7:8a:e3:0e:
                    63:9c:80:12:ad:42:38:d6:47:2d:67:0b:4a:1f:f0:
                    55:fb:48:6d:06:3d:4f:f3:ec:ad:37:08:5b:8f:09:
                    39:5a:5d:7c:29:3b:e9:87:d8:72:71:a3:6d:cb:7b:
                    e3:a7:76:35:b3:b9:96:54:ea:60:cb:ca:ed:94:e3:
                    d3:80:e4:e2:1f:6f:b8:0e:1a:00:2c:35:89:ac:c1:
                    ce:06:20:cb:2f:ae:5e:a1:28:c3:47:bd:e2:e6:53:
                    8e:0f:c4:32:31:44:ed:4d:60:0a:19:b1:d1:e1:2b:
                    6b:55:4b:f6:eb:20:66:38:ec:6b:40:29:0b:7c:b0:
                    9d:fa:5c:51:40:f6:92:1b:2c:b8:90:07:1a:15:9b:
                    41:3b:ea:e3:e5:b4:c2:e0:c7:3c:b2:b6:e3:f9:83:
                    10:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:04:21:9A:0B:DC:85:FC:EC:A3:3F:71:35:11:04:85:FC:B0:29:8C
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373032303a3a2f34382d3536203d3e20323634383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/48

    Signature Algorithm: sha256WithRSAEncryption
         d6:2b:6d:5e:e1:52:b7:16:81:3d:af:b0:ec:80:00:14:10:15:
         0e:7e:8e:96:13:06:66:6b:02:be:33:0d:97:35:2c:ab:67:97:
         bf:be:79:d0:7c:e2:d7:e7:d0:b6:b5:98:82:bd:b6:dd:72:98:
         76:64:bb:8c:27:e0:47:59:9a:a4:a6:2d:3f:b1:ca:db:24:69:
         55:fe:fb:30:dc:4c:f9:5d:0b:90:68:7a:0d:6b:be:5e:fe:37:
         81:d0:91:61:71:1d:2f:54:ad:72:0f:47:68:16:16:51:fd:d9:
         4d:f1:08:dd:db:90:18:15:1d:d0:e1:ed:12:2b:77:12:13:d0:
         2f:3f:7a:dd:37:a7:ea:f0:8b:b6:95:ff:f3:e0:0f:1b:43:66:
         b5:c5:52:a3:2a:cf:6c:1b:0b:17:3d:0f:ee:9b:e5:84:02:89:
         92:ae:b8:da:a9:fa:a9:94:94:71:44:45:fb:47:ed:40:48:63:
         f7:07:33:2b:0f:d9:e9:4b:d8:d4:da:ab:e6:ee:14:6c:95:c8:
         39:d0:77:db:68:48:ea:c7:9b:ed:58:00:45:19:c0:ff:3b:5a:
         db:89:07:94:71:80:0b:c6:7e:16:7a:c5:39:14:39:bc:82:b6:
         cc:37:ce:a3:17:02:fe:6b:98:c8:15:ca:66:87:b2:5a:38:c3:
         31:40:b9:28
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIURS2kFHGfjDPsHBd97/TWMpDL728wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1NkI5MDExQUU4QzlBREREOTY4MDNERUNFMUQxRjkz
MDZEODFERTAeFw0yNDAzMDUxNzM0NTJaFw0yNTAzMDQxNzM5NTJaMDMxMTAvBgNV
BAMTKDUyMDQyMTlBMEJEQzg1RkNFQ0EzM0Y3MTM1MTEwNDg1RkNCMDI5OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6LHeSUbVeHaNDuASPhaML78xo
4hXe3FN5dtuzm+H0zefUrtMb5/Lo52+wPpYEhkBOSwAqRSv/De3/KPG9jOmfEjxm
o9smqC2dyt1NQtU+njqDr4liXYtMAj1Kil8AW/j1yNaex4rjDmOcgBKtQjjWRy1n
C0of8FX7SG0GPU/z7K03CFuPCTlaXXwpO+mH2HJxo23Le+OndjWzuZZU6mDLyu2U
49OA5OIfb7gOGgAsNYmswc4GIMsvrl6hKMNHveLmU44PxDIxRO1NYAoZsdHhK2tV
S/brIGY47GtAKQt8sJ36XFFA9pIbLLiQBxoVm0E76uPltMLgxzyytuP5gxC7AgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQUUgQhmgvchfzsoz9xNREEhfywKYwwHwYDVR0j
BBgwFoAUH1a5ARroya3dloA97OHR+TBtgd4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QUMzM0Q0QUM4NDQ0MzlEOTQ1RjJGQTlGN0JCNzhGMDY0
NjhFMjJDOEJGNTgzNEE1NjhDQzAwMDQ5QUMzQTdCLzAvMUY1NkI5MDExQUU4QzlB
REREOTY4MDNERUNFMUQxRjkzMDZEODFERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjU2QjkwMTFBRThDOUFEREQ5
NjgwM0RFQ0UxRDFGOTMwNkQ4MURFLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUFDMzNENEFDODQ0NDM5RDk0NUYyRkE5RjdCQjc4RjA2NDY4RTIyQzhC
RjU4MzRBNTY4Q0MwMDA0OUFDM0E3Qi8wLzMyMzAzMDMxM2EzMTMzNjMzNzNhMzcz
MDMyMzAzYTNhMmYzNDM4MmQzNTM2MjAzZDNlMjAzMjM2MzQzODM0MzUucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAgARPHcCAwDQYJKoZIhvcNAQELBQADggEBANYrbV7hUrcWgT2vsOyAABQQ
FQ5+jpYTBmZrAr4zDZc1LKtnl7++edB84tfn0La1mIK9tt1ymHZku4wn4EdZmqSm
LT+xytskaVX++zDcTPldC5Boeg1rvl7+N4HQkWFxHS9UrXIPR2gWFlH92U3xCN3b
kBgVHdDh7RIrdxIT0C8/et03p+rwi7aV//PgDxtDZrXFUqMqz2wbCxc9D+6b5YQC
iZKuuNqp+qmUlHFERftH7UBIY/cHMysP2elL2NTaq+buFGyVyDnQd9toSOrHm+1Y
AEUZwP87WtuJB5RxgAvGfhZ6xTkUObyCtsw3zqMXAv5rmMgVymaHslo4wzFAuSg=
-----END CERTIFICATE-----