Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a3a2f34382d3438203d3e20323637373837.roa
File:                     323830333a346661303a3a2f34382d3438203d3e20323637373837.roa (raw, json)
Hash identifier:          +p9Fu6sbVtvAaFoZwTeVqWz/JzIej/w9K2aBhWcx+rQ=
Subject key identifier:   7B:F0:3F:25:D6:93:41:BD:8C:E6:6C:D3:39:A3:43:FA:5A:F3:C0:B6
Certificate issuer:       /CN=43A05913712B315DAEB6D1167128428DD7B6D362
Certificate serial:       4BA0BADA6D7693D538CF45FDB095EF80C32A3B28
Authority key identifier: 43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a3a2f34382d3438203d3e20323637373837.roa
Signing time:             Fri 06 Sep 2024 22:55:01 +0000
ROA not before:           Fri 06 Sep 2024 22:50:01 +0000
ROA not after:            Fri 05 Sep 2025 22:55:01 +0000
asID:                     267787
IP address blocks:        2803:4fa0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a0:ba:da:6d:76:93:d5:38:cf:45:fd:b0:95:ef:80:c3:2a:3b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A05913712B315DAEB6D1167128428DD7B6D362
        Validity
            Not Before: Sep  6 22:50:01 2024 GMT
            Not After : Sep  5 22:55:01 2025 GMT
        Subject: CN=7BF03F25D69341BD8CE66CD339A343FA5AF3C0B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:72:47:3f:b5:51:db:73:ad:3a:80:ce:2a:6b:
                    b2:69:ab:1b:8f:5a:b9:7c:91:83:80:73:dc:11:c3:
                    fd:40:3b:e8:9d:4d:a2:9b:da:85:39:80:df:e8:5b:
                    2e:9a:6b:e2:87:c8:ce:63:aa:e5:34:43:9e:dd:a3:
                    4a:57:24:32:d5:85:ed:44:d1:6e:9e:a6:91:13:8f:
                    5b:0a:7a:0b:23:6d:e1:c6:d6:ff:21:05:b0:60:dc:
                    e8:2a:61:1c:87:12:4b:c5:9f:54:9a:2c:77:84:ff:
                    f6:ee:bb:7f:b5:b6:46:57:cf:58:6f:42:84:91:03:
                    d3:95:10:8b:3e:1a:88:a5:10:f3:3c:24:b5:25:dc:
                    e6:6d:1a:9e:6a:62:96:d1:18:d1:67:dd:f8:dc:e3:
                    23:07:28:c7:24:13:41:5c:a9:f6:e3:7d:cc:f4:af:
                    ac:80:81:26:b9:09:fc:0d:aa:31:3e:d4:46:80:ae:
                    a3:ac:7e:3c:a5:e6:61:d5:1b:7c:fb:69:9a:ad:da:
                    c9:50:c3:18:62:9f:b4:2c:96:fe:f0:cd:c7:3d:e9:
                    7d:62:8b:f0:b6:fd:54:2d:49:11:b2:ae:88:b3:34:
                    cc:fe:99:62:b5:fd:5d:9d:8a:5a:b3:52:d0:a0:3e:
                    1f:d8:d7:eb:84:34:92:6c:1f:88:56:18:45:d3:df:
                    ec:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F0:3F:25:D6:93:41:BD:8C:E6:6C:D3:39:A3:43:FA:5A:F3:C0:B6
            X509v3 Authority Key Identifier:
                keyid:43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a3a2f34382d3438203d3e20323637373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4fa0::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:72:f2:a8:0c:b4:3e:4b:0b:5e:ec:e5:06:45:89:14:e1:7a:
         f7:e4:b1:ca:d1:f8:ea:35:38:aa:62:8c:2d:ac:f4:ac:24:34:
         66:53:13:01:24:fd:21:8d:05:0f:b5:0e:eb:b3:b5:9f:95:7c:
         85:1f:ae:d8:65:bb:07:34:72:ae:c4:4d:0d:b6:16:30:ea:32:
         0a:6b:d1:46:de:4a:39:47:1d:d3:5d:29:e9:f4:47:61:dd:3f:
         14:e5:0d:01:64:5f:38:11:ac:de:0e:d2:61:1a:a2:54:03:95:
         e7:59:0f:96:16:7a:7e:27:f3:67:bd:1f:87:7a:ba:43:b2:c3:
         a0:50:1a:fb:4c:c7:6f:e2:34:d2:35:97:d6:4a:cd:78:81:ed:
         90:3c:61:55:e9:6c:84:32:ff:79:7d:15:43:eb:88:a7:76:84:
         3f:ea:6c:39:e8:8f:76:31:be:ea:b3:0a:73:36:73:da:6f:75:
         63:bf:e6:6b:f7:26:0b:71:dd:e9:51:9f:f7:22:68:9c:ff:28:
         dc:0e:e1:2a:7e:58:12:af:f6:3b:5b:8e:a6:3b:62:fd:21:bc:
         e9:47:39:f9:42:f4:b0:53:95:f3:81:48:97:ec:0a:30:dd:91:
         fa:43:ea:bc:87:cf:48:64:1e:ed:7b:52:1b:a8:6e:d8:ca:7c:
         54:c2:30:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----