Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/323830333a333432303a3a2f33322d3332203d3e20323635383235.roa
File:                     323830333a333432303a3a2f33322d3332203d3e20323635383235.roa (raw, json)
Hash identifier:          gzNCrtJEsDgwRHolwCxq/rJ/JcETzeU49Izztd/2vUo=
Subject key identifier:   29:B0:49:CD:A2:BF:E0:98:4D:60:63:6D:61:16:90:D9:C1:12:BD:15
Certificate issuer:       /CN=68736797179852482212F2380438B90C707A82C2
Certificate serial:       7BE82000F827928D7605C0E3BBB564DAD0815CEB
Authority key identifier: 68:73:67:97:17:98:52:48:22:12:F2:38:04:38:B9:0C:70:7A:82:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/323830333a333432303a3a2f33322d3332203d3e20323635383235.roa
Signing time:             Tue 05 Mar 2024 17:45:53 +0000
ROA not before:           Tue 05 Mar 2024 17:40:53 +0000
ROA not after:            Tue 04 Mar 2025 17:45:53 +0000
asID:                     265825
IP address blocks:        2803:3420::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 25 Sep 2024 14:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e8:20:00:f8:27:92:8d:76:05:c0:e3:bb:b5:64:da:d0:81:5c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68736797179852482212F2380438B90C707A82C2
        Validity
            Not Before: Mar  5 17:40:53 2024 GMT
            Not After : Mar  4 17:45:53 2025 GMT
        Subject: CN=29B049CDA2BFE0984D60636D611690D9C112BD15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:17:0e:66:1a:62:e2:bc:9e:59:9f:c5:a7:
                    58:10:11:44:0a:b6:3f:d6:de:81:61:35:f0:fa:5d:
                    e7:7d:75:df:a5:ba:0c:4f:fb:e0:c2:d5:cf:54:47:
                    a7:d4:6b:94:ac:4a:c5:c3:9b:66:e3:70:24:62:e8:
                    be:7b:4e:b6:b6:3f:4a:64:72:58:1c:bb:38:f1:44:
                    7d:78:9a:74:b8:15:c1:6e:5a:6b:64:6d:12:20:5f:
                    6d:a2:ab:ec:b2:04:d7:94:02:21:31:9d:f7:f0:49:
                    92:32:b1:f2:9b:9a:f5:b4:9a:00:5a:63:5a:70:66:
                    ba:b6:7c:6c:8a:8a:d1:d3:5c:e5:c1:60:a6:04:00:
                    a3:ee:d6:a6:50:4a:0d:a2:b6:da:31:1f:fc:d5:ea:
                    f3:ec:54:ee:0a:17:0b:84:cf:87:27:10:ce:70:bc:
                    4f:67:c4:eb:ec:d2:3b:b6:a1:db:7a:5c:45:85:35:
                    ac:ec:ed:5a:7c:3b:d3:af:4b:61:05:25:65:45:1c:
                    d8:a5:67:f7:2c:ac:06:87:32:48:00:4e:c6:7b:1f:
                    33:52:e7:87:8e:d6:df:d7:30:8c:56:3c:c3:60:65:
                    94:09:3b:33:39:7f:f0:22:8b:52:33:c6:44:11:19:
                    e9:93:7a:1c:14:a7:de:a8:3f:f0:9e:e2:04:e2:5f:
                    38:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B0:49:CD:A2:BF:E0:98:4D:60:63:6D:61:16:90:D9:C1:12:BD:15
            X509v3 Authority Key Identifier:
                keyid:68:73:67:97:17:98:52:48:22:12:F2:38:04:38:B9:0C:70:7A:82:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/68736797179852482212F2380438B90C707A82C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68736797179852482212F2380438B90C707A82C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6930AA9EB7C51F08035387AF1E428CFD25C829C605812F765C409B365EAF7828/0/323830333a333432303a3a2f33322d3332203d3e20323635383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3420::/32

    Signature Algorithm: sha256WithRSAEncryption
         c9:60:b0:8a:0f:63:58:cd:0d:b6:e8:5a:66:57:36:50:d6:02:
         21:fd:73:7e:40:0e:e6:99:be:4a:44:f3:cc:e0:70:05:c9:b1:
         f0:f8:6e:58:fb:f3:dd:06:18:22:9f:28:f3:70:cd:b0:53:09:
         08:67:8b:02:61:e7:a3:a2:d5:2b:b7:62:67:1c:35:70:6a:ae:
         76:78:99:62:5e:1e:b0:9a:c3:58:de:83:18:13:cb:0f:45:66:
         db:b3:3b:cd:76:26:af:be:f4:67:c8:66:4f:58:f6:f2:33:8a:
         c1:3b:61:2b:98:24:d3:e6:1d:ab:6a:0e:07:f4:65:d8:7e:bf:
         36:37:01:89:32:c9:e3:8c:31:f0:92:fb:36:bd:f6:5a:2c:76:
         27:5a:3f:fd:b2:25:f3:04:78:9b:c3:ca:76:c9:d8:da:c8:49:
         e8:3e:b8:db:7f:da:07:23:50:f4:a8:2c:df:2f:c1:c8:f0:b2:
         01:9f:08:04:7b:b9:21:cb:78:3f:09:2f:7e:13:f0:68:83:10:
         30:05:be:e9:09:ce:1d:f1:db:63:55:e9:a9:59:a6:c8:77:b6:
         04:86:8e:35:07:27:8a:0f:02:b5:e7:1f:90:6d:e1:01:2a:00:
         7c:ad:27:7e:32:10:36:13:46:94:66:f0:aa:40:a2:af:7f:8a:
         75:a8:ab:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----