Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/323830333a353834303a3a2f33322d3332203d3e20323632313435.roa
File:                     323830333a353834303a3a2f33322d3332203d3e20323632313435.roa (raw, json)
Hash identifier:          HIS6zNfGGwlMBNw5ObS2eISt7rsfj24WNYlpiUW5g7A=
Subject key identifier:   8C:C7:51:25:D2:07:6E:02:60:6F:9F:A9:EE:BC:4C:A1:EA:90:FA:61
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       757901421FDEB847676F39C8CB7C32B4A98D2A7E
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/323830333a353834303a3a2f33322d3332203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:14 +0000
ROA not before:           Tue 05 Mar 2024 17:42:14 +0000
ROA not after:            Tue 04 Mar 2025 17:47:14 +0000
asID:                     262145
IP address blocks:        2803:5840::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 08 Aug 2024 21:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:79:01:42:1f:de:b8:47:67:6f:39:c8:cb:7c:32:b4:a9:8d:2a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:14 2024 GMT
            Not After : Mar  4 17:47:14 2025 GMT
        Subject: CN=8CC75125D2076E02606F9FA9EEBC4CA1EA90FA61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:74:d7:73:0f:ce:72:ca:17:7d:82:43:e3:
                    86:01:b6:b9:d1:34:25:c5:8e:df:12:fb:2b:31:07:
                    b5:31:ee:3f:cd:4e:cb:da:71:56:1a:1d:34:e0:b7:
                    bf:be:b3:a8:4f:f3:a4:02:5d:a1:a6:7d:61:9a:b4:
                    db:90:e4:7e:e8:93:92:82:e6:2d:3e:fc:2d:4d:1f:
                    d3:5b:bf:e9:1a:24:5c:4f:ed:1c:d0:42:ea:27:87:
                    e3:e8:9a:d8:6b:fe:6c:dc:99:61:cd:fc:7c:c2:5b:
                    6b:64:21:cd:5f:03:21:10:79:f7:3a:77:01:b9:0f:
                    ce:52:44:ac:33:40:29:7a:af:a2:3b:f9:12:c1:b6:
                    c9:d5:fa:74:3a:ae:63:f7:69:a4:c3:3a:77:9e:ba:
                    2d:06:5d:a7:49:66:39:a1:14:3e:59:cd:51:74:1d:
                    d5:f8:cc:63:7a:01:f9:05:66:31:cc:32:c4:8e:9b:
                    c5:b3:fa:14:57:27:1c:c3:7b:b7:b3:01:06:51:1b:
                    c7:ba:13:8d:b1:cb:1d:06:ae:c7:1c:85:05:7a:a7:
                    33:56:39:1a:d7:05:84:fb:a2:b5:91:82:a4:bd:80:
                    1a:35:65:93:60:7c:40:1a:10:33:22:ca:46:3b:de:
                    7a:4e:96:64:1c:1f:01:0e:d2:e5:15:e4:43:b4:a4:
                    8c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C7:51:25:D2:07:6E:02:60:6F:9F:A9:EE:BC:4C:A1:EA:90:FA:61
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/323830333a353834303a3a2f33322d3332203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5840::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:57:d0:79:01:6c:a4:50:21:1c:a5:e4:ee:94:c8:57:2e:53:
         6e:3e:66:a6:20:08:79:e4:7e:20:4f:d8:1a:b7:f5:ee:78:4f:
         4e:2b:f0:5d:64:1f:39:e7:b5:ef:e1:76:8c:fa:b6:0c:9d:4e:
         ad:b9:3d:fa:b0:cb:6c:29:98:3e:20:f6:a5:d8:65:bc:9c:dc:
         be:3d:af:77:c7:ec:b5:27:c7:0b:19:38:7e:cf:a0:0c:44:22:
         bf:34:84:75:b5:d3:48:9d:71:90:d0:e9:8f:cb:04:8c:6d:25:
         69:af:83:8b:44:4b:19:da:b1:16:d9:80:f5:9c:58:91:6d:55:
         69:82:9f:73:62:01:b9:6a:32:07:82:7a:bd:f6:97:76:7f:f1:
         bb:b0:98:fa:5c:75:e7:08:61:ba:55:0c:da:51:16:ef:52:a4:
         6d:3f:0b:8f:27:36:3e:d7:2a:2e:6d:67:ec:03:35:c3:6e:86:
         dc:ad:28:4b:c7:fb:f0:6a:d7:55:7f:78:19:0f:cb:90:6b:c4:
         ed:dd:7a:a2:15:62:3b:66:26:52:0a:8a:34:87:47:d8:14:1c:
         86:72:ca:20:47:ef:ab:8f:14:f0:01:f6:dc:df:5e:36:c0:11:
         48:02:23:4a:e7:1d:c2:43:92:74:8f:7e:72:f8:9f:6a:20:66:
         7f:e9:ec:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----