Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/323830333a646135303a3a2f33322d3332203d3e20323733313836.roa
File:                     323830333a646135303a3a2f33322d3332203d3e20323733313836.roa (raw, json)
Hash identifier:          DgQTLumb0ZQ4QDK6s4m9tNuNkwD2GC6cd8nfUvY6XPc=
Subject key identifier:   E1:1B:87:01:A8:A9:CD:F5:73:04:9F:03:14:0C:23:C1:EE:6B:48:9B
Certificate issuer:       /CN=49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0
Certificate serial:       36ADC748A09289FE8DD4335D1B9CDBC867E09A2F
Authority key identifier: 49:AF:E5:D3:AF:C3:6E:51:04:ED:49:C7:14:4D:92:1C:53:BA:2D:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/323830333a646135303a3a2f33322d3332203d3e20323733313836.roa
Signing time:             Tue 05 Mar 2024 17:50:30 +0000
ROA not before:           Tue 05 Mar 2024 17:45:30 +0000
ROA not after:            Tue 04 Mar 2025 17:50:30 +0000
asID:                     273186
IP address blocks:        2803:da50::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 23 Aug 2024 03:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ad:c7:48:a0:92:89:fe:8d:d4:33:5d:1b:9c:db:c8:67:e0:9a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0
        Validity
            Not Before: Mar  5 17:45:30 2024 GMT
            Not After : Mar  4 17:50:30 2025 GMT
        Subject: CN=E11B8701A8A9CDF573049F03140C23C1EE6B489B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:c4:b6:c0:91:c4:cf:b0:e7:86:8d:2b:da:
                    4e:58:31:cf:5a:66:38:e0:ea:ed:f0:d2:9f:0f:e1:
                    bd:21:61:95:86:23:6b:df:01:e2:7b:16:44:1e:19:
                    3f:d9:f0:66:b8:6e:5a:da:5b:1d:ab:18:4c:a0:81:
                    d7:a2:8b:4d:0b:b4:62:5f:be:55:19:ac:24:28:d1:
                    76:2e:c5:72:63:2e:c3:c1:5c:a6:5d:2a:35:32:60:
                    ae:36:95:4d:6f:ee:39:55:d7:d4:59:98:84:4a:77:
                    24:5c:98:8f:ab:3c:93:5c:4f:6b:3f:8f:ee:fa:eb:
                    7c:69:49:55:52:d0:7b:b3:18:69:0f:55:68:fb:f1:
                    9f:5e:6c:ea:e0:a4:cb:9e:a7:f5:42:e4:3d:77:37:
                    2b:98:63:46:66:56:a1:ae:32:07:e6:66:e3:ea:f3:
                    7c:e2:4d:50:cf:d1:ec:17:f7:3c:ff:90:e7:92:ac:
                    24:d0:51:da:f0:ad:34:80:98:85:2b:1d:08:c6:cf:
                    d9:0f:6f:95:c9:1a:13:dc:1b:83:8c:0d:61:6a:bc:
                    2b:83:69:43:b5:9a:7f:5a:63:fc:a1:78:10:6c:d2:
                    d4:9f:af:05:eb:e6:0d:fa:6b:1d:1f:b2:47:29:4d:
                    74:0f:01:0b:bc:80:1b:17:f2:8f:89:d4:61:15:6a:
                    88:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1B:87:01:A8:A9:CD:F5:73:04:9F:03:14:0C:23:C1:EE:6B:48:9B
            X509v3 Authority Key Identifier:
                keyid:49:AF:E5:D3:AF:C3:6E:51:04:ED:49:C7:14:4D:92:1C:53:BA:2D:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/323830333a646135303a3a2f33322d3332203d3e20323733313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:da50::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:ba:b8:d6:e4:d8:48:27:99:f1:06:0a:cb:10:0a:3e:b8:79:
         78:19:2b:d2:f7:a4:bc:15:6c:b2:9c:b1:1a:1f:02:4d:5c:6d:
         53:6c:77:05:bb:87:5f:50:bf:46:4c:93:c2:f6:51:e5:40:7d:
         33:09:a7:cc:2c:da:d0:51:9f:8f:c0:22:fe:5c:d1:7c:3d:df:
         f9:bc:99:21:19:5d:89:a2:81:27:60:c0:eb:ee:5f:df:84:61:
         01:f7:1a:b2:4b:66:db:e9:4a:94:ec:1b:c0:ea:cc:64:85:bb:
         82:48:78:20:48:e6:f4:6b:91:2f:a8:8a:f6:2e:15:8b:e1:ca:
         b7:57:25:5a:3d:08:0c:cb:1c:7f:14:cc:fe:42:21:a1:3d:96:
         cc:2c:0b:b4:9c:d3:23:7b:2d:df:fc:55:af:45:a4:0f:f0:10:
         cf:57:06:11:cd:8b:2f:91:2b:b7:6e:ff:3f:56:8e:72:80:97:
         3e:d6:eb:1a:01:87:1d:77:bb:bc:8b:3a:d6:18:a2:b4:f1:f0:
         1d:c0:c1:a9:9e:a0:98:47:39:c9:e8:6b:88:4e:9c:1c:51:b9:
         95:3d:df:a9:dd:d3:4f:ee:3b:45:38:1c:14:97:eb:2d:c1:cf:
         45:b3:1d:09:9a:3b:e1:ab:9c:56:04:8b:ac:d3:50:d8:72:89:
         ae:ca:e4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----