Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/323830333a663435303a63303a3a2f34322d3432203d3e20323733313338.roa
File:                     323830333a663435303a63303a3a2f34322d3432203d3e20323733313338.roa (raw, json)
Hash identifier:          k/Z6KYKaxLD1sDWQPlXEPaN4Wq/4EjjtvYvZVULe+9c=
Subject key identifier:   3E:A5:52:11:04:71:21:8F:97:24:F4:2A:A3:49:2A:4D:94:9E:6C:6A
Certificate issuer:       /CN=8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41
Certificate serial:       5436B5E9721932F3DF21B68C43F9A8541B288623
Authority key identifier: 8A:07:FC:2E:71:1E:E9:10:2C:30:75:B9:D8:94:FA:6F:EA:2F:AE:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/323830333a663435303a63303a3a2f34322d3432203d3e20323733313338.roa
Signing time:             Tue 05 Mar 2024 18:16:48 +0000
ROA not before:           Tue 05 Mar 2024 18:11:48 +0000
ROA not after:            Tue 04 Mar 2025 18:16:48 +0000
asID:                     273138
IP address blocks:        2803:f450:c0::/42 maxlen: 42

Validation:               Failed, certificate revoked on Fri 19 Jul 2024 23:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:36:b5:e9:72:19:32:f3:df:21:b6:8c:43:f9:a8:54:1b:28:86:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41
        Validity
            Not Before: Mar  5 18:11:48 2024 GMT
            Not After : Mar  4 18:16:48 2025 GMT
        Subject: CN=3EA552110471218F9724F42AA3492A4D949E6C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7e:8f:14:a4:aa:6c:c5:b7:0d:ce:62:4c:51:
                    fd:e3:2d:b0:10:b1:d2:9f:30:ea:1a:27:06:1f:98:
                    78:37:3f:4c:7b:c3:ab:2e:c7:79:35:37:f3:aa:54:
                    26:05:a7:82:99:07:1e:92:dd:2b:fe:03:11:2d:7e:
                    70:82:27:a3:1f:19:77:91:62:11:77:57:f8:2e:15:
                    c6:42:22:4b:4f:90:b7:c5:ab:83:2b:a8:f8:c1:dc:
                    06:68:21:ea:f0:cc:88:f3:bc:18:f0:31:4f:b3:5f:
                    ca:8a:a6:88:b4:20:ad:b7:03:38:db:00:66:a9:bc:
                    8d:32:8b:08:bf:4a:f5:11:43:25:90:ec:29:6b:f4:
                    bf:e3:75:e9:9e:3b:e9:b1:f6:6d:37:f9:ef:bb:90:
                    98:c1:91:3f:95:d8:48:3a:17:04:dd:5e:b0:ff:1b:
                    65:42:f6:aa:40:d1:2c:20:50:75:ce:e0:2f:62:5f:
                    46:99:b7:26:04:17:4c:55:90:25:b7:e9:11:d5:b5:
                    c9:11:3f:f4:de:fa:2b:f0:42:bf:db:63:38:ad:a6:
                    d7:16:30:b9:10:30:d9:74:8f:7d:6f:a0:bb:e0:a9:
                    58:a3:a2:14:c2:71:34:ac:c8:cb:b8:a1:83:33:4c:
                    93:40:c5:8a:43:a5:e9:13:9f:b8:86:95:e0:c2:d5:
                    6e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A5:52:11:04:71:21:8F:97:24:F4:2A:A3:49:2A:4D:94:9E:6C:6A
            X509v3 Authority Key Identifier:
                keyid:8A:07:FC:2E:71:1E:E9:10:2C:30:75:B9:D8:94:FA:6F:EA:2F:AE:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/323830333a663435303a63303a3a2f34322d3432203d3e20323733313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f450:c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         53:28:97:7a:75:2c:77:f9:54:de:48:5f:98:42:9f:79:f9:88:
         46:5d:ef:90:6b:e6:22:54:33:f3:21:3e:20:dc:03:e2:a6:42:
         2f:ed:bd:fb:f5:85:09:26:2c:78:1b:6a:52:b5:39:99:4c:76:
         04:02:88:ae:5b:d6:94:02:0a:1c:4c:7f:94:b3:67:73:21:9f:
         0b:69:ed:6f:de:5b:d0:e9:6d:36:0a:62:d0:19:ac:9e:56:c2:
         a6:b4:98:4b:26:73:71:33:74:0c:e5:38:1c:75:5c:ea:dd:2b:
         cc:75:d5:2a:05:87:c4:d9:e2:2b:a7:e5:d7:dd:7c:e2:56:aa:
         52:e9:51:72:e2:cf:36:07:1e:d0:45:b6:8c:ed:ba:d9:dd:5d:
         c0:5f:25:16:9e:6a:22:e4:34:7b:04:45:96:c3:d6:ba:61:bf:
         db:c1:e2:e7:91:b3:ef:30:0e:86:c7:9c:2e:b3:21:fe:ab:2b:
         e7:ef:c6:89:32:eb:34:1e:cb:d9:a0:64:79:89:90:1d:67:b5:
         35:a9:4e:ec:16:ea:b6:81:10:e0:3a:48:4d:f9:4a:1c:44:72:
         a2:95:69:42:3a:00:4f:6e:89:a0:df:b7:f3:82:a4:a6:46:52:
         28:c7:86:19:90:ba:f8:c0:3e:14:3e:28:20:17:bc:13:7e:61:
         ec:60:bc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----