Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/323830333a6231303a3a2f33382d3338203d3e203532343638.roa
File:                     323830333a6231303a3a2f33382d3338203d3e203532343638.roa (raw, json)
Hash identifier:          aCFE4E1GHpIFFZJTzDljQL12aloQkPkb+OXugmRUShI=
Subject key identifier:   C2:4C:FE:02:D0:37:AB:16:31:66:73:05:E8:99:FF:35:6D:CE:85:B2
Certificate issuer:       /CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
Certificate serial:       2CF2F86A9518D9A19D1793EB12A8D9F4E12DF720
Authority key identifier: CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/323830333a6231303a3a2f33382d3338203d3e203532343638.roa
Signing time:             Thu 15 Aug 2024 16:10:00 +0000
ROA not before:           Thu 15 Aug 2024 16:05:00 +0000
ROA not after:            Thu 14 Aug 2025 16:10:00 +0000
asID:                     52468
IP address blocks:        2803:b10::/38 maxlen: 38

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 19:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f2:f8:6a:95:18:d9:a1:9d:17:93:eb:12:a8:d9:f4:e1:2d:f7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
        Validity
            Not Before: Aug 15 16:05:00 2024 GMT
            Not After : Aug 14 16:10:00 2025 GMT
        Subject: CN=C24CFE02D037AB1631667305E899FF356DCE85B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ba:64:05:4a:51:8f:25:ee:8b:07:92:32:1d:
                    68:3b:7d:21:20:2d:78:06:43:16:5c:a9:ac:08:66:
                    9e:5e:cc:e6:fd:b7:e9:36:f1:0d:04:d9:0d:84:d1:
                    98:d9:d2:e4:bd:75:5f:08:e5:13:73:93:d8:7f:e0:
                    68:f0:55:75:77:9b:3b:3e:7f:b2:5f:ea:5d:40:52:
                    9e:cd:b5:8b:d5:5f:27:90:19:60:9e:59:b7:d2:ea:
                    95:8d:fb:e1:e2:3b:a5:81:8b:64:4d:21:0f:e1:2d:
                    71:55:bd:19:5a:35:a8:81:0d:21:36:a5:24:37:6c:
                    b1:39:ee:72:6c:1e:1b:7e:93:eb:89:6a:aa:76:52:
                    38:c0:d1:56:f4:c9:60:a7:c7:f8:3b:00:3c:1b:d9:
                    f7:ea:dc:73:52:a0:8f:c0:65:4d:5c:de:23:ae:5b:
                    01:ef:3f:54:a5:0c:c9:27:5a:c6:fe:2c:ab:1f:4c:
                    f0:38:2f:05:48:04:90:fa:1f:53:b8:b7:d7:84:45:
                    4e:56:d6:88:e9:23:15:92:1a:cc:83:60:5c:8f:3b:
                    b9:57:9a:d5:92:11:cd:90:65:e4:64:b4:72:16:11:
                    d9:c8:65:28:00:cc:c1:c9:29:45:2b:1a:6d:8b:2a:
                    0c:12:43:84:b5:4a:8d:d5:d3:cc:1a:e6:ed:8b:27:
                    43:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4C:FE:02:D0:37:AB:16:31:66:73:05:E8:99:FF:35:6D:CE:85:B2
            X509v3 Authority Key Identifier:
                keyid:CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/323830333a6231303a3a2f33382d3338203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b10::/38

    Signature Algorithm: sha256WithRSAEncryption
         7a:78:1b:e8:d8:a1:c8:ae:f0:91:a3:91:50:2e:31:38:29:7e:
         74:05:c5:6c:ae:82:a1:e2:8d:8c:49:18:9a:ef:98:d1:ef:b5:
         05:13:9c:be:57:b3:1c:9c:23:c1:45:ca:f6:e5:29:d8:5e:c4:
         ca:83:5c:af:50:2f:2d:ce:0e:e0:f7:e8:03:24:cf:9b:61:91:
         c0:cc:4c:33:e1:90:b1:22:d8:ca:d0:40:b3:d6:60:bd:72:19:
         6d:bc:9c:25:83:f8:96:6c:53:5f:a9:44:11:45:7f:fe:0b:76:
         80:0e:43:54:ca:c0:0d:9d:ba:b6:14:91:7a:24:c4:54:62:5b:
         18:78:b1:78:16:34:9e:18:d5:58:a0:fc:dc:cc:be:9f:ff:71:
         f3:26:aa:68:75:00:af:f8:1e:32:03:28:91:96:a1:72:e8:29:
         4f:a7:d3:06:96:ce:bb:d2:db:a4:4e:2d:e9:28:a5:4f:0f:48:
         2c:ba:97:f8:47:7a:b5:4a:6a:4f:d3:c0:5c:39:f0:d1:b8:5e:
         d4:97:1a:9a:f5:7a:5a:39:ac:8c:aa:b7:f4:65:9f:20:18:c2:
         54:73:9a:57:5b:d8:a3:b0:1e:42:3a:d9:a1:1a:c9:61:d2:a4:
         6d:bd:2a:9f:c2:71:42:a5:88:d5:cd:db:6a:67:ee:44:d9:2a:
         51:f4:10:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----