Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/323830333a373538303a3a2f33322d3332203d3e203531323032.roa
File:                     323830333a373538303a3a2f33322d3332203d3e203531323032.roa (raw, json)
Hash identifier:          pofFweK81jNFsCxPIDu3boUrriPtCS6OHY5nF1jhb3M=
Subject key identifier:   90:37:33:7C:B6:B4:97:A0:CB:41:CA:E9:80:F8:D6:A3:2B:C2:8C:43
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       587EADA9BD0A7016133C70A70DE1527B230FC915
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/323830333a373538303a3a2f33322d3332203d3e203531323032.roa
Signing time:             Sun 07 Jul 2024 02:55:06 +0000
ROA not before:           Sun 07 Jul 2024 02:50:06 +0000
ROA not after:            Sun 06 Jul 2025 02:55:06 +0000
asID:                     51202
IP address blocks:        2803:7580::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 00:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7e:ad:a9:bd:0a:70:16:13:3c:70:a7:0d:e1:52:7b:23:0f:c9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  7 02:50:06 2024 GMT
            Not After : Jul  6 02:55:06 2025 GMT
        Subject: CN=9037337CB6B497A0CB41CAE980F8D6A32BC28C43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:f6:20:e8:73:6c:a7:92:21:f6:c9:89:e6:
                    47:0b:b9:c2:fa:f8:1b:cb:a6:5f:a6:c0:b1:af:1b:
                    90:8d:31:5d:cc:f9:05:bc:05:84:09:28:73:c8:8d:
                    1b:7b:cf:e4:95:b0:83:8a:91:8e:f5:17:0a:a9:25:
                    70:03:62:db:d9:8b:39:49:80:4d:c0:32:8b:3b:c9:
                    78:43:4a:c9:d9:64:d9:cb:29:48:e5:10:70:3d:74:
                    53:06:01:5a:1b:11:b0:f8:28:aa:7f:4a:fc:66:b4:
                    77:61:e5:30:8e:a5:a3:9c:6a:99:71:90:76:d2:89:
                    a3:82:f4:c9:47:74:07:d0:4b:04:2f:58:00:73:a4:
                    dd:a8:7b:11:47:c2:73:d2:93:5b:ae:dc:cb:5e:3e:
                    a7:53:0c:eb:69:ab:6b:07:22:e2:d0:47:4c:a5:73:
                    18:b0:75:4a:f8:c4:4f:80:2d:43:41:19:3b:49:09:
                    b5:f4:a5:ac:40:3f:98:d1:3b:b9:21:fe:2c:0c:b5:
                    bf:31:6d:2e:d6:fb:7b:2c:9e:95:f3:58:e6:3f:ac:
                    04:ac:89:3a:5a:b7:7b:58:c0:8c:99:99:1f:8b:2d:
                    f6:aa:36:5b:ae:d2:93:4c:ba:78:17:98:93:ba:23:
                    2e:57:c8:ab:38:97:a7:16:56:89:91:f9:ef:2e:f3:
                    bc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:37:33:7C:B6:B4:97:A0:CB:41:CA:E9:80:F8:D6:A3:2B:C2:8C:43
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/323830333a373538303a3a2f33322d3332203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7580::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:1b:af:47:2e:e6:cc:6a:73:63:e3:3a:a2:ca:50:7f:e7:ae:
         bf:74:ee:6c:be:5f:da:ef:2e:94:c9:f6:38:e0:ee:da:55:01:
         bb:9f:4a:d3:a3:0b:af:b6:c9:fd:02:08:da:d4:e1:6c:e8:44:
         18:3e:70:37:07:7c:fd:21:dd:b3:a0:1d:57:5f:4d:8e:f3:2b:
         82:36:62:65:3a:75:05:2e:08:4b:da:8d:67:85:de:5d:a5:12:
         4b:a9:53:37:a6:b6:e3:e3:d0:bb:76:3b:5a:21:71:c9:31:0e:
         20:66:18:30:c4:b1:1e:58:7d:86:c6:8d:c4:92:fb:aa:dc:f9:
         9f:3b:b1:38:fc:0e:d3:56:ee:d9:f0:e6:60:6c:a8:10:68:4b:
         ab:c4:a3:fd:ce:2e:3e:41:84:7b:88:4f:c4:72:e7:23:d8:a0:
         9a:09:4a:08:dd:a5:88:17:56:ba:6c:91:5d:f6:c5:18:cc:e3:
         38:eb:b7:ba:e0:6a:97:bf:de:23:78:f0:f5:a2:e7:a7:88:b9:
         1d:a0:df:89:51:67:44:93:e8:66:4b:0c:12:4c:3f:14:01:b1:
         fd:a4:f7:df:7e:24:49:91:90:ea:0b:4b:47:3e:65:23:f7:56:
         9a:95:6c:d1:7d:59:18:e3:9d:7a:6b:e5:e8:49:4b:12:bc:12:
         92:71:62:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----