Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/54350da79c459288d522e93a013b6a473c79ec14.roa
File:                     54350da79c459288d522e93a013b6a473c79ec14.roa (raw, json)
Hash identifier:          DDR2spCWKoPouLPxhnkGZ7szJaRU+oILlk4OF7y+TNA=
Subject key identifier:   9C:66:91:C7:A4:35:9C:BE:76:5D:54:64:53:1E:D7:2F:50:5D:90:D3
Certificate issuer:       /CN=70a411ce30f61f9ca94248ff3f614c66f75c5307
Certificate serial:       097F3E
Authority key identifier: 5D:99:9B:85:73:92:13:A1:C8:89:8E:3E:B0:28:74:32:5D:2B:74:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70a411ce30f61f9ca94248ff3f614c66f75c5307.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/54350da79c459288d522e93a013b6a473c79ec14.roa
Signing time:             Wed 07 Feb 2024 18:19:12 +0000
ROA not before:           Wed 07 Feb 2024 18:19:12 +0000
ROA not after:            Sat 07 Feb 2026 18:19:12 +0000
asID:                     272854
IP address blocks:        2803:c290:500::/40 maxlen: 40

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 19:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622398 (0x97f3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a411ce30f61f9ca94248ff3f614c66f75c5307
        Validity
            Not Before: Feb  7 18:19:12 2024 GMT
            Not After : Feb  7 18:19:12 2026 GMT
        Subject: CN=54350da79c459288d522e93a013b6a473c79ec14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:71:de:78:6d:14:ae:01:df:56:46:a1:d8:5f:
                    cb:aa:02:4a:49:4a:00:c5:de:c3:de:d2:75:70:d0:
                    47:ba:2c:8a:8d:b6:87:14:70:f3:be:87:89:be:ee:
                    ff:76:4b:9b:bd:21:62:e8:7d:af:87:7a:87:58:79:
                    5b:7f:fb:bd:a6:95:40:2b:cd:79:77:2a:af:1c:60:
                    ce:5a:46:9f:96:25:85:02:28:0b:95:9d:45:78:6c:
                    90:90:12:0d:68:15:a6:16:4d:ad:dc:7c:86:d4:34:
                    f0:d4:d7:87:4c:89:15:a5:ee:94:5e:c2:c8:78:11:
                    2e:6b:e1:38:97:99:73:bb:71:03:0b:06:66:b2:46:
                    74:b7:94:63:a5:2d:61:a4:40:11:64:48:76:5f:39:
                    ae:88:45:10:9b:91:1a:b3:1d:50:a2:d0:09:ad:1a:
                    57:b0:b2:f8:03:c0:ee:d8:83:9a:2b:ef:d5:ec:3d:
                    66:0f:4f:5e:9e:02:ef:73:2f:44:c3:14:7a:24:57:
                    24:47:9b:aa:6a:02:1e:89:95:6f:25:21:74:8d:ff:
                    a2:95:c3:f7:fa:11:b7:31:13:69:08:f7:d0:7e:26:
                    76:60:00:47:45:72:98:1f:33:ce:15:71:1b:7b:8e:
                    bc:86:a4:42:37:55:ca:ee:5f:44:6a:c0:8c:26:75:
                    4a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:66:91:C7:A4:35:9C:BE:76:5D:54:64:53:1E:D7:2F:50:5D:90:D3
            X509v3 Authority Key Identifier:
                keyid:5D:99:9B:85:73:92:13:A1:C8:89:8E:3E:B0:28:74:32:5D:2B:74:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70a411ce30f61f9ca94248ff3f614c66f75c5307.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/54350da79c459288d522e93a013b6a473c79ec14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/942b50e8-3602-4563-96d7-9bef100e5ce2/70a411ce30f61f9ca94248ff3f614c66f75c5307.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c290:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:11:0c:da:ad:81:c2:2a:a7:bd:5f:a3:41:90:10:08:51:1a:
         13:0e:9b:19:a6:eb:7f:b4:e3:b2:5e:ec:be:35:f3:4b:cd:22:
         1e:87:3c:d3:26:cb:36:15:20:74:be:00:ba:78:67:9f:5b:b8:
         72:b2:ad:ae:bf:4f:e9:18:98:bb:d6:67:b9:39:4f:97:c7:41:
         b0:6a:44:02:bb:3a:8d:16:9c:87:96:a1:e4:e8:ec:03:4a:87:
         5f:16:22:9c:1f:d4:b7:7c:c1:b5:b0:2c:75:fc:99:20:0b:d5:
         d8:16:2b:5e:f4:ec:b3:57:d7:20:41:35:3c:05:15:e1:3d:16:
         1e:61:75:c8:67:89:97:16:8c:3a:9c:b1:fa:b7:ed:1b:c7:71:
         3e:83:a4:dc:16:52:ad:53:58:b2:39:f9:72:ab:c2:17:49:b3:
         18:39:f6:a7:2e:fa:86:9c:32:8e:ae:ae:8d:f1:58:31:c2:4a:
         49:6a:f6:9f:af:12:7f:6c:33:18:72:6b:d8:4f:69:74:6e:d8:
         f6:40:18:6c:da:ee:54:63:4d:49:87:76:30:bf:75:d1:38:36:
         de:4a:fb:97:eb:18:1f:ef:ed:55:98:e5:44:fa:ae:f6:7b:4f:
         2e:1c:e4:7e:27:17:a2:ae:25:ad:e0:d7:87:01:f5:02:0e:81:
         81:43:f9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----