Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3438203d3e203532323636.roa
File:                     323830303a3730303a3a2f33322d3438203d3e203532323636.roa (raw, json)
Hash identifier:          UZsLn4Ukufd4rTINDCHEPCIPfUwFirrBnf6AkGVCIVA=
Subject key identifier:   84:D5:F7:5E:1A:E3:03:71:02:DC:48:75:BE:89:F0:69:C3:5B:8A:6A
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       779733F83D4B16D81E8DB1AF3016DB183A960C5C
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3438203d3e203532323636.roa
Signing time:             Fri 24 May 2024 16:55:00 +0000
ROA not before:           Fri 24 May 2024 16:50:00 +0000
ROA not after:            Fri 23 May 2025 16:55:00 +0000
asID:                     52266
IP address blocks:        2800:700::/32 maxlen: 48

Validation:               Failed, certificate revoked on Fri 24 May 2024 17:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:97:33:f8:3d:4b:16:d8:1e:8d:b1:af:30:16:db:18:3a:96:0c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: May 24 16:50:00 2024 GMT
            Not After : May 23 16:55:00 2025 GMT
        Subject: CN=84D5F75E1AE3037102DC4875BE89F069C35B8A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8f:46:c1:f1:56:74:ae:85:de:c3:bf:b2:b7:
                    7e:4c:c3:a4:39:ac:f9:1b:bd:cb:f5:0c:a2:7c:8f:
                    dd:e5:c5:24:f2:d9:74:4c:86:38:ba:3f:8f:ed:7f:
                    ca:9b:31:fa:c7:ee:f0:39:c4:83:69:a8:d5:a7:5b:
                    5b:7a:cb:29:2e:c4:7d:99:a6:5d:cf:28:b0:e6:9c:
                    ec:ed:e7:bf:b7:9b:d7:25:31:a9:34:c1:7b:d7:38:
                    f4:5d:f8:55:0c:38:1e:fd:fa:f0:97:02:3a:75:ec:
                    6d:29:b1:8e:e0:5a:e7:1c:c7:e1:2f:51:2b:0e:44:
                    8e:1a:a3:a2:1c:0a:25:7c:e7:40:70:47:7b:6a:a4:
                    aa:82:f2:13:c8:64:47:e6:e2:75:57:00:75:b6:bf:
                    82:1f:c5:1e:64:1b:eb:2c:42:52:2d:99:04:3e:5d:
                    74:bf:39:bc:25:92:d9:64:32:a3:0c:2f:8c:bd:69:
                    92:ce:4a:86:17:74:71:aa:f5:9c:00:08:66:95:66:
                    41:58:56:82:06:3b:d2:f2:3f:a0:2b:33:9c:36:d2:
                    11:bd:cc:d9:72:77:ef:5a:d2:97:d3:af:80:05:60:
                    8d:e3:9e:77:3e:93:11:be:77:28:9b:2f:82:1f:eb:
                    97:7c:86:0f:88:96:d5:5b:b6:90:c5:9c:53:02:4d:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D5:F7:5E:1A:E3:03:71:02:DC:48:75:BE:89:F0:69:C3:5B:8A:6A
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/323830303a3730303a3a2f33322d3438203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:d4:a0:ee:f0:aa:28:6e:4b:2f:f1:6b:3e:e6:6f:cb:4e:10:
         26:17:5a:3d:d4:e0:09:fb:c2:5b:3f:f9:0c:49:7e:1a:08:3d:
         04:14:ad:49:d7:1b:d1:01:fe:a4:fa:66:81:48:a0:aa:05:d0:
         c3:33:ca:19:14:d5:51:32:28:0d:7f:16:4e:5d:1b:25:33:c0:
         d9:99:6b:86:45:ee:99:b0:15:74:9b:6c:fa:d7:c7:a6:7b:9d:
         70:0d:73:09:4f:2e:48:90:69:dc:e2:42:2b:72:0f:30:4f:04:
         7d:ae:8c:c9:4b:f3:14:a2:13:9c:04:eb:65:ac:81:37:b6:12:
         b6:36:3b:f7:bb:bc:c7:4b:74:00:1c:ec:8a:d0:c9:b7:28:7b:
         02:80:f9:0a:b2:82:7b:4b:7f:34:b9:7f:ba:35:06:45:fe:0e:
         ca:a6:f8:e9:dc:bf:63:bd:c9:70:92:72:4d:73:6a:95:9c:ff:
         a8:69:cd:0a:47:67:4e:da:ee:d2:ef:c2:72:87:b3:81:07:31:
         cd:f7:0b:03:c6:da:26:1a:16:95:b5:14:1c:08:d6:cb:29:fb:
         79:e0:38:e9:ae:6d:52:d7:01:e0:00:40:63:90:8d:e0:ed:c2:
         b0:c9:b6:37:ad:a6:47:07:01:28:59:8a:db:8e:ea:f3:97:ba:
         31:70:1b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----