Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/323830333a393465303a3a2f33322d3332203d3e20323639383034.roa
File:                     323830333a393465303a3a2f33322d3332203d3e20323639383034.roa (raw, json)
Hash identifier:          Jq/rvD1IEpYCIfR3/2TOcQPPI50koM6YDVWQBwEDYZY=
Subject key identifier:   67:0F:DC:63:87:21:D8:CD:5A:3B:5A:74:32:82:D5:92:55:89:14:DA
Certificate issuer:       /CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
Certificate serial:       1C844692FB9B96A0BFFEA86F1FC0A09E5B4159DC
Authority key identifier: 97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/323830333a393465303a3a2f33322d3332203d3e20323639383034.roa
Signing time:             Thu 16 May 2024 15:50:00 +0000
ROA not before:           Thu 16 May 2024 15:45:00 +0000
ROA not after:            Thu 15 May 2025 15:50:00 +0000
asID:                     269804
IP address blocks:        2803:94e0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 16 May 2024 17:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:84:46:92:fb:9b:96:a0:bf:fe:a8:6f:1f:c0:a0:9e:5b:41:59:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
        Validity
            Not Before: May 16 15:45:00 2024 GMT
            Not After : May 15 15:50:00 2025 GMT
        Subject: CN=670FDC638721D8CD5A3B5A743282D592558914DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3d:a8:51:01:d0:36:15:a4:30:8c:25:3e:93:
                    89:f3:b9:5d:f8:19:db:3b:d1:0c:d2:5a:42:82:1c:
                    58:29:31:ee:53:2d:4b:5e:e1:27:be:e2:a3:83:12:
                    c8:a5:cf:fe:04:a1:53:b6:af:5a:cf:bf:29:08:14:
                    b9:e0:27:4d:a6:36:7e:81:bb:5e:f1:32:59:f8:ba:
                    c7:07:52:8b:b8:02:43:31:7d:d0:17:89:0a:a2:b9:
                    db:c9:b2:12:bd:70:b2:e9:ff:55:ab:1e:52:82:19:
                    b3:ee:0c:22:14:d8:b1:e3:4a:ff:73:3a:9d:4e:d5:
                    72:af:6d:79:8c:00:9d:6b:67:a1:c7:32:53:2f:d4:
                    99:d8:86:d5:1d:8b:8b:7d:53:71:a5:40:6c:49:df:
                    8c:99:c5:07:06:38:f0:65:d6:59:1a:01:4b:80:fa:
                    5d:9e:52:a3:0f:33:51:03:e8:d2:9f:07:2f:71:fd:
                    12:29:ce:7f:80:bf:2e:05:ce:94:f4:b0:4d:ac:1a:
                    12:ec:d3:41:95:5b:9a:df:96:74:05:ca:61:a6:16:
                    ae:df:d0:b9:7c:49:b2:ca:0b:2e:2f:84:34:6b:57:
                    1a:96:0b:16:31:e4:35:0b:0d:46:b0:c6:49:b3:22:
                    8a:70:2b:5f:2e:3b:9f:e4:f0:e6:f7:d0:b7:4e:4d:
                    ce:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0F:DC:63:87:21:D8:CD:5A:3B:5A:74:32:82:D5:92:55:89:14:DA
            X509v3 Authority Key Identifier:
                keyid:97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/323830333a393465303a3a2f33322d3332203d3e20323639383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:94e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:4e:fa:ac:5f:52:09:ae:9b:ce:77:23:48:03:59:20:ed:e4:
         14:de:dd:d1:d0:7e:f1:07:af:89:dc:fd:f5:72:fc:4d:65:30:
         c5:6a:0f:f0:91:ac:74:ff:f5:9b:76:74:72:6d:6d:fc:d2:be:
         6d:ba:cd:b2:62:1a:e9:d6:aa:75:92:72:4a:f4:f7:40:37:1e:
         59:5b:87:03:7a:03:aa:ac:1f:f7:fd:17:2a:fb:41:22:b5:aa:
         75:99:7d:84:67:ce:66:1c:46:b3:cc:0c:dc:1d:b5:29:fc:75:
         78:8f:c6:92:cb:43:4c:16:01:27:11:b6:32:1d:20:30:4b:cd:
         55:f8:7f:72:15:f1:b9:0c:f0:fb:bf:6f:c9:8a:08:db:ed:e2:
         de:c5:4b:a1:db:f2:6d:47:4c:ee:aa:31:d9:eb:c4:6b:35:68:
         94:ed:b7:7c:ab:30:41:c8:f5:57:13:1a:25:8d:3a:c7:7f:96:
         3c:2a:89:6e:b4:e4:55:dc:f2:36:a0:c0:23:e7:91:8f:a4:8a:
         b5:8b:4f:df:1f:d7:ae:25:62:ec:b0:23:3c:c8:b2:44:39:cb:
         f7:47:f2:c4:03:cf:09:8a:f6:26:dd:b2:ee:05:05:5b:4f:2e:
         9a:35:17:73:19:86:00:f9:9d:89:95:c6:c3:15:e4:40:5b:99:
         a8:6f:9c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----