Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/323830333a626534303a3a2f33322d3332203d3e203238303830.roa
File:                     323830333a626534303a3a2f33322d3332203d3e203238303830.roa (raw, json)
Hash identifier:          gfX37Tb6QAq9fuQU/uyQq32TNQAt0I9OYVQqH374MMw=
Subject key identifier:   09:14:EF:B4:6E:F4:5B:DB:4B:0F:1C:C1:B1:52:B8:4B:09:21:71:EB
Certificate issuer:       /CN=2905F3DD739DE8F57BFF83877ECBC631E7B12A02
Certificate serial:       38987F7E1E0426412E23B849A1A910240B1D8FB1
Authority key identifier: 29:05:F3:DD:73:9D:E8:F5:7B:FF:83:87:7E:CB:C6:31:E7:B1:2A:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/323830333a626534303a3a2f33322d3332203d3e203238303830.roa
Signing time:             Tue 05 Mar 2024 17:42:36 +0000
ROA not before:           Tue 05 Mar 2024 17:37:36 +0000
ROA not after:            Tue 04 Mar 2025 17:42:36 +0000
asID:                     28080
IP address blocks:        2803:be40::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 18 Jun 2024 11:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:98:7f:7e:1e:04:26:41:2e:23:b8:49:a1:a9:10:24:0b:1d:8f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905F3DD739DE8F57BFF83877ECBC631E7B12A02
        Validity
            Not Before: Mar  5 17:37:36 2024 GMT
            Not After : Mar  4 17:42:36 2025 GMT
        Subject: CN=0914EFB46EF45BDB4B0F1CC1B152B84B092171EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:c7:e2:ab:05:c5:00:f0:a9:fd:f6:3e:6a:
                    91:84:68:71:35:ec:99:93:c9:e4:ea:09:de:12:3d:
                    c5:14:24:44:d7:1a:42:9d:c9:e6:b5:63:e9:3e:7f:
                    fd:08:19:ad:96:87:b8:59:5c:7e:23:f1:cd:6f:2a:
                    24:66:29:81:4f:49:a5:26:43:01:d5:8f:52:78:9c:
                    4a:fb:46:b4:5d:dd:d0:ae:80:93:6e:1a:13:d4:2d:
                    80:3e:80:43:6f:12:12:83:3d:4f:25:fe:22:4c:e6:
                    66:7f:07:c3:2d:99:cb:7c:fe:7f:6c:f7:7e:94:9b:
                    c0:05:a5:e8:ed:25:9b:e4:66:87:c7:4c:68:ef:d4:
                    e6:70:c5:1a:c3:75:bf:6e:58:97:1a:30:f6:f7:41:
                    58:6b:75:b3:e3:5b:d0:d2:c7:79:a9:fc:a6:6b:1c:
                    2b:d8:f1:95:da:b6:48:d7:d6:36:a8:20:6a:08:f6:
                    84:10:6f:8b:33:52:9c:de:80:ef:18:aa:8b:10:45:
                    fc:b3:54:25:f7:47:ee:8d:54:95:71:8e:e0:9d:c1:
                    6b:df:ef:4e:3b:28:a8:e9:eb:f2:6c:c6:f9:a1:8c:
                    8b:cb:7b:c0:ad:bb:41:ec:16:53:de:3c:6e:1f:ff:
                    86:e8:a4:79:89:a2:d1:11:a5:ef:7c:5b:2e:39:82:
                    80:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:14:EF:B4:6E:F4:5B:DB:4B:0F:1C:C1:B1:52:B8:4B:09:21:71:EB
            X509v3 Authority Key Identifier:
                keyid:29:05:F3:DD:73:9D:E8:F5:7B:FF:83:87:7E:CB:C6:31:E7:B1:2A:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2905F3DD739DE8F57BFF83877ECBC631E7B12A02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9AB12A7E927ADB9CFE5EC8BA2FC014BAC9C22556AFE8653C2BC6A496C15EF/0/323830333a626534303a3a2f33322d3332203d3e203238303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:be40::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:0b:e9:8a:f5:92:d7:00:4e:da:c0:d6:12:80:73:71:f2:12:
         20:f7:5b:61:a3:fe:c9:bb:c1:e4:c2:99:f3:38:4d:13:e3:f3:
         73:cf:5e:64:36:41:04:f5:bd:62:76:64:36:76:d8:41:ba:32:
         91:b8:48:53:87:94:b8:3d:48:9f:68:9e:56:94:6b:83:89:a4:
         b3:90:a2:9e:12:3a:a7:4b:20:cf:f8:28:3d:3b:50:8b:81:c3:
         7c:4f:f9:19:14:a3:b4:b3:8f:20:da:3e:a6:47:12:9e:4f:12:
         42:d2:10:97:70:1c:e6:a4:a6:ae:87:95:f7:d6:31:c9:bc:31:
         33:5e:9c:74:47:41:f9:8f:96:56:35:44:d8:1c:dc:79:a0:1a:
         df:42:86:d6:9c:10:a6:85:8c:11:16:47:d8:fa:12:59:03:70:
         54:0e:7e:61:58:74:1e:91:36:30:74:85:75:e6:4e:fe:41:cc:
         6d:79:d7:32:17:b6:4e:9e:ba:27:8e:88:8e:7f:15:69:2b:32:
         d6:cc:59:24:af:b4:62:11:d0:07:e1:86:ad:bb:8f:da:e1:a9:
         b2:dc:14:49:46:1b:49:cd:31:df:ba:64:11:53:19:ea:d7:f1:
         66:f1:37:da:ec:ad:b2:84:8d:6f:52:9b:f3:5a:98:25:fc:5b:
         f8:34:62:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----