Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3a2f33322d3332203d3e20323732383839.roa
File:                     323830333a383639303a3a2f33322d3332203d3e20323732383839.roa (raw, json)
Hash identifier:          4fRg/cL8rcgeWAstZu3IiZJduDihMwujceNb3INhASE=
Subject key identifier:   E7:A8:EB:14:BD:00:C3:65:63:E6:AD:00:9A:BD:ED:FD:A7:B0:4C:E1
Certificate issuer:       /CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
Certificate serial:       5DA6DA7BD603E4818862E646598B652C1029B220
Authority key identifier: 38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3a2f33322d3332203d3e20323732383839.roa
Signing time:             Wed 13 Mar 2024 09:30:00 +0000
ROA not before:           Wed 13 Mar 2024 09:25:00 +0000
ROA not after:            Wed 12 Mar 2025 09:30:00 +0000
asID:                     272889
IP address blocks:        2803:8690::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 14 Oct 2024 02:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a6:da:7b:d6:03:e4:81:88:62:e6:46:59:8b:65:2c:10:29:b2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38112395A631DE9A8D5233FE171145D3E5F6FCFD
        Validity
            Not Before: Mar 13 09:25:00 2024 GMT
            Not After : Mar 12 09:30:00 2025 GMT
        Subject: CN=E7A8EB14BD00C36563E6AD009ABDEDFDA7B04CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:92:89:2b:bb:87:5d:a7:1d:0d:be:ec:2d:96:
                    76:c7:6d:c7:27:9d:c4:11:f1:fa:da:51:3c:35:11:
                    92:4b:2f:05:70:03:c3:3d:ba:06:80:2f:17:d9:54:
                    49:d3:30:f6:01:d2:c6:79:df:fb:df:ae:3b:d5:84:
                    0d:a2:cc:e2:93:7c:8c:04:45:a4:59:6d:b2:9f:08:
                    fb:34:37:00:5f:dc:50:b0:b4:dc:11:22:4f:88:e8:
                    02:f0:fa:30:60:8f:97:0d:e2:0e:45:e0:0b:41:57:
                    31:9f:98:48:3b:d6:35:cf:f1:be:0f:11:89:9b:f8:
                    9c:7f:fc:85:33:b4:99:e4:48:1a:48:d2:82:dd:c7:
                    ce:74:0b:ad:37:f0:ea:d7:33:aa:8a:41:e5:cb:df:
                    8b:40:d2:30:27:80:d1:a2:5b:0e:bb:4a:4b:fc:52:
                    da:4f:e7:6e:a9:e3:ad:7a:51:2c:dc:78:3a:c7:f9:
                    97:48:30:bb:eb:7f:a3:1d:9a:c9:0a:f8:84:20:32:
                    f4:25:59:51:27:5d:e4:73:da:39:59:f7:4f:24:23:
                    24:6b:32:47:2c:2b:85:cd:e1:0e:c7:b3:ea:ea:16:
                    0f:2b:6c:de:cd:2f:dc:f9:be:cb:f0:9a:0f:ec:1b:
                    e2:4d:06:52:77:0c:7a:ac:33:7a:e4:1c:0e:a0:0c:
                    28:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A8:EB:14:BD:00:C3:65:63:E6:AD:00:9A:BD:ED:FD:A7:B0:4C:E1
            X509v3 Authority Key Identifier:
                keyid:38:11:23:95:A6:31:DE:9A:8D:52:33:FE:17:11:45:D3:E5:F6:FC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38112395A631DE9A8D5233FE171145D3E5F6FCFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA1BF6AB06215D88769D822920514D37F14C0CD8D44117E64F0F542295A1AA29/0/323830333a383639303a3a2f33322d3332203d3e20323732383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8690::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:0c:30:74:30:f6:39:0d:5d:9e:56:68:05:19:7d:0f:21:94:
         5b:ed:1e:52:51:f2:b3:22:63:63:b5:34:fc:91:64:9e:fe:ec:
         72:80:63:3a:a5:ab:21:09:93:9e:cf:1c:b9:6a:13:f5:f4:41:
         17:7c:6d:35:3d:51:10:ff:67:0a:23:e4:80:48:ea:16:62:38:
         23:a9:56:47:a4:d3:29:66:4b:f3:c9:df:c3:90:94:1f:50:cf:
         be:9b:7c:f4:92:6c:16:ba:f1:19:7a:cf:98:70:dc:c4:c3:c5:
         e8:67:df:fa:bf:a7:12:39:86:a9:e0:9c:cf:db:3b:02:8e:c7:
         83:1b:b2:61:e7:b1:44:fa:41:c2:5b:4f:f9:fa:cd:80:db:6b:
         a8:f8:79:cc:86:f0:fb:32:ad:08:d4:da:ec:18:45:3c:13:6a:
         a5:65:45:b1:f4:3d:6f:ef:b5:b1:91:21:28:53:8a:1c:ca:0e:
         13:65:45:6c:e6:36:7c:97:0a:4f:d6:1f:21:ec:e1:ac:02:62:
         94:cd:97:8a:b5:bb:94:7b:b0:84:2f:04:e1:77:12:52:16:39:
         bd:df:10:c3:b3:2a:0a:a8:ff:ec:da:84:5c:49:65:98:ce:91:
         22:75:d7:bf:b4:23:e9:96:f6:cd:bb:39:f3:d6:d8:77:ce:a2:
         44:57:43:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----