Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/323030313a313365383a3a2f33322d3335203d3e203131383135.roa
File:                     323030313a313365383a3a2f33322d3335203d3e203131383135.roa (raw, json)
Hash identifier:          ZrLoYPO0ATPyzhUZD2U0lpzGI9P7H3BlwNN29v9TCV0=
Subject key identifier:   FF:DD:D2:36:5E:C9:47:16:06:C5:E8:FA:FF:59:CB:46:C4:CC:D8:DE
Certificate issuer:       /CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
Certificate serial:       160D64DD7AA98BBF2E85C0E0DDE0DE69AE91A69B
Authority key identifier: D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/323030313a313365383a3a2f33322d3335203d3e203131383135.roa
Signing time:             Tue 05 Mar 2024 18:22:31 +0000
ROA not before:           Tue 05 Mar 2024 18:17:31 +0000
ROA not after:            Tue 04 Mar 2025 18:22:31 +0000
asID:                     11815
IP address blocks:        2001:13e8::/32 maxlen: 35

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 17:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0d:64:dd:7a:a9:8b:bf:2e:85:c0:e0:dd:e0:de:69:ae:91:a6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
        Validity
            Not Before: Mar  5 18:17:31 2024 GMT
            Not After : Mar  4 18:22:31 2025 GMT
        Subject: CN=FFDDD2365EC9471606C5E8FAFF59CB46C4CCD8DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:c7:f1:c2:de:de:da:d2:53:c2:d3:88:d8:
                    7b:6e:b6:04:90:62:06:31:dc:60:18:5b:e3:66:54:
                    a6:fa:6f:e5:38:7c:a5:d8:93:8f:ea:95:3f:98:c2:
                    97:b3:03:ed:88:f0:95:97:9c:11:86:81:4a:61:b7:
                    86:79:65:c8:f0:9c:e0:13:c2:12:49:9d:58:56:d2:
                    d4:89:f1:9b:53:e7:c4:36:14:a0:f9:56:61:85:a7:
                    0e:88:58:ef:56:27:f8:eb:01:3d:f5:55:2d:88:eb:
                    cd:f6:12:a2:34:89:d4:0f:d0:b2:9c:6f:af:7e:90:
                    8e:ef:2b:f8:54:e5:37:5a:bc:1c:47:9e:21:76:77:
                    44:a8:01:b5:4c:34:60:df:b8:29:29:dd:4d:25:c9:
                    b2:1c:5b:08:b3:fd:f2:ce:b0:bb:2b:a1:2d:cb:3e:
                    c8:7b:8c:81:af:07:88:55:bb:05:a0:5c:63:0c:49:
                    9c:28:00:96:54:8d:ee:79:b9:07:86:36:82:66:8d:
                    9d:75:f1:53:30:f3:e6:3a:bd:fc:a1:a9:f2:34:90:
                    3b:a2:96:bb:73:cf:e3:68:4b:fa:6d:5b:0f:79:02:
                    6c:24:3e:ee:39:92:72:79:18:3c:f5:a2:19:b6:8f:
                    b6:14:9a:70:ec:97:71:d2:e4:fd:c1:86:9b:c2:95:
                    4a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DD:D2:36:5E:C9:47:16:06:C5:E8:FA:FF:59:CB:46:C4:CC:D8:DE
            X509v3 Authority Key Identifier:
                keyid:D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/323030313a313365383a3a2f33322d3335203d3e203131383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:32:cd:6b:39:f1:cd:ba:df:3b:31:23:40:1a:e9:40:c6:d2:
         92:ab:ad:c9:63:13:75:70:82:40:53:dd:e3:a2:8c:b6:1b:06:
         e7:72:d8:a5:ed:ac:3d:f2:3e:a7:7f:9f:98:e3:f8:f0:09:71:
         03:ed:92:33:08:80:0d:a9:a0:e0:e3:61:e1:c0:69:aa:22:3a:
         e7:cb:0d:d9:1e:72:a8:17:9b:90:97:06:3d:03:61:d7:62:95:
         d6:dd:ef:26:ec:55:1a:23:76:ee:b8:a6:ce:ba:24:12:21:9b:
         50:ee:49:0c:fa:5a:ed:ae:81:83:a1:60:21:c8:d0:84:0f:5a:
         86:73:60:14:e5:31:fc:81:39:ed:45:fb:c1:70:f1:eb:06:b3:
         a5:cf:c0:70:a7:af:97:53:cc:4c:0d:4b:1e:63:8e:40:bd:84:
         dd:02:3a:6a:56:a1:6a:88:28:d3:ab:3a:99:79:3b:de:1c:ca:
         35:bf:b5:fd:96:2a:6b:4f:94:fc:a5:27:d1:ed:43:e5:df:46:
         38:dc:79:5a:cf:0c:11:e4:fb:02:0d:99:03:a6:82:5f:a6:f0:
         ad:a5:33:44:7a:d3:72:73:89:63:6f:1a:94:79:13:59:1b:25:
         0b:a8:7d:b4:5b:dd:50:53:c0:c0:cd:e3:92:8d:44:ae:cb:5b:
         f4:11:e5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----