Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/323830333a323536303a3a2f33322d3332203d3e20323732393931.roa
File:                     323830333a323536303a3a2f33322d3332203d3e20323732393931.roa (raw, json)
Hash identifier:          5ZOJBR7URxJo0R09R3RZyYsxiMJI3M5EVkleuPQ1L2k=
Subject key identifier:   36:25:55:5B:02:9B:26:0F:96:48:AB:45:E6:C5:71:95:21:CD:4C:A6
Certificate issuer:       /CN=164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF
Certificate serial:       600112E8004AE92A1701F47166F03CEB31CFBBA6
Authority key identifier: 16:4B:44:F2:A4:52:2E:06:B9:2E:8B:D5:94:37:F8:ED:1F:0E:A2:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/323830333a323536303a3a2f33322d3332203d3e20323732393931.roa
Signing time:             Tue 05 Mar 2024 18:02:40 +0000
ROA not before:           Tue 05 Mar 2024 17:57:40 +0000
ROA not after:            Tue 04 Mar 2025 18:02:40 +0000
asID:                     272991
IP address blocks:        2803:2560::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 18:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:01:12:e8:00:4a:e9:2a:17:01:f4:71:66:f0:3c:eb:31:cf:bb:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF
        Validity
            Not Before: Mar  5 17:57:40 2024 GMT
            Not After : Mar  4 18:02:40 2025 GMT
        Subject: CN=3625555B029B260F9648AB45E6C5719521CD4CA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:41:7d:1c:96:c3:cc:95:5e:25:cf:ee:9d:20:
                    dd:5e:9a:58:d2:bc:0a:4c:01:34:bf:c3:35:57:64:
                    de:a4:8b:ce:a9:e2:17:34:0b:d2:dc:33:ca:04:e8:
                    c2:6d:69:f7:cc:a9:35:b4:31:8a:19:f2:d1:52:32:
                    e6:ac:af:5a:e9:63:6d:69:12:c0:88:14:48:b6:b0:
                    75:35:78:d3:5b:44:58:51:89:e1:6e:a1:a5:60:e1:
                    3e:ef:2e:9a:3f:95:fb:2e:36:06:56:cb:af:9c:96:
                    b6:d5:81:3e:3b:7f:a7:dd:5f:7d:a2:7c:0b:d0:b7:
                    73:0d:cc:83:38:bb:6d:b7:db:69:4f:6c:a7:5e:ef:
                    a4:ae:44:88:c7:ac:dd:11:16:6f:7f:02:18:b2:bf:
                    bc:88:02:6d:c6:f7:8e:91:ba:f7:e0:cd:66:8b:7b:
                    d1:bc:e7:94:4d:98:57:42:12:68:1b:4f:66:8a:ba:
                    39:85:e1:88:e0:50:b6:44:b0:69:12:d7:a9:fa:5c:
                    55:71:9c:28:5b:12:f0:a7:c1:b8:e8:48:2a:d5:18:
                    ae:14:d0:73:21:54:15:a2:a6:9c:12:d8:c4:de:01:
                    ad:5e:74:b3:36:ee:f9:ab:86:e4:39:20:7c:2d:b9:
                    ab:4d:12:fa:8d:37:f8:1c:3f:de:67:98:60:2c:77:
                    b7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:25:55:5B:02:9B:26:0F:96:48:AB:45:E6:C5:71:95:21:CD:4C:A6
            X509v3 Authority Key Identifier:
                keyid:16:4B:44:F2:A4:52:2E:06:B9:2E:8B:D5:94:37:F8:ED:1F:0E:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/323830333a323536303a3a2f33322d3332203d3e20323732393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2560::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:76:ae:c9:b1:c4:ad:e3:56:7f:79:92:d3:49:3d:73:9e:fa:
         28:7a:1d:80:da:82:3e:ab:8d:0c:47:69:dd:54:02:85:d3:7a:
         93:82:70:15:85:f0:1f:b4:9a:d8:2c:d5:a8:fe:7c:d9:1c:8b:
         1f:5c:5a:e6:43:db:07:62:63:0e:7b:31:98:37:8e:9e:a0:2a:
         2b:14:c9:e1:07:fe:24:0f:2c:7e:c4:34:03:9f:0c:73:99:e8:
         77:2f:bd:ca:a1:af:f9:5a:fd:c1:5a:58:51:40:f9:98:b5:4f:
         2d:b3:45:92:0a:13:6b:2e:a5:12:13:1e:f6:23:5d:56:db:07:
         95:0a:f4:85:6d:1b:de:c2:2f:ce:84:44:df:09:6b:15:ba:39:
         35:52:a8:b5:cd:01:e0:86:7f:9b:68:18:07:a0:a0:35:61:07:
         2b:e3:40:14:01:b3:2d:fc:b2:d4:28:a4:c9:9b:07:64:8f:16:
         97:8f:f3:45:b6:3a:37:99:57:b5:fd:4a:45:84:ca:f2:73:69:
         e3:3f:fb:76:6b:1f:c8:4b:a1:08:68:18:0d:a5:8c:21:38:d6:
         06:d6:9a:90:3f:c4:20:ec:c0:38:c7:ab:f1:70:31:74:1d:88:
         cf:a6:cd:ff:bd:df:46:fa:cf:cb:b3:6e:77:08:f1:61:df:53:
         1e:d0:9e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----