Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/323830333a613636303a3a2f33322d3438203d3e203233343837.roa
File:                     323830333a613636303a3a2f33322d3438203d3e203233343837.roa (raw, json)
Hash identifier:          dY5UFt+A7dlDJ3j4UB6vbAFwmswZVg8Q2eSn1gCYRr8=
Subject key identifier:   94:4D:36:F7:6F:F1:91:4D:BB:F5:A4:9D:5E:DD:27:DB:36:E7:4E:65
Certificate issuer:       /CN=3214A9089E97D5F53B714A9F9256A933E4595E53
Certificate serial:       5593523677137288CF956C09F8469324631E44C0
Authority key identifier: 32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/323830333a613636303a3a2f33322d3438203d3e203233343837.roa
Signing time:             Tue 05 Mar 2024 18:14:19 +0000
ROA not before:           Tue 05 Mar 2024 18:09:19 +0000
ROA not after:            Tue 04 Mar 2025 18:14:19 +0000
asID:                     23487
IP address blocks:        2803:a660::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 20:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:93:52:36:77:13:72:88:cf:95:6c:09:f8:46:93:24:63:1e:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3214A9089E97D5F53B714A9F9256A933E4595E53
        Validity
            Not Before: Mar  5 18:09:19 2024 GMT
            Not After : Mar  4 18:14:19 2025 GMT
        Subject: CN=944D36F76FF1914DBBF5A49D5EDD27DB36E74E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f7:5c:16:2d:17:8a:9d:ea:c3:a3:a0:e0:38:
                    d4:e2:94:88:33:96:f2:3b:29:bb:87:aa:be:e7:21:
                    0b:b7:f0:2b:a0:b0:c2:ef:24:fb:23:d8:be:16:25:
                    fd:43:35:cf:b5:27:f4:f0:cb:62:6a:96:8b:89:b4:
                    74:d4:1a:85:d0:38:19:a1:b8:e9:32:3a:b5:e2:2c:
                    da:96:90:e8:d4:d9:a6:37:30:6d:6e:10:35:fd:4b:
                    ac:1c:3c:00:11:31:48:e8:5f:ac:3b:69:c9:bd:6b:
                    cd:2f:98:52:43:dc:3a:7a:84:85:c0:14:b2:af:ce:
                    d9:b3:e2:a8:db:75:39:72:22:c0:88:ed:2a:a5:8f:
                    d6:65:b4:91:77:ff:23:59:e7:68:d4:3f:fa:b6:cc:
                    5c:8f:cb:25:77:f5:dc:b5:80:72:50:9c:8e:cc:1d:
                    cf:23:55:50:c8:9b:6d:fa:7e:53:92:0f:a3:ed:8f:
                    0a:48:b1:df:2b:dd:54:0c:1c:fc:f2:17:45:87:9e:
                    24:b3:0b:bd:37:88:c2:17:5e:af:0a:17:47:db:ff:
                    45:7b:a9:6e:e3:38:7e:b7:85:a9:33:1e:0f:f8:61:
                    9e:09:ee:04:17:ff:7a:01:da:04:d8:cd:29:04:b4:
                    61:b5:2e:bc:bd:cd:13:0d:10:7a:a7:ea:f2:ce:e1:
                    13:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4D:36:F7:6F:F1:91:4D:BB:F5:A4:9D:5E:DD:27:DB:36:E7:4E:65
            X509v3 Authority Key Identifier:
                keyid:32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/323830333a613636303a3a2f33322d3438203d3e203233343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a660::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:65:74:d8:bd:16:35:8e:e4:35:84:69:43:e3:dc:52:5d:8d:
         4a:d2:17:de:fe:55:20:4b:a5:f4:6f:11:59:e3:90:cd:c8:27:
         83:3c:17:c5:3e:81:82:a1:30:27:50:f5:9f:e6:2f:c0:93:d5:
         fe:64:cb:f1:89:37:cf:24:9f:a5:95:67:ba:50:f6:44:b5:20:
         7c:47:aa:f6:ed:6d:ea:88:58:8b:33:94:02:38:19:e9:44:0e:
         8c:b4:dc:6e:0b:06:7f:8c:78:4c:a7:78:03:8c:62:04:eb:ed:
         f5:b5:f8:79:3d:1f:03:2b:56:fa:13:54:03:51:ae:73:23:2c:
         e7:e9:51:c8:ca:92:e9:57:bf:36:a6:b6:55:b0:3e:40:cb:2b:
         c2:dd:c3:74:2d:d2:c7:14:ab:45:ab:4e:7f:bd:91:05:97:ea:
         14:df:86:ae:af:49:e3:c9:6f:19:ea:26:58:a3:1b:28:23:a0:
         dd:86:91:a4:d5:be:4d:55:50:53:21:4f:ce:10:c8:c2:ca:87:
         69:bc:da:40:0d:a8:43:41:ec:40:0d:1c:68:b7:f0:77:e4:10:
         9e:53:65:ed:73:7b:22:e7:80:d0:03:86:5f:e4:12:eb:62:ff:
         59:4d:a2:92:c8:75:1a:31:3b:3b:81:6b:02:e7:84:0f:3b:a7:
         b4:9e:43:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----