Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C32D00BBF178D23F8C38F55F812B3B9051FE0328FD3C26DB95C5641ACE9DFB5E/0/323030313a313230353a3a2f33322d3332203d3e203238333938.roa
File:                     323030313a313230353a3a2f33322d3332203d3e203238333938.roa (raw, json)
Hash identifier:          bUdE70jpv7jITmwnp5ABf1Sp6Ow1+9/5paJXPaLIB9s=
Subject key identifier:   B6:EF:1E:AA:D7:DA:63:24:3B:74:47:FF:9A:2E:2A:05:0D:CB:2D:C2
Certificate issuer:       /CN=B2B94FF4E0943FED16547B6895C82B19BF25C4C5
Certificate serial:       481D2862B9E4D123530CD8D32992049879155113
Authority key identifier: B2:B9:4F:F4:E0:94:3F:ED:16:54:7B:68:95:C8:2B:19:BF:25:C4:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2B94FF4E0943FED16547B6895C82B19BF25C4C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C32D00BBF178D23F8C38F55F812B3B9051FE0328FD3C26DB95C5641ACE9DFB5E/0/323030313a313230353a3a2f33322d3332203d3e203238333938.roa
Signing time:             Fri 19 Jul 2024 20:15:00 +0000
ROA not before:           Fri 19 Jul 2024 20:10:00 +0000
ROA not after:            Fri 18 Jul 2025 20:15:00 +0000
asID:                     28398
IP address blocks:        2001:1205::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sat 20 Jul 2024 00:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1d:28:62:b9:e4:d1:23:53:0c:d8:d3:29:92:04:98:79:15:51:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2B94FF4E0943FED16547B6895C82B19BF25C4C5
        Validity
            Not Before: Jul 19 20:10:00 2024 GMT
            Not After : Jul 18 20:15:00 2025 GMT
        Subject: CN=B6EF1EAAD7DA63243B7447FF9A2E2A050DCB2DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:82:53:5c:dd:37:3c:00:62:b9:44:85:38:99:
                    c4:c0:47:b0:4d:c3:0a:98:7e:7a:6e:4e:74:1a:eb:
                    c9:66:94:af:6c:3f:57:c4:4b:3f:8a:19:ad:a3:25:
                    0a:91:dd:62:a0:17:31:27:05:8f:0c:ca:21:a1:72:
                    bc:18:62:2e:2b:57:fc:5c:84:9c:c1:a8:d2:83:ce:
                    8f:2f:d7:59:ed:46:dd:75:d4:79:90:64:34:1c:81:
                    5e:fa:d6:b3:2d:5e:10:bc:91:e4:73:21:bf:7e:6d:
                    f0:99:e8:f2:13:ae:35:4c:51:86:9e:ed:af:80:43:
                    96:02:ab:67:88:48:5f:c8:e1:cb:49:e2:01:84:27:
                    7a:cf:ce:61:57:e8:0d:5c:9e:2d:e1:3c:38:13:6b:
                    70:be:60:d3:be:6c:ee:26:d6:20:b6:a6:9a:3b:d0:
                    60:7e:76:d1:12:e0:e1:ae:4a:2d:15:85:07:00:53:
                    f8:2a:1e:f7:2a:63:13:83:f8:61:01:d8:4b:90:1a:
                    57:d6:20:1e:72:f3:36:0b:de:58:3f:ae:19:a6:b0:
                    65:a3:cf:d9:d8:8d:79:ba:06:0e:c7:5c:49:83:0b:
                    d8:93:61:13:35:ca:03:ff:1d:32:5c:1e:16:9b:15:
                    d8:06:bc:65:73:b0:54:cc:ad:84:08:1b:4d:b5:0e:
                    2c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EF:1E:AA:D7:DA:63:24:3B:74:47:FF:9A:2E:2A:05:0D:CB:2D:C2
            X509v3 Authority Key Identifier:
                keyid:B2:B9:4F:F4:E0:94:3F:ED:16:54:7B:68:95:C8:2B:19:BF:25:C4:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C32D00BBF178D23F8C38F55F812B3B9051FE0328FD3C26DB95C5641ACE9DFB5E/0/B2B94FF4E0943FED16547B6895C82B19BF25C4C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2B94FF4E0943FED16547B6895C82B19BF25C4C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C32D00BBF178D23F8C38F55F812B3B9051FE0328FD3C26DB95C5641ACE9DFB5E/0/323030313a313230353a3a2f33322d3332203d3e203238333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1205::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:72:7c:5e:91:3a:20:8a:3f:e4:c5:85:c7:27:ab:cc:aa:e3:
         68:17:a7:2b:22:5b:ff:e2:9a:b2:11:3b:df:f1:fc:ea:8a:ef:
         ab:7e:a4:26:88:56:5f:80:45:be:0d:e6:10:2d:6c:33:bb:b1:
         25:e5:d3:84:d6:6b:a9:e0:c8:80:8a:d7:91:93:34:f3:93:42:
         1d:79:7c:e7:3b:24:93:34:ca:8f:95:4b:3b:f9:d2:7a:e7:fa:
         ef:0a:7c:42:a3:9a:b6:4f:65:88:05:9a:6b:20:be:b9:9e:ab:
         6d:87:68:7d:d9:61:3d:3b:e6:15:dd:74:84:1e:85:dd:fd:ce:
         d8:f3:bb:b3:57:c4:df:87:06:74:51:49:3c:7e:6e:0b:62:ba:
         db:4c:6c:87:49:e6:65:16:4f:5e:72:f4:6e:24:bb:0f:91:d4:
         1b:53:9b:b2:64:80:4b:20:45:02:6f:d4:17:0f:33:59:db:a8:
         d6:f6:7b:ee:8d:c2:23:38:23:91:47:f3:eb:97:27:74:8c:5f:
         fa:63:00:03:1e:4e:32:f2:02:57:c2:88:36:b2:e0:1c:d5:d6:
         b9:a5:da:23:3d:10:93:c5:b6:76:e3:dd:07:db:e0:9a:82:e0:
         33:27:5e:89:15:3c:04:cf:5e:c5:c7:41:98:52:b6:b3:fc:f6:
         09:27:d9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----