Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/323830333a316439303a393a3a2f34382d3438203d3e20323732393938.roa
File:                     323830333a316439303a393a3a2f34382d3438203d3e20323732393938.roa (raw, json)
Hash identifier:          waEyuVMwncgczxtoV4xwUFbExGRs37NqQX6EOEG5neY=
Subject key identifier:   B3:96:C2:38:E5:CA:B8:0F:83:BA:D6:1B:53:37:FA:E6:0B:4F:1B:4F
Certificate issuer:       /CN=36100616E8FEC5E5135D1EDA6C4553BF72530705
Certificate serial:       62E18451F6A88AF12493EE6A9B700B60524504D2
Authority key identifier: 36:10:06:16:E8:FE:C5:E5:13:5D:1E:DA:6C:45:53:BF:72:53:07:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36100616E8FEC5E5135D1EDA6C4553BF72530705.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/323830333a316439303a393a3a2f34382d3438203d3e20323732393938.roa
Signing time:             Tue 05 Mar 2024 17:40:16 +0000
ROA not before:           Tue 05 Mar 2024 17:35:16 +0000
ROA not after:            Tue 04 Mar 2025 17:40:16 +0000
asID:                     272998
IP address blocks:        2803:1d90:9::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 19:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e1:84:51:f6:a8:8a:f1:24:93:ee:6a:9b:70:0b:60:52:45:04:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36100616E8FEC5E5135D1EDA6C4553BF72530705
        Validity
            Not Before: Mar  5 17:35:16 2024 GMT
            Not After : Mar  4 17:40:16 2025 GMT
        Subject: CN=B396C238E5CAB80F83BAD61B5337FAE60B4F1B4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:25:50:d8:60:56:ac:ee:2c:e7:97:5f:34:5f:
                    df:f8:c1:1b:13:fc:20:bf:14:93:f1:e9:3f:52:fa:
                    3c:9e:a5:fc:fc:33:2e:ef:56:0d:cb:91:35:34:a0:
                    b4:f6:1a:8d:21:ad:bb:a3:98:24:91:a9:fa:30:09:
                    ba:13:54:6f:15:40:50:f5:80:d4:75:85:43:06:6d:
                    60:b3:c1:94:e9:20:d0:75:20:14:24:6a:af:96:6e:
                    62:2a:fd:8a:14:1c:62:84:f5:f4:c4:0d:1b:a2:40:
                    b7:f6:31:8f:94:c8:b8:06:1c:db:da:ca:3e:ca:d0:
                    0a:fa:1e:c8:34:12:c1:70:db:a9:61:75:17:dd:d2:
                    d9:2a:2d:07:41:60:be:fd:5c:3f:75:3c:fc:c0:2e:
                    1c:3d:0b:ce:f6:7a:9f:05:32:db:78:f5:c1:69:2d:
                    04:c9:53:c4:83:5a:32:7c:93:f2:37:fe:c7:83:01:
                    d8:c5:1d:89:53:85:c3:e9:2e:6a:27:dc:7d:e7:b3:
                    cb:5d:56:d4:bf:69:8b:15:e2:c5:03:e0:76:75:2a:
                    bc:3e:8e:a4:3b:e5:f0:57:25:a7:78:09:9b:a8:7a:
                    09:b8:04:53:89:be:e8:2a:37:bb:cc:81:3c:56:76:
                    e4:bd:1e:13:e1:c9:22:26:a9:56:7e:6d:e9:ce:eb:
                    a5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:96:C2:38:E5:CA:B8:0F:83:BA:D6:1B:53:37:FA:E6:0B:4F:1B:4F
            X509v3 Authority Key Identifier:
                keyid:36:10:06:16:E8:FE:C5:E5:13:5D:1E:DA:6C:45:53:BF:72:53:07:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/36100616E8FEC5E5135D1EDA6C4553BF72530705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36100616E8FEC5E5135D1EDA6C4553BF72530705.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/323830333a316439303a393a3a2f34382d3438203d3e20323732393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1d90:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:7c:9c:c1:bc:62:da:01:01:67:8c:8d:30:04:31:34:2e:d6:
         bb:48:f1:de:d0:f2:36:3e:dc:c7:03:7b:bc:a7:a9:dc:3b:a4:
         5d:90:63:5c:43:f7:01:92:c1:f5:23:1b:bb:f2:be:b8:6b:0a:
         b3:ae:ba:25:db:6a:89:74:72:6f:3a:77:a2:bf:2a:48:54:3e:
         b0:fe:f3:3d:cb:70:9e:09:38:16:3b:0a:f5:89:bd:f9:06:35:
         36:3c:02:f9:0a:49:47:fb:3b:60:d4:ba:37:71:b1:c7:a6:8c:
         ab:42:39:07:84:80:06:07:c2:51:cd:e6:ce:64:4e:af:27:70:
         65:79:fa:00:43:af:f9:99:22:cf:78:25:14:0f:5f:74:77:8f:
         d2:24:98:e4:fd:d2:03:79:88:49:a0:27:dc:a5:6e:b8:b6:14:
         6c:da:40:28:67:36:7f:66:71:f2:26:cc:94:ba:22:70:7d:eb:
         e6:ab:0d:cb:5e:9a:fb:dc:2f:0a:81:80:c8:52:24:56:dc:6b:
         ef:2e:25:a5:e0:ce:6e:96:6a:01:cf:7c:5d:b5:3f:94:f2:51:
         2d:74:95:3f:d0:f2:db:7f:c1:d5:62:80:b3:0a:58:32:fb:7b:
         b8:ae:a1:28:6a:d6:d8:1d:54:14:3e:f8:30:83:e7:74:28:f5:
         96:08:30:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----