Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/323830333a316439303a3a2f34352d3438203d3e20323732393938.roa
File:                     323830333a316439303a3a2f34352d3438203d3e20323732393938.roa (raw, json)
Hash identifier:          oLgI7H+5stgKTx116xzq2G+IFPOpFNC9wZBNFK1JOa8=
Subject key identifier:   6E:2F:3F:7A:07:1D:8D:1A:5D:99:96:44:BC:47:37:C6:86:C6:5E:A8
Certificate issuer:       /CN=36100616E8FEC5E5135D1EDA6C4553BF72530705
Certificate serial:       474AE1D867DD119CE22E4A0D7B0DD87223E345C6
Authority key identifier: 36:10:06:16:E8:FE:C5:E5:13:5D:1E:DA:6C:45:53:BF:72:53:07:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36100616E8FEC5E5135D1EDA6C4553BF72530705.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/323830333a316439303a3a2f34352d3438203d3e20323732393938.roa
Signing time:             Tue 05 Mar 2024 17:40:16 +0000
ROA not before:           Tue 05 Mar 2024 17:35:16 +0000
ROA not after:            Tue 04 Mar 2025 17:40:16 +0000
asID:                     272998
IP address blocks:        2803:1d90::/45 maxlen: 48

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4a:e1:d8:67:dd:11:9c:e2:2e:4a:0d:7b:0d:d8:72:23:e3:45:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36100616E8FEC5E5135D1EDA6C4553BF72530705
        Validity
            Not Before: Mar  5 17:35:16 2024 GMT
            Not After : Mar  4 17:40:16 2025 GMT
        Subject: CN=6E2F3F7A071D8D1A5D999644BC4737C686C65EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:03:c6:b7:22:3f:1a:66:06:df:9c:c9:7a:
                    1b:10:42:ee:90:4c:0b:4a:e2:70:59:05:17:e5:fb:
                    27:6e:d9:19:cc:29:e1:4a:08:35:11:f3:33:88:5c:
                    1c:69:29:1c:fa:9b:24:df:c5:2b:0b:1e:d7:b2:33:
                    9f:12:91:73:ca:27:d1:f6:53:ca:0a:0b:cc:c6:75:
                    89:17:d6:23:23:1c:1f:c3:3b:cc:d2:47:63:53:78:
                    33:93:a2:5e:69:7f:7e:18:c6:2a:3a:12:21:ae:78:
                    09:17:e8:0f:d5:c6:60:de:d6:d2:02:f8:ee:ac:38:
                    14:28:97:c8:30:e3:b4:75:16:9d:86:35:73:29:4c:
                    b9:e4:6d:c0:30:ec:57:40:b5:c8:d7:13:2e:89:9d:
                    23:06:32:7e:5f:7d:08:01:3c:e5:15:3a:2e:f2:2f:
                    22:17:a2:dd:fb:88:cf:62:ad:16:47:51:5a:43:1f:
                    3d:70:91:77:f1:eb:a8:6a:40:08:b4:03:e5:d0:4d:
                    41:0f:36:b7:22:5a:74:8c:72:3b:15:a1:b0:c0:96:
                    7f:25:f7:b5:23:3e:8d:90:b6:d1:61:01:50:df:75:
                    0d:41:36:9b:3e:1a:a7:d9:62:cd:ec:7a:ec:8d:7f:
                    00:e0:2a:0b:dc:5e:00:59:b4:2e:bd:3a:62:9e:55:
                    fc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2F:3F:7A:07:1D:8D:1A:5D:99:96:44:BC:47:37:C6:86:C6:5E:A8
            X509v3 Authority Key Identifier:
                keyid:36:10:06:16:E8:FE:C5:E5:13:5D:1E:DA:6C:45:53:BF:72:53:07:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/36100616E8FEC5E5135D1EDA6C4553BF72530705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36100616E8FEC5E5135D1EDA6C4553BF72530705.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/323830333a316439303a3a2f34352d3438203d3e20323732393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1d90::/45

    Signature Algorithm: sha256WithRSAEncryption
         33:a3:1b:bf:77:8f:df:00:87:bf:90:a1:83:d6:02:cb:da:90:
         e5:a7:70:6a:a4:32:84:b8:1a:86:27:63:25:02:81:90:ba:eb:
         e9:9d:3f:93:a1:97:a1:89:a4:61:04:3d:dc:0d:0e:6c:55:d6:
         9d:cd:98:ee:11:2c:3d:a5:7f:76:f0:75:f5:c6:81:cc:2b:4d:
         3f:53:b9:84:08:af:e7:25:11:f3:07:70:4b:8c:db:a7:50:19:
         ae:a1:20:d6:74:2e:f0:b7:c7:3d:2d:3d:3c:0f:2e:30:dc:c0:
         91:fc:cd:21:4f:bb:f4:29:01:46:fd:e0:db:09:d2:8f:cf:80:
         af:7a:73:af:ae:68:ba:51:db:63:5d:21:83:3f:fc:64:30:21:
         82:40:bd:2a:93:7f:3a:d7:81:d7:c8:c4:e7:e1:12:e4:c5:11:
         63:c9:f1:c0:57:f2:a3:d1:2e:8c:23:a9:05:50:44:24:67:e3:
         1f:df:8f:47:10:e3:31:f4:58:d4:31:03:4a:f1:55:28:d8:67:
         97:55:56:90:29:0a:f8:72:ad:65:f7:42:df:d2:6b:f2:b8:65:
         25:6c:b7:1e:08:eb:60:a1:07:76:08:a3:a5:ff:f8:d0:73:31:
         a7:b5:d7:f4:13:a6:3b:fc:21:f1:21:0a:50:9f:70:81:f2:39:
         89:89:c4:89
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUR0rh2GfdEZziLkoNew3YciPjRcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYxMDA2MTZFOEZFQzVFNTEzNUQxRURBNkM0NTUzQkY3
MjUzMDcwNTAeFw0yNDAzMDUxNzM1MTZaFw0yNTAzMDQxNzQwMTZaMDMxMTAvBgNV
BAMTKDZFMkYzRjdBMDcxRDhEMUE1RDk5OTY0NEJDNDczN0M2ODZDNjVFQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5WAPGtyI/GmYG35zJehsQQu6Q
TAtK4nBZBRfl+ydu2RnMKeFKCDUR8zOIXBxpKRz6myTfxSsLHteyM58SkXPKJ9H2
U8oKC8zGdYkX1iMjHB/DO8zSR2NTeDOTol5pf34Yxio6EiGueAkX6A/VxmDe1tIC
+O6sOBQol8gw47R1Fp2GNXMpTLnkbcAw7FdAtcjXEy6JnSMGMn5ffQgBPOUVOi7y
LyIXot37iM9irRZHUVpDHz1wkXfx66hqQAi0A+XQTUEPNrciWnSMcjsVobDAln8l
97UjPo2QttFhAVDfdQ1BNps+GqfZYs3seuyNfwDgKgvcXgBZtC69OmKeVfzFAgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUbi8/egcdjRpdmZZEvEc3xobGXqgwHwYDVR0j
BBgwFoAUNhAGFuj+xeUTXR7abEVTv3JTBwUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNTRGRTAzMkVGOEE5RjdFMURFNTFDOUE0MzkyMEFCQjBE
MEQxMDFGNkZBRDQyNzlDOUU2RUJFN0I3NDAzNjY3LzAvMzYxMDA2MTZFOEZFQzVF
NTEzNUQxRURBNkM0NTUzQkY3MjUzMDcwNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNjEwMDYxNkU4RkVDNUU1MTM1
RDFFREE2QzQ1NTNCRjcyNTMwNzA1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzU0RkUwMzJFRjhBOUY3RTFERTUxQzlBNDM5MjBBQkIwRDBEMTAxRjZG
QUQ0Mjc5QzlFNkVCRTdCNzQwMzY2Ny8wLzMyMzgzMDMzM2EzMTY0MzkzMDNhM2Ey
ZjM0MzUyZDM0MzgyMDNkM2UyMDMyMzczMjM5MzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAygDHZAA
ADANBgkqhkiG9w0BAQsFAAOCAQEAM6Mbv3eP3wCHv5Chg9YCy9qQ5adwaqQyhLga
hidjJQKBkLrr6Z0/k6GXoYmkYQQ93A0ObFXWnc2Y7hEsPaV/dvB19caBzCtNP1O5
hAiv5yUR8wdwS4zbp1AZrqEg1nQu8LfHPS09PA8uMNzAkfzNIU+79CkBRv3g2wnS
j8+Ar3pzr65oulHbY10hgz/8ZDAhgkC9KpN/OteB18jE5+ES5MURY8nxwFfyo9Eu
jCOpBVBEJGfjH9+PRxDjMfRY1DEDSvFVKNhnl1VWkCkK+HKtZfdC39Jr8rhlJWy3
HgjrYKEHdgijpf/40HMxp7XX9BOmO/wh8SEKUJ9wgfI5iYnEiQ==
-----END CERTIFICATE-----