Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/323830333a316439303a613a3a2f34382d3438203d3e20323732393938.roa
File:                     323830333a316439303a613a3a2f34382d3438203d3e20323732393938.roa (raw, json)
Hash identifier:          S1F170SZZdevn+x5hKqEe86D6BQMCqU2TJ1K0IBkBgc=
Subject key identifier:   2E:6F:5E:11:04:8D:72:1F:52:FC:BA:2C:3F:FE:DF:CD:B4:14:F3:8A
Certificate issuer:       /CN=36100616E8FEC5E5135D1EDA6C4553BF72530705
Certificate serial:       3DF6B224136264B67FDFAE5CA97B87AFE1F875CE
Authority key identifier: 36:10:06:16:E8:FE:C5:E5:13:5D:1E:DA:6C:45:53:BF:72:53:07:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36100616E8FEC5E5135D1EDA6C4553BF72530705.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/323830333a316439303a613a3a2f34382d3438203d3e20323732393938.roa
Signing time:             Tue 05 Mar 2024 17:40:15 +0000
ROA not before:           Tue 05 Mar 2024 17:35:15 +0000
ROA not after:            Tue 04 Mar 2025 17:40:15 +0000
asID:                     272998
IP address blocks:        2803:1d90:a::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 19:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f6:b2:24:13:62:64:b6:7f:df:ae:5c:a9:7b:87:af:e1:f8:75:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36100616E8FEC5E5135D1EDA6C4553BF72530705
        Validity
            Not Before: Mar  5 17:35:15 2024 GMT
            Not After : Mar  4 17:40:15 2025 GMT
        Subject: CN=2E6F5E11048D721F52FCBA2C3FFEDFCDB414F38A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:55:b5:18:43:13:dc:61:ed:9f:b4:d2:45:5d:
                    94:a8:cf:83:80:ee:3a:30:e1:08:49:cc:2c:cd:8c:
                    44:5f:a5:cb:f6:19:f8:27:60:0d:e1:be:0f:c4:4c:
                    74:11:e8:69:8e:db:21:f6:df:35:cd:a1:d7:49:0f:
                    3b:80:6a:c4:67:00:2f:32:aa:32:23:03:31:76:25:
                    fe:7e:55:23:d7:66:96:19:eb:dc:d2:16:80:1c:4d:
                    2a:87:9c:f3:7e:37:40:d1:99:e8:f6:32:da:6d:58:
                    dd:f6:06:72:4d:f2:c2:ac:df:ef:1f:0d:db:43:7e:
                    1c:15:2e:7b:95:0f:50:7d:c5:f8:a8:e1:90:f7:1b:
                    cd:41:03:43:e3:9f:31:4c:66:d5:1b:ad:40:60:c4:
                    96:fc:ac:a7:5d:a4:ce:97:52:4b:a0:ab:11:0c:dd:
                    ec:78:44:76:09:41:58:eb:53:64:1f:ed:63:22:a1:
                    14:02:73:e2:55:f4:0d:fa:f8:56:83:c2:4c:75:f8:
                    75:81:8b:c9:2c:ef:61:2c:4b:71:d3:43:86:2c:46:
                    d5:12:9d:99:4a:8b:9c:2e:91:6d:38:0d:d2:4a:14:
                    b1:ac:e9:66:41:86:c2:19:28:17:47:b4:96:db:b7:
                    38:80:8e:af:f8:4e:41:26:63:b8:12:16:03:fc:a5:
                    4e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6F:5E:11:04:8D:72:1F:52:FC:BA:2C:3F:FE:DF:CD:B4:14:F3:8A
            X509v3 Authority Key Identifier:
                keyid:36:10:06:16:E8:FE:C5:E5:13:5D:1E:DA:6C:45:53:BF:72:53:07:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/36100616E8FEC5E5135D1EDA6C4553BF72530705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36100616E8FEC5E5135D1EDA6C4553BF72530705.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/323830333a316439303a613a3a2f34382d3438203d3e20323732393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1d90:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:3d:33:28:45:7d:b3:ad:16:96:dd:52:e4:f9:2e:20:db:e4:
         fa:15:6d:97:2a:34:df:6c:a9:da:aa:aa:0d:6b:a8:3e:5d:bb:
         3f:d2:89:c2:ea:61:b5:ad:e6:82:e7:cd:f3:96:2a:45:bd:44:
         44:66:76:b2:ff:af:2c:6a:af:96:ee:27:84:c6:af:95:f9:47:
         d1:b3:33:06:36:04:6b:ce:40:95:b7:d0:ba:b3:93:62:4a:6e:
         23:d4:68:8b:da:1e:51:87:63:2b:9d:d2:ad:f6:cb:77:4b:2f:
         8c:4e:56:c3:f2:c5:1e:e8:af:fe:dd:00:81:50:65:6d:81:75:
         aa:55:5c:5b:19:8f:1a:fc:ec:9f:1c:c6:5d:73:0d:5a:ef:d9:
         68:71:bb:0d:50:7f:ac:60:96:ce:aa:3c:ce:56:b5:d9:4d:a6:
         9c:54:54:0c:43:1d:8c:a4:4e:d2:2a:c7:09:c4:52:94:7c:57:
         fb:89:7e:6d:5b:53:90:4d:26:bf:41:c6:17:3e:73:e8:b6:74:
         9d:af:f4:8e:0a:b7:00:47:63:a4:05:0f:2d:f3:be:21:9b:42:
         29:94:33:9b:3f:ea:c9:3e:d9:3d:94:95:1a:17:c4:d1:bc:02:
         b9:27:72:f0:ee:ca:f5:68:eb:fe:21:94:89:57:0d:5c:e6:2d:
         2b:81:a6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----