Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/323830333a316439303a623a3a2f34382d3438203d3e20323732393938.roa
File:                     323830333a316439303a623a3a2f34382d3438203d3e20323732393938.roa (raw, json)
Hash identifier:          jYKf+xmGqXQfhQ+ZDOz3rtghrr5uus1tuey6CwaD2rU=
Subject key identifier:   E0:8B:32:30:63:0D:5A:37:67:5D:89:E0:CD:3F:66:3B:AA:42:A4:A7
Certificate issuer:       /CN=36100616E8FEC5E5135D1EDA6C4553BF72530705
Certificate serial:       1F52129015353E70B0F95FC884C0FEA047EAFDBC
Authority key identifier: 36:10:06:16:E8:FE:C5:E5:13:5D:1E:DA:6C:45:53:BF:72:53:07:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36100616E8FEC5E5135D1EDA6C4553BF72530705.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/323830333a316439303a623a3a2f34382d3438203d3e20323732393938.roa
Signing time:             Tue 05 Mar 2024 17:40:15 +0000
ROA not before:           Tue 05 Mar 2024 17:35:15 +0000
ROA not after:            Tue 04 Mar 2025 17:40:15 +0000
asID:                     272998
IP address blocks:        2803:1d90:b::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 19:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:52:12:90:15:35:3e:70:b0:f9:5f:c8:84:c0:fe:a0:47:ea:fd:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36100616E8FEC5E5135D1EDA6C4553BF72530705
        Validity
            Not Before: Mar  5 17:35:15 2024 GMT
            Not After : Mar  4 17:40:15 2025 GMT
        Subject: CN=E08B3230630D5A37675D89E0CD3F663BAA42A4A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:82:af:1a:6e:6c:c9:ad:08:b6:ab:f5:6f:a5:
                    b6:aa:bf:ef:d0:76:64:e4:d8:9e:20:e6:a2:c0:26:
                    79:80:24:67:7c:d7:ba:53:29:1c:7f:03:32:a6:21:
                    c8:65:8c:cf:1a:5a:f0:a1:f5:78:06:f4:c1:82:3e:
                    9d:72:3f:ab:2d:fb:05:f0:69:b6:e7:df:36:62:8d:
                    8e:9f:ea:96:5a:f0:52:8f:af:40:86:17:f6:18:b0:
                    70:59:5a:13:06:1d:7c:46:f1:ef:d0:06:11:14:0b:
                    ea:cb:47:33:10:df:96:d7:0b:25:b9:8e:19:67:a6:
                    84:33:55:7b:b4:8e:30:59:93:57:b6:5f:c4:88:04:
                    08:ae:3e:78:43:7b:2b:c3:b1:b1:ae:f7:0c:de:2e:
                    a0:16:cf:0b:1a:19:e3:86:a3:b8:0b:b3:c1:a7:bd:
                    93:48:55:8c:53:a2:b6:69:c4:a5:95:39:83:f6:9c:
                    82:5e:04:9a:0a:86:07:e8:f1:0d:d7:94:52:71:25:
                    1b:31:6f:40:df:c2:0a:be:2d:f2:c3:ce:db:b9:9e:
                    f3:fb:70:4d:0b:db:b5:43:d3:cd:b8:d3:81:5d:3a:
                    a8:84:df:a2:78:e5:a9:90:40:d6:7a:3f:d6:6e:4c:
                    10:bb:41:49:bd:05:61:f6:a4:0a:dd:5f:a0:a8:8f:
                    c8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8B:32:30:63:0D:5A:37:67:5D:89:E0:CD:3F:66:3B:AA:42:A4:A7
            X509v3 Authority Key Identifier:
                keyid:36:10:06:16:E8:FE:C5:E5:13:5D:1E:DA:6C:45:53:BF:72:53:07:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/36100616E8FEC5E5135D1EDA6C4553BF72530705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/36100616E8FEC5E5135D1EDA6C4553BF72530705.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C54FE032EF8A9F7E1DE51C9A43920ABB0D0D101F6FAD4279C9E6EBE7B7403667/0/323830333a316439303a623a3a2f34382d3438203d3e20323732393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1d90:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:27:51:9a:d9:1a:72:b7:69:45:27:4e:66:1d:e8:e3:dd:e4:
         34:7c:ec:45:98:fd:35:ed:72:39:5c:b7:17:05:33:ff:d1:f3:
         5e:d0:46:9e:fe:2a:c0:3c:5a:c3:24:f1:e3:ff:74:f0:c0:1e:
         55:58:50:d6:b1:3d:55:32:37:9b:4b:aa:d0:fd:14:c2:52:8a:
         7e:b3:75:39:ac:9d:04:8d:2d:79:b7:67:56:90:7d:ac:31:30:
         f1:9c:ce:f7:95:ee:f7:df:15:2b:fc:8d:8c:37:e3:61:4d:28:
         d0:8b:42:5a:57:46:82:aa:32:76:84:ff:42:56:70:fd:01:d7:
         9c:9e:4c:e9:d9:fc:bc:14:13:82:c9:e4:52:e8:b9:20:9c:8d:
         3a:c9:28:6e:53:37:18:5d:d4:31:f5:8c:5b:71:c2:b5:3a:fa:
         0a:12:33:26:71:f4:59:0c:e9:5b:3b:fc:2d:cf:df:1c:0c:9a:
         53:86:ab:a9:dc:c4:f1:5b:93:a2:be:24:3c:5b:c8:d8:3c:15:
         be:8f:34:0e:b6:10:5b:dd:a5:60:22:31:71:4f:a3:23:51:30:
         ad:f1:02:16:45:08:80:14:53:b4:a9:84:d4:9c:9a:33:b6:3a:
         cf:4a:05:51:8f:ab:08:97:1b:4e:df:5f:8a:04:37:51:3f:c7:
         28:bd:41:83
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUH1ISkBU1PnCw+V/IhMD+oEfq/bwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYxMDA2MTZFOEZFQzVFNTEzNUQxRURBNkM0NTUzQkY3
MjUzMDcwNTAeFw0yNDAzMDUxNzM1MTVaFw0yNTAzMDQxNzQwMTVaMDMxMTAvBgNV
BAMTKEUwOEIzMjMwNjMwRDVBMzc2NzVEODlFMENEM0Y2NjNCQUE0MkE0QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVgq8abmzJrQi2q/Vvpbaqv+/Q
dmTk2J4g5qLAJnmAJGd817pTKRx/AzKmIchljM8aWvCh9XgG9MGCPp1yP6st+wXw
abbn3zZijY6f6pZa8FKPr0CGF/YYsHBZWhMGHXxG8e/QBhEUC+rLRzMQ35bXCyW5
jhlnpoQzVXu0jjBZk1e2X8SIBAiuPnhDeyvDsbGu9wzeLqAWzwsaGeOGo7gLs8Gn
vZNIVYxTorZpxKWVOYP2nIJeBJoKhgfo8Q3XlFJxJRsxb0Dfwgq+LfLDztu5nvP7
cE0L27VD082404FdOqiE36J45amQQNZ6P9ZuTBC7QUm9BWH2pArdX6Coj8gLAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU4IsyMGMNWjdnXYngzT9mO6pCpKcwHwYDVR0j
BBgwFoAUNhAGFuj+xeUTXR7abEVTv3JTBwUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNTRGRTAzMkVGOEE5RjdFMURFNTFDOUE0MzkyMEFCQjBE
MEQxMDFGNkZBRDQyNzlDOUU2RUJFN0I3NDAzNjY3LzAvMzYxMDA2MTZFOEZFQzVF
NTEzNUQxRURBNkM0NTUzQkY3MjUzMDcwNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNjEwMDYxNkU4RkVDNUU1MTM1
RDFFREE2QzQ1NTNCRjcyNTMwNzA1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzU0RkUwMzJFRjhBOUY3RTFERTUxQzlBNDM5MjBBQkIwRDBEMTAxRjZG
QUQ0Mjc5QzlFNkVCRTdCNzQwMzY2Ny8wLzMyMzgzMDMzM2EzMTY0MzkzMDNhNjIz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM3MzIzOTM5Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
Ax2QAAswDQYJKoZIhvcNAQELBQADggEBAEMnUZrZGnK3aUUnTmYd6OPd5DR87EWY
/TXtcjlctxcFM//R817QRp7+KsA8WsMk8eP/dPDAHlVYUNaxPVUyN5tLqtD9FMJS
in6zdTmsnQSNLXm3Z1aQfawxMPGczveV7vffFSv8jYw342FNKNCLQlpXRoKqMnaE
/0JWcP0B15yeTOnZ/LwUE4LJ5FLouSCcjTrJKG5TNxhd1DH1jFtxwrU6+goSMyZx
9FkM6Vs7/C3P3xwMmlOGq6ncxPFbk6K+JDxbyNg8Fb6PNA62EFvdpWAiMXFPoyNR
MK3xAhZFCIAUU7SphNScmjO2Os9KBVGPqwiXG07fX4oEN1E/xyi9QYM=
-----END CERTIFICATE-----