Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5DE7ADA2A8933BED5AA377AB01705D6CD981B18C4DEEE00BE06451F46D79FB3/0/323830333a373439303a3a2f33322d3332203d3e20323732383330.roa
File:                     323830333a373439303a3a2f33322d3332203d3e20323732383330.roa (raw, json)
Hash identifier:          6j6CtIh97kDb/Pi72B2SFijz2uHzkAdhkYyAcd5UG6c=
Subject key identifier:   EC:D2:10:37:83:ED:28:D6:1F:0B:92:A7:04:ED:EC:E6:4D:83:C3:64
Certificate issuer:       /CN=9188E212A0B6497A5708E2970FE3A14BF0ECB10B
Certificate serial:       42599B403352FFE39B21CF4DB8307FB1001A3A55
Authority key identifier: 91:88:E2:12:A0:B6:49:7A:57:08:E2:97:0F:E3:A1:4B:F0:EC:B1:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9188E212A0B6497A5708E2970FE3A14BF0ECB10B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5DE7ADA2A8933BED5AA377AB01705D6CD981B18C4DEEE00BE06451F46D79FB3/0/323830333a373439303a3a2f33322d3332203d3e20323732383330.roa
Signing time:             Tue 05 Mar 2024 17:59:22 +0000
ROA not before:           Tue 05 Mar 2024 17:54:22 +0000
ROA not after:            Tue 04 Mar 2025 17:59:22 +0000
asID:                     272830
IP address blocks:        2803:7490::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 30 Aug 2024 22:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:59:9b:40:33:52:ff:e3:9b:21:cf:4d:b8:30:7f:b1:00:1a:3a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9188E212A0B6497A5708E2970FE3A14BF0ECB10B
        Validity
            Not Before: Mar  5 17:54:22 2024 GMT
            Not After : Mar  4 17:59:22 2025 GMT
        Subject: CN=ECD2103783ED28D61F0B92A704EDECE64D83C364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a9:85:14:3e:b6:1a:ca:96:ce:a7:21:fb:e8:
                    fd:3f:5c:05:df:20:d4:58:2a:3d:09:01:a7:ba:bc:
                    62:28:05:f5:32:e4:b1:46:ef:a5:9a:63:e6:f7:b2:
                    7c:0c:e1:18:36:d6:e1:03:d2:c2:fd:4e:f9:45:4f:
                    0a:93:36:07:02:d9:33:a9:90:c0:bb:99:3b:9a:68:
                    df:03:02:08:31:cb:f3:43:4b:41:ec:c5:d9:ca:7d:
                    f3:0e:cc:8f:8c:a4:b2:af:6d:8b:92:bf:6e:c1:b2:
                    ec:20:e7:c5:83:17:60:81:d3:64:ae:66:a7:30:6e:
                    a1:5d:da:d1:6f:ca:49:42:91:44:3f:0e:10:00:a2:
                    d7:80:63:05:84:23:29:4f:9f:2b:d1:74:91:2c:6b:
                    0a:90:12:a1:68:51:ee:e2:8c:96:42:48:0b:db:08:
                    aa:c5:48:04:76:79:79:06:f2:75:dc:d3:30:d7:06:
                    ac:35:10:42:74:51:98:39:f3:84:ee:44:47:7e:b7:
                    84:41:86:c6:6f:39:2d:70:87:36:43:8e:95:4e:dd:
                    bd:b1:f2:c6:c0:34:2a:ba:19:b2:53:07:22:49:c2:
                    07:99:6f:50:ee:1d:0f:9e:5c:c7:b8:2c:3c:bf:4b:
                    ec:70:df:ca:2c:7c:ca:39:6c:29:89:9a:e3:30:34:
                    09:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D2:10:37:83:ED:28:D6:1F:0B:92:A7:04:ED:EC:E6:4D:83:C3:64
            X509v3 Authority Key Identifier:
                keyid:91:88:E2:12:A0:B6:49:7A:57:08:E2:97:0F:E3:A1:4B:F0:EC:B1:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5DE7ADA2A8933BED5AA377AB01705D6CD981B18C4DEEE00BE06451F46D79FB3/0/9188E212A0B6497A5708E2970FE3A14BF0ECB10B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9188E212A0B6497A5708E2970FE3A14BF0ECB10B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5DE7ADA2A8933BED5AA377AB01705D6CD981B18C4DEEE00BE06451F46D79FB3/0/323830333a373439303a3a2f33322d3332203d3e20323732383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7490::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:04:fb:5c:92:a9:5e:19:7d:c9:4e:e9:08:99:93:7d:6c:6c:
         ef:a5:8d:30:26:cc:99:fa:75:e2:4c:4e:bf:e1:9f:83:1e:01:
         c1:27:43:86:98:6c:a4:3b:14:99:43:9b:72:57:85:bd:04:67:
         89:16:bf:6b:ca:84:0f:05:6f:4d:ce:8e:ff:71:06:8a:62:b5:
         a5:76:a5:e9:c3:23:1e:1b:71:54:f4:b2:30:e2:c8:29:47:fe:
         f6:7f:b3:7b:15:a1:a6:6e:52:81:d5:8c:b3:ed:58:7a:19:f3:
         44:43:d8:c3:0e:01:ae:49:36:ff:d8:0c:82:ff:a1:37:d6:30:
         9d:ac:23:ff:b4:6c:41:0c:b8:8d:52:a0:e9:55:40:0a:22:41:
         76:3f:2c:04:ec:57:78:6f:1a:b6:d3:85:ed:9f:bd:80:7a:0c:
         8b:a9:b2:f6:2a:3d:51:ae:eb:53:6d:b3:00:78:eb:ef:d4:5f:
         d4:a1:95:4d:24:0c:8c:a0:ae:a9:d4:25:d9:b6:51:54:92:42:
         10:d1:51:52:49:5f:ff:c1:e0:5a:8b:05:94:72:f0:ff:a3:a1:
         3b:dd:05:a8:93:40:fe:10:5b:3f:39:be:6f:77:91:b2:c7:d8:
         71:cf:1f:12:6d:19:1e:6a:e7:1c:0e:cb:84:a1:fc:11:1e:c8:
         ac:df:22:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----