Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/323830333a656334303a3a2f33322d3332203d3e20323633373932.roa
File:                     323830333a656334303a3a2f33322d3332203d3e20323633373932.roa (raw, json)
Hash identifier:          9wronwiwXBHOmhPTqeu2tlvu6ciyCm0ymVbh2UT6yG4=
Subject key identifier:   DA:08:A8:D1:BC:34:09:F6:F3:D4:14:53:52:95:65:B9:5A:F4:95:EB
Certificate issuer:       /CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
Certificate serial:       4B8259FF43A79869D2D424F9D565719F75909993
Authority key identifier: B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/323830333a656334303a3a2f33322d3332203d3e20323633373932.roa
Signing time:             Tue 05 Mar 2024 18:15:47 +0000
ROA not before:           Tue 05 Mar 2024 18:10:47 +0000
ROA not after:            Tue 04 Mar 2025 18:15:47 +0000
asID:                     263792
IP address blocks:        2803:ec40::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 14:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:82:59:ff:43:a7:98:69:d2:d4:24:f9:d5:65:71:9f:75:90:99:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
        Validity
            Not Before: Mar  5 18:10:47 2024 GMT
            Not After : Mar  4 18:15:47 2025 GMT
        Subject: CN=DA08A8D1BC3409F6F3D41453529565B95AF495EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:6d:fe:61:96:18:db:96:f7:75:d8:e7:56:
                    e3:55:c4:88:cf:22:62:7b:71:25:c5:7b:6a:79:a2:
                    36:67:37:fa:29:39:3a:b5:60:15:fc:75:14:e4:bf:
                    6c:3e:7a:d6:dd:81:fc:ee:38:85:85:67:46:aa:84:
                    8f:0d:ae:05:b7:7b:0d:f8:cb:89:3a:d2:a6:b1:59:
                    d9:a2:3c:b4:94:4c:01:f2:41:49:a3:c3:66:5b:96:
                    1d:9a:0d:a5:8f:19:da:c2:be:09:85:39:72:bd:8f:
                    49:80:9f:72:31:be:be:3d:7c:e8:74:4f:f2:ca:90:
                    6d:e2:e3:47:10:13:b1:f7:37:15:9c:36:0e:87:10:
                    f3:0f:47:2c:08:94:e6:a0:29:0c:0b:44:8d:35:e5:
                    87:27:6d:d0:5b:8c:e5:c1:57:39:7e:b0:7d:dc:5f:
                    20:51:ab:76:07:dd:cc:de:6d:85:38:08:19:b1:54:
                    27:35:b3:67:24:6a:6d:f1:4a:31:cd:fe:a0:3a:82:
                    28:a1:16:83:fc:e3:bf:da:63:59:ab:b8:87:aa:af:
                    81:82:45:67:b2:98:49:a2:ce:d9:e5:fa:ce:a0:ca:
                    d0:eb:a0:45:f4:b0:70:2f:e3:ae:4b:37:c6:50:c5:
                    2e:06:c4:02:9f:37:d8:b9:d7:d3:ea:32:74:43:d7:
                    74:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:08:A8:D1:BC:34:09:F6:F3:D4:14:53:52:95:65:B9:5A:F4:95:EB
            X509v3 Authority Key Identifier:
                keyid:B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/323830333a656334303a3a2f33322d3332203d3e20323633373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ec40::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:f0:58:10:66:2a:6c:73:70:2a:a9:e4:db:03:e2:38:d1:03:
         01:45:9e:7b:c5:61:69:e3:6e:4d:57:e8:c5:68:b9:31:e2:6f:
         d0:57:0a:46:eb:c8:2a:8f:c2:05:40:0c:e9:13:56:b0:0c:4e:
         e6:5f:bc:e3:57:bb:b3:d2:6a:13:aa:5f:0d:45:71:fe:dc:09:
         99:32:e6:cf:b1:a9:a6:20:24:3d:cd:5b:00:7c:33:a4:e2:7e:
         d4:b9:73:e2:60:cd:f6:50:cb:b5:a8:c4:0d:9c:1b:07:c4:96:
         c5:3f:d8:0f:92:2d:ef:ad:c1:ba:5e:3e:e4:ef:03:8c:02:e4:
         10:f4:00:f6:07:1f:65:0b:0d:be:98:bf:17:40:53:b8:a0:11:
         c6:a2:2d:f6:4e:b7:b0:f1:a0:7e:f1:9d:03:2f:16:a5:0e:46:
         9d:d3:af:3d:cf:b7:a2:38:0c:fd:85:4f:c1:cf:1e:39:68:72:
         9e:ea:3e:2e:e3:03:0d:d4:68:de:a8:72:d1:bf:70:08:83:26:
         f5:43:9e:55:d9:46:7c:1d:d3:79:16:d2:35:9e:df:9c:20:2c:
         69:b6:e1:77:0e:c4:86:6a:6b:76:4f:b9:49:ec:d3:54:5a:c7:
         f1:c6:57:4f:e4:2c:f2:e5:67:db:de:d8:07:28:3d:7e:32:2d:
         37:c1:12:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----