Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a353a3a2f34382d3438203d3e203237363738.roa
File:                     323030313a313339383a353a3a2f34382d3438203d3e203237363738.roa (raw, json)
Hash identifier:          tGaiw828cg2fMzxvMyhJRIk4Kd2OVtfp6fDihiJ8FFQ=
Subject key identifier:   FF:7E:A1:13:62:55:2F:0E:94:4E:E4:EA:90:BF:65:27:0E:5D:32:E1
Certificate issuer:       /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial:       0C6A68FC730EA9A3CA7EF7A3CF892FED886738F3
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a353a3a2f34382d3438203d3e203237363738.roa
Signing time:             Tue 05 Mar 2024 18:13:05 +0000
ROA not before:           Tue 05 Mar 2024 18:08:05 +0000
ROA not after:            Tue 04 Mar 2025 18:13:05 +0000
asID:                     27678
IP address blocks:        2001:1398:5::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 15:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6a:68:fc:73:0e:a9:a3:ca:7e:f7:a3:cf:89:2f:ed:88:67:38:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
        Validity
            Not Before: Mar  5 18:08:05 2024 GMT
            Not After : Mar  4 18:13:05 2025 GMT
        Subject: CN=FF7EA11362552F0E944EE4EA90BF65270E5D32E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:93:21:6c:9b:f5:8c:8d:2b:72:3b:64:52:48:
                    41:5c:e2:5c:02:44:ab:4a:1d:6c:d3:20:95:89:d4:
                    e1:0a:1d:e0:c1:2d:70:e7:b1:74:16:ae:fa:9d:0a:
                    b8:65:0f:8d:54:a4:ca:6e:31:da:df:58:43:95:c4:
                    d8:cb:6e:5b:10:51:96:dc:4f:32:19:6c:c5:30:3d:
                    0b:8f:72:1c:5f:34:e1:39:3d:08:be:ab:3b:7c:ea:
                    7e:42:b6:47:23:b7:83:62:c4:73:06:af:e5:bb:62:
                    f0:f9:4e:8c:d5:d4:ce:3e:d4:3c:25:41:4a:db:40:
                    e5:af:a0:40:94:cd:72:74:17:8b:9b:61:8a:22:ff:
                    0e:29:3e:89:85:a0:bc:0c:fd:6b:44:77:f5:7d:7f:
                    a0:2c:e4:71:fc:ec:ca:0a:96:ac:83:1d:4e:c2:bd:
                    1c:c0:80:52:16:5e:eb:68:bf:ac:6d:c0:fe:99:6a:
                    b0:7f:5d:bc:f5:be:f3:c2:1e:d5:82:90:aa:61:15:
                    de:a9:9d:33:e6:fb:95:04:c8:57:30:f6:c0:ec:42:
                    18:ce:7a:d3:a6:d7:cb:13:a8:72:b3:8f:1f:50:d1:
                    3d:26:0f:c9:42:04:bc:fa:a9:15:31:3d:ad:1d:08:
                    47:57:68:7f:a9:2f:68:15:01:07:c4:6b:97:eb:80:
                    5e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7E:A1:13:62:55:2F:0E:94:4E:E4:EA:90:BF:65:27:0E:5D:32:E1
            X509v3 Authority Key Identifier:
                keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/323030313a313339383a353a3a2f34382d3438203d3e203237363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1398:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:16:33:0a:00:d1:88:81:94:1b:8d:84:36:f4:1b:c1:1d:6b:
         24:cd:0b:2f:b0:79:d6:48:74:a1:cd:44:51:08:09:f0:56:c2:
         76:d8:5a:4b:77:da:81:39:bc:2c:02:4b:4e:b3:7a:13:02:e8:
         11:34:26:80:a6:cc:2e:03:3a:a7:d0:bc:62:07:33:3d:d3:e1:
         40:70:13:7e:08:c4:ec:fb:94:aa:56:d6:25:c3:43:4d:33:31:
         23:33:a9:0c:6a:0a:78:96:b6:d6:62:12:0d:38:0a:3d:7e:f2:
         9a:ae:a0:de:23:b6:ca:34:04:2d:cd:c2:e0:07:1f:fb:fa:00:
         78:26:dd:fc:43:ca:49:50:2f:ed:f7:4c:cd:a6:a1:4d:b3:27:
         a9:36:51:8f:8a:7f:b2:39:9c:c0:0d:45:84:e5:38:49:fe:5d:
         61:6f:4e:a8:c4:c7:0e:3d:18:2a:49:0a:e9:c9:9c:44:59:ae:
         aa:6f:46:71:e6:e1:3d:33:6a:90:6c:ec:f2:f1:fb:47:61:8e:
         a0:0e:cb:73:e3:a6:5d:17:2e:1d:09:9d:8e:81:60:d9:fa:33:
         6a:0c:13:2a:b6:39:9a:ea:3e:17:f3:78:47:f3:7e:d9:31:32:
         8e:92:f7:70:e7:92:84:9c:d4:17:b7:4f:3a:01:cb:06:4a:15:
         aa:b8:07:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----