Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a3a2f34302d3430203d3e20323732393636.roa
File:                     323830333a383539303a3a2f34302d3430203d3e20323732393636.roa (raw, json)
Hash identifier:          QCIDS9xldKuOW5ewawKO1bpx/hPwzTxQBdeOJJFRF78=
Subject key identifier:   82:96:7B:18:C0:63:7A:18:A6:85:C8:80:EC:E9:AF:A3:8F:A7:D3:A5
Certificate issuer:       /CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
Certificate serial:       693DDA2D4D6C1ED8A71F34F1AACC14B1AC83053F
Authority key identifier: 21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a3a2f34302d3430203d3e20323732393636.roa
Signing time:             Tue 05 Mar 2024 17:44:05 +0000
ROA not before:           Tue 05 Mar 2024 17:39:05 +0000
ROA not after:            Tue 04 Mar 2025 17:44:05 +0000
asID:                     272966
IP address blocks:        2803:8590::/40 maxlen: 40

Validation:               Failed, certificate revoked on Fri 06 Sep 2024 17:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:3d:da:2d:4d:6c:1e:d8:a7:1f:34:f1:aa:cc:14:b1:ac:83:05:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
        Validity
            Not Before: Mar  5 17:39:05 2024 GMT
            Not After : Mar  4 17:44:05 2025 GMT
        Subject: CN=82967B18C0637A18A685C880ECE9AFA38FA7D3A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ba:e0:4d:2a:98:3c:da:57:16:2d:4d:35:c4:
                    18:b1:f2:15:05:ab:bc:8f:66:33:57:14:8d:0a:d0:
                    18:54:3a:5d:38:5d:6c:1d:3f:34:cf:79:5b:19:79:
                    e2:12:91:60:b7:5d:f7:44:cd:7f:18:dc:8c:32:a1:
                    94:7b:ec:be:21:f2:1e:cf:cf:28:30:41:26:d9:6a:
                    bc:7a:04:1b:f4:68:14:1c:85:01:52:47:97:f8:1c:
                    96:99:94:7c:0b:ff:e2:2a:e4:0d:79:67:91:92:cb:
                    da:93:fb:7f:c3:0a:cd:15:f1:a4:06:83:83:43:d9:
                    26:e1:db:4d:28:33:a2:a8:88:97:ec:2d:de:f7:e9:
                    05:14:4b:d4:9c:9e:12:14:0c:b5:ea:f5:71:7d:ce:
                    f8:55:e0:d8:59:47:48:61:0b:d6:4c:99:a7:d2:b5:
                    a4:3c:1d:a1:71:e2:b3:f4:36:34:9b:3d:f3:d0:03:
                    ed:0c:31:97:db:a0:e2:c2:de:44:13:7b:14:3d:b5:
                    c9:0d:49:32:01:85:72:a5:21:28:cb:fe:61:10:2f:
                    fd:c6:82:46:0d:02:47:7e:22:32:0c:c2:0f:2b:a4:
                    23:1b:e9:ef:3b:db:cc:7d:b6:58:3e:6c:7f:d2:f9:
                    bf:65:fa:0b:29:32:b0:46:0c:37:82:41:f0:4d:30:
                    4e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:96:7B:18:C0:63:7A:18:A6:85:C8:80:EC:E9:AF:A3:8F:A7:D3:A5
            X509v3 Authority Key Identifier:
                keyid:21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a3a2f34302d3430203d3e20323732393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:3f:2c:49:fe:09:de:7e:30:63:ff:dc:13:4d:30:2d:51:7f:
         08:10:5e:18:2b:f9:fc:be:f1:44:1b:91:34:39:26:cd:ce:be:
         26:e3:6c:73:84:c2:63:e3:3f:c9:18:3c:76:52:58:84:6f:b4:
         fb:30:f3:9c:4a:b8:18:ca:22:c9:b7:ad:ee:6d:23:3a:16:d9:
         a2:81:0d:2a:19:f6:63:b2:88:99:a8:85:ab:73:33:60:19:b6:
         c0:68:d7:95:e4:08:05:d4:4b:62:98:58:e6:65:ae:3b:f4:df:
         b1:37:6a:e6:12:2d:0b:3f:d0:aa:fa:2f:bd:f0:2f:ac:42:f4:
         96:59:54:c9:03:6d:2a:0b:4c:16:fb:07:99:08:ab:49:1c:23:
         49:86:08:d1:f9:0e:a9:96:c2:1e:5d:28:52:44:3b:68:e2:46:
         ec:f6:1b:88:e1:45:f2:33:5c:bd:db:b5:5e:23:0e:b5:ef:d3:
         94:5f:81:e0:04:9e:83:6a:70:34:42:7a:cd:d9:a1:0e:6f:a4:
         22:c1:59:2f:0c:41:ba:3d:40:24:96:d4:56:26:e1:79:ad:2e:
         bc:7a:25:5a:d6:ca:ae:63:d6:19:7f:b9:e2:31:8b:91:5e:11:
         17:56:8f:5e:19:84:f1:ee:42:5d:4e:86:c1:8c:ae:59:7d:5f:
         51:49:6f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----