Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a6530303a3a2f34302d3430203d3e20323732393636.roa
File:                     323830333a383539303a6530303a3a2f34302d3430203d3e20323732393636.roa (raw, json)
Hash identifier:          +sv5e7PabFtNYj/95KO7sq/E2DkUu2/2F/CmqniTJQc=
Subject key identifier:   3E:95:19:A6:01:8D:D5:EB:A8:3F:71:66:AA:17:FB:43:57:0A:92:0D
Certificate issuer:       /CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
Certificate serial:       7BD5B0BC0CD670550993073605326C09F94367B2
Authority key identifier: 21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a6530303a3a2f34302d3430203d3e20323732393636.roa
Signing time:             Tue 05 Mar 2024 17:44:06 +0000
ROA not before:           Tue 05 Mar 2024 17:39:06 +0000
ROA not after:            Tue 04 Mar 2025 17:44:06 +0000
asID:                     272966
IP address blocks:        2803:8590:e00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Fri 06 Sep 2024 17:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d5:b0:bc:0c:d6:70:55:09:93:07:36:05:32:6c:09:f9:43:67:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
        Validity
            Not Before: Mar  5 17:39:06 2024 GMT
            Not After : Mar  4 17:44:06 2025 GMT
        Subject: CN=3E9519A6018DD5EBA83F7166AA17FB43570A920D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:41:4c:4a:3c:de:5e:79:2b:90:3a:41:6f:6e:
                    23:5b:62:78:e1:93:c7:ba:aa:8a:63:59:22:64:6a:
                    24:50:b7:92:16:79:c5:ba:b5:23:fb:57:fd:49:9f:
                    5d:a3:c5:47:49:2d:4c:17:99:f2:7b:97:4d:a4:1a:
                    3b:bd:81:1f:2b:5c:03:ed:ff:7a:0b:40:cf:88:1d:
                    e3:f8:b0:82:44:b3:f9:6e:b4:11:8f:e1:29:1d:e2:
                    93:af:fd:0e:6a:15:15:eb:76:1e:23:4e:2e:6a:fc:
                    2c:3c:f5:30:01:0e:0c:ed:cf:94:77:9d:a1:8c:c1:
                    d0:a8:ca:cb:a6:c1:78:82:d5:5c:4d:5d:cd:bc:ba:
                    e4:3a:96:b9:3d:4a:70:17:2b:72:f6:8a:33:42:71:
                    2b:6d:52:ed:28:06:1d:85:95:0b:2a:17:ea:f5:00:
                    ca:ee:bc:2d:a9:b0:bb:a1:c2:51:4a:9b:c5:b0:0c:
                    a2:88:18:45:87:9b:ab:2e:93:fa:43:cf:32:c5:00:
                    b2:ce:91:61:8f:89:d6:ca:f1:3f:ea:a1:e7:14:91:
                    fd:19:60:8d:6e:0d:a2:86:63:59:4a:64:74:9f:d7:
                    ca:b6:6a:a3:ee:ed:7c:2e:d3:e9:b8:87:2f:d5:20:
                    97:38:ea:ea:bf:0c:75:23:7f:9c:64:93:c5:1b:94:
                    17:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:95:19:A6:01:8D:D5:EB:A8:3F:71:66:AA:17:FB:43:57:0A:92:0D
            X509v3 Authority Key Identifier:
                keyid:21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a6530303a3a2f34302d3430203d3e20323732393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:a6:42:5b:6f:6c:62:12:2a:e3:17:d7:64:c8:a9:1b:10:50:
         ba:eb:94:df:c3:d4:01:ad:64:36:1b:0a:65:cc:85:d2:a4:70:
         9b:4d:7d:0d:18:79:89:bf:d8:8f:8f:33:1d:32:4a:a4:4e:c9:
         3c:c4:8d:97:3a:ed:81:eb:cf:1c:9e:20:16:73:8b:04:c1:b2:
         85:31:38:05:90:8c:f4:f3:28:47:2e:97:95:12:21:b5:93:1e:
         d1:80:be:07:0a:f7:3f:4d:e9:42:d7:e7:5e:7f:a2:7b:d4:6e:
         51:6a:94:97:f4:00:94:a3:16:f8:a3:b5:24:ae:bc:9c:bc:2f:
         01:9d:f6:d3:31:52:0f:36:31:d3:dd:35:1f:f7:6b:8c:aa:7e:
         57:3d:66:3c:42:cd:df:00:18:2a:50:21:cd:6f:7d:85:f0:1c:
         b5:f8:56:98:e8:11:ab:2b:7a:9c:1b:d5:93:26:8a:e9:71:7d:
         80:7e:26:51:05:77:cb:c2:b8:29:64:71:d5:a6:db:a9:65:98:
         8d:0e:dc:52:44:99:05:7a:14:2c:67:bc:d1:db:19:c1:9c:39:
         47:1d:04:77:a4:80:d5:9d:ea:90:40:7b:11:58:9d:d9:80:21:
         54:bc:34:55:0c:10:1b:a3:de:cc:c9:d2:68:11:13:e3:75:58:
         96:55:bf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----