Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/323830333a613932303a3a2f33362d3438203d3e20323634373834.roa
File:                     323830333a613932303a3a2f33362d3438203d3e20323634373834.roa (raw, json)
Hash identifier:          nYaPv6MLvhtDFZnGqRgAdgRIR+BAle8Cs6vAO1YX0BM=
Subject key identifier:   FC:30:AF:5A:E4:AD:81:40:FC:DF:B3:00:CD:55:07:D5:36:D6:D7:1E
Certificate issuer:       /CN=7328461355B304B789F60508DF555EAC428848F4
Certificate serial:       5FE7EA9ED4418DA71AC995C70DE9B6DB16F720E0
Authority key identifier: 73:28:46:13:55:B3:04:B7:89:F6:05:08:DF:55:5E:AC:42:88:48:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/323830333a613932303a3a2f33362d3438203d3e20323634373834.roa
Signing time:             Tue 19 Nov 2024 11:30:00 +0000
ROA not before:           Tue 19 Nov 2024 11:25:00 +0000
ROA not after:            Tue 18 Nov 2025 11:30:00 +0000
asID:                     264784
IP address blocks:        2803:a920::/36 maxlen: 48

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 01:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e7:ea:9e:d4:41:8d:a7:1a:c9:95:c7:0d:e9:b6:db:16:f7:20:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7328461355B304B789F60508DF555EAC428848F4
        Validity
            Not Before: Nov 19 11:25:00 2024 GMT
            Not After : Nov 18 11:30:00 2025 GMT
        Subject: CN=FC30AF5AE4AD8140FCDFB300CD5507D536D6D71E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8f:3d:ee:65:d3:e7:44:d9:54:a0:e2:ac:48:
                    01:f0:cc:4e:cc:22:cc:06:cd:47:d0:bd:ed:ce:c3:
                    77:2f:09:ec:4a:84:63:91:2b:4a:b9:ff:6e:8e:2f:
                    fd:21:de:86:02:39:ef:1d:8a:e5:eb:11:5b:16:91:
                    58:2d:9f:cc:0e:60:5b:01:88:ea:28:1b:f9:39:92:
                    bc:84:78:50:db:a8:5b:ab:14:6d:96:9f:d4:bb:b0:
                    fc:2f:cd:7a:07:34:7d:4c:66:49:3f:cd:90:d5:e2:
                    d7:e9:ea:32:3d:ae:e3:7f:f7:1f:af:43:9b:08:34:
                    3a:3f:41:de:d0:71:0b:39:9b:7e:85:a8:32:52:3b:
                    8b:66:2b:be:88:26:96:4e:70:9c:d8:64:a0:db:bc:
                    f5:dc:42:41:28:4d:3c:e6:7c:02:89:c1:24:2f:12:
                    5b:1c:61:e0:ec:65:b1:30:14:3a:aa:02:73:32:56:
                    ca:b4:93:ee:48:87:07:4f:d9:90:b5:54:36:26:87:
                    36:a5:8e:44:9c:39:f6:90:2b:25:89:d4:7d:16:96:
                    88:f6:25:65:eb:2e:ab:05:95:fa:ce:08:e5:a2:3c:
                    ed:0c:f2:c2:9f:60:ae:b7:2e:9c:4a:28:cd:8a:f2:
                    1f:ef:aa:d6:b4:31:1a:fa:88:a4:1f:3a:05:7c:3c:
                    00:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:30:AF:5A:E4:AD:81:40:FC:DF:B3:00:CD:55:07:D5:36:D6:D7:1E
            X509v3 Authority Key Identifier:
                keyid:73:28:46:13:55:B3:04:B7:89:F6:05:08:DF:55:5E:AC:42:88:48:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/323830333a613932303a3a2f33362d3438203d3e20323634373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a920::/36

    Signature Algorithm: sha256WithRSAEncryption
         e7:92:c7:3c:26:58:c8:9f:57:74:a3:43:c9:1b:ba:2c:29:7f:
         d8:c9:15:92:83:1e:3c:43:dd:f8:c5:24:96:87:fe:bf:57:ea:
         ce:97:f7:31:71:de:c3:d7:f7:26:2f:27:ce:94:df:06:2d:16:
         9b:9d:25:7f:d3:e0:cb:9d:7d:92:a3:33:83:3b:eb:90:f3:08:
         34:b4:6c:92:2e:30:ed:bb:bb:7e:14:7e:c2:9a:e9:31:f7:69:
         77:da:5e:2b:30:28:dc:b8:70:2f:58:75:96:02:2d:9b:c9:22:
         05:c7:1b:c7:26:e6:90:01:54:08:78:5f:b2:df:cf:ed:fe:a5:
         24:a3:ea:c6:21:22:f9:38:a6:aa:ef:04:df:88:83:a4:d5:bd:
         2e:ce:d4:0d:fd:13:89:32:1d:28:4e:d8:7e:43:bb:27:61:7f:
         33:62:c0:a9:06:fd:02:c0:5e:13:61:4d:48:63:05:71:ec:15:
         7f:3e:5e:10:90:bd:c3:6c:0a:2d:49:c6:fd:06:f5:b0:15:14:
         46:97:d0:da:d6:7f:d8:46:ef:f6:0a:eb:f3:f7:5b:a1:d4:de:
         58:fc:4a:b7:d3:39:c7:85:cb:8f:66:8f:de:7f:48:22:40:cf:
         6f:50:c8:4f:c1:e0:50:46:f1:dd:cf:79:06:d6:86:26:67:d4:
         f2:01:46:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----