Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/323830333a346331303a3a2f33322d3332203d3e20323731383639.roa
File:                     323830333a346331303a3a2f33322d3332203d3e20323731383639.roa (raw, json)
Hash identifier:          GpQgmBicEapeyhBDLw6Fx3GDsVnThxnAZj3FVUz06JM=
Subject key identifier:   D7:B0:A5:49:5F:4F:18:05:23:DB:DC:D4:59:6C:BD:D0:D5:16:0C:D0
Certificate issuer:       /CN=11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA
Certificate serial:       5348EADEB3AF904B950EAEC7F17DC662C45D410B
Authority key identifier: 11:CB:02:0A:EC:E3:C0:AA:F4:EE:29:7A:9A:FD:12:BE:EA:62:65:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/323830333a346331303a3a2f33322d3332203d3e20323731383639.roa
Signing time:             Tue 05 Mar 2024 18:20:30 +0000
ROA not before:           Tue 05 Mar 2024 18:15:30 +0000
ROA not after:            Tue 04 Mar 2025 18:20:30 +0000
asID:                     271869
IP address blocks:        2803:4c10::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 12 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:48:ea:de:b3:af:90:4b:95:0e:ae:c7:f1:7d:c6:62:c4:5d:41:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA
        Validity
            Not Before: Mar  5 18:15:30 2024 GMT
            Not After : Mar  4 18:20:30 2025 GMT
        Subject: CN=D7B0A5495F4F180523DBDCD4596CBDD0D5160CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bc:2f:53:62:fd:a2:f1:fc:11:31:b6:35:c0:
                    06:6f:7f:5c:11:70:5a:03:8f:85:75:4e:72:66:73:
                    a8:3b:c0:10:e5:68:6b:b1:d3:69:e3:a7:17:d5:76:
                    f3:7e:82:c8:b5:5c:aa:f6:b6:dd:bb:b0:cf:c6:c7:
                    9d:33:46:fd:43:0d:af:72:7f:46:b2:26:02:06:87:
                    d9:a4:3f:c2:8d:9c:1d:2c:8e:88:ec:51:04:5e:68:
                    28:52:19:3c:e0:0c:db:12:6c:e8:4e:f1:d1:ff:66:
                    19:0e:6e:d5:2e:b8:16:9f:74:d5:04:aa:dc:99:0e:
                    a2:4e:23:ba:10:a6:88:ae:5b:2b:96:75:ad:58:61:
                    d6:e2:47:c7:f8:fb:79:04:5c:47:fc:bd:f5:e1:10:
                    4c:ad:b7:6e:d5:9f:40:c7:59:8d:af:87:ce:65:e5:
                    b1:af:68:e5:2b:a8:ec:da:a4:e4:a7:ac:7a:a5:42:
                    a1:f6:27:22:52:9e:78:0c:42:1c:c5:61:d7:71:41:
                    ec:d8:84:29:cb:d2:cc:38:d8:8b:1d:31:36:64:ff:
                    86:8e:57:df:cf:62:c8:4e:e9:dd:74:15:bd:b4:44:
                    c9:c9:78:8d:9d:8d:56:5f:ba:6b:c8:0d:4d:ab:9a:
                    dd:ea:99:1c:2e:26:e5:b7:e3:56:63:02:c4:37:63:
                    f9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B0:A5:49:5F:4F:18:05:23:DB:DC:D4:59:6C:BD:D0:D5:16:0C:D0
            X509v3 Authority Key Identifier:
                keyid:11:CB:02:0A:EC:E3:C0:AA:F4:EE:29:7A:9A:FD:12:BE:EA:62:65:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11CB020AECE3C0AAF4EE297A9AFD12BEEA6265DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCC6696BF619F80A53ED89E14649C67327E748F3E4323585AC27CCCCF1F45FC6/0/323830333a346331303a3a2f33322d3332203d3e20323731383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4c10::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:7e:cb:ac:0e:16:5b:5f:3c:f7:9c:3f:21:86:29:b8:ec:bf:
         08:41:39:f1:01:d3:e0:8e:81:b9:35:7b:42:6c:0a:06:f8:bc:
         9b:cd:7d:b8:16:5e:02:5e:96:05:cf:e7:03:ed:60:a2:45:3f:
         54:19:0f:88:d6:12:e3:48:3b:21:a2:5e:d2:89:0d:86:44:67:
         d9:41:b6:ba:cb:56:54:71:c8:19:9d:ae:1d:27:9a:b8:1d:eb:
         68:20:05:9a:f0:4a:55:9b:6c:79:4e:11:91:a6:4a:3c:9d:a8:
         f2:7b:9d:36:5c:e8:e5:a9:f5:9e:48:63:d3:4b:b5:22:44:4f:
         1e:11:44:d7:44:5d:28:95:3e:51:7f:8d:12:27:ea:ed:9b:fb:
         55:b8:97:e9:1e:ec:12:c5:d7:dc:a2:9a:97:04:f7:0e:a6:ec:
         36:06:b2:de:0b:95:28:40:cf:0e:6c:29:1b:ac:e8:2c:66:a9:
         59:c4:c8:13:26:85:dc:63:da:34:f3:3b:95:c7:fd:df:63:95:
         65:2b:c3:3b:f6:57:1b:4a:33:2c:ce:48:e3:36:96:28:0a:11:
         fd:6e:fd:01:a2:21:f9:07:44:32:ee:7e:80:d7:c1:ec:62:6b:
         bd:d2:73:d2:2e:d0:8c:ee:e3:5b:6f:4f:2a:d7:a4:70:86:52:
         38:34:96:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----