Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/323830313a3166353a3a2f34302d3438203d3e20323733383637.roa
File:                     323830313a3166353a3a2f34302d3438203d3e20323733383637.roa (raw, json)
Hash identifier:          anlNha9XC4pKzt2/RFye6LdHp1WmLT43bKnlUYMTsEE=
Subject key identifier:   6C:15:D8:4E:37:DE:34:B4:6D:88:5B:4C:80:E0:86:37:68:FF:31:FF
Certificate issuer:       /CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
Certificate serial:       2407EE3315148D5DF383126D59375F071101CE99
Authority key identifier: CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/323830313a3166353a3a2f34302d3438203d3e20323733383637.roa
Signing time:             Mon 01 Jul 2024 21:20:00 +0000
ROA not before:           Mon 01 Jul 2024 21:15:00 +0000
ROA not after:            Mon 30 Jun 2025 21:20:00 +0000
asID:                     273867
IP address blocks:        2801:1f5::/40 maxlen: 48

Validation:               Failed, certificate revoked on Tue 09 Jul 2024 07:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:07:ee:33:15:14:8d:5d:f3:83:12:6d:59:37:5f:07:11:01:ce:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
        Validity
            Not Before: Jul  1 21:15:00 2024 GMT
            Not After : Jun 30 21:20:00 2025 GMT
        Subject: CN=6C15D84E37DE34B46D885B4C80E0863768FF31FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b3:ad:83:69:6c:c6:09:54:aa:eb:41:81:a2:
                    84:16:1f:8a:09:51:8d:51:ca:08:2b:b4:cd:d0:6d:
                    b9:ef:f9:db:e0:5a:b2:3e:06:76:8e:44:74:52:c2:
                    5c:ec:9d:23:b2:25:b3:d1:aa:e8:25:71:fe:8b:24:
                    2b:a7:d2:99:ad:37:4d:9a:6f:bb:81:78:d4:ef:eb:
                    31:ce:b2:8f:b6:d1:66:3a:3e:b1:c9:bf:98:e2:46:
                    82:b9:8e:68:4c:f4:2d:33:68:55:4a:0c:de:25:b2:
                    04:ba:26:cb:fb:8d:1a:6a:76:1b:93:4d:00:c6:a4:
                    3d:b3:a3:56:4d:7d:c2:d1:6f:ee:f7:f3:fc:eb:50:
                    23:12:0f:b7:95:ff:19:7b:fe:6a:bc:76:bd:6b:d3:
                    c8:0b:56:c6:c9:ad:d5:e8:41:7a:5f:11:bc:91:7c:
                    08:da:6b:40:17:2d:18:c3:a5:00:c7:e1:b5:e5:66:
                    f2:58:9a:f7:08:13:56:c6:27:90:d2:50:a8:24:45:
                    c0:80:15:fc:8f:19:01:58:8d:13:a4:06:2e:ad:98:
                    8e:f8:6e:d2:f5:c2:f9:36:f0:ce:90:e0:e9:4e:a5:
                    e7:50:9a:cf:c5:a1:77:96:07:8d:be:b4:47:ce:ee:
                    9d:1d:b2:4b:cf:20:ab:fb:5a:f9:6d:dc:0a:63:1d:
                    0e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:15:D8:4E:37:DE:34:B4:6D:88:5B:4C:80:E0:86:37:68:FF:31:FF
            X509v3 Authority Key Identifier:
                keyid:CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/323830313a3166353a3a2f34302d3438203d3e20323733383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f5::/40

    Signature Algorithm: sha256WithRSAEncryption
         24:3e:cb:fa:89:d6:c4:93:18:ae:d2:9b:13:d4:7a:49:83:40:
         9e:2f:6b:db:bc:96:98:ce:c2:b9:f1:b8:e2:05:2d:13:13:14:
         5e:d7:15:50:65:3c:69:c4:aa:60:88:2a:ce:f3:42:a1:dd:28:
         17:ad:07:55:fb:e9:00:2f:18:fd:bb:e4:39:58:eb:48:6a:79:
         1d:1f:6f:60:a8:91:c9:73:96:be:22:2b:67:8b:c9:d9:32:4e:
         16:fa:c3:1b:4e:34:e6:2e:12:52:4a:76:56:5c:55:a3:0f:ca:
         70:f7:ae:71:b1:31:69:c1:cb:61:ee:5f:0d:31:bd:fc:9c:6a:
         99:4a:be:57:44:27:33:7e:e8:15:df:62:b6:72:4c:57:12:9e:
         35:4f:82:26:d3:54:ff:49:63:be:a9:7b:cd:2a:dd:62:ea:da:
         f7:41:27:3c:97:02:88:e7:b9:4b:77:3e:4f:b6:68:a0:ef:eb:
         2b:cb:0a:fa:4d:da:4b:0e:ad:e5:2d:5c:e0:9c:ea:0c:01:91:
         90:fc:c1:5d:b4:92:63:cd:e5:55:6b:23:ea:9e:74:4f:af:35:
         6c:77:d1:b6:5b:72:ce:56:ca:71:64:05:53:76:05:6f:2b:dc:
         21:85:26:4c:3f:f8:92:16:e2:e4:4c:ca:ad:17:36:97:75:66:
         91:e3:ed:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----