Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/323830333a333835303a3a2f33322d3332203d3e20323639393436.roa
File:                     323830333a333835303a3a2f33322d3332203d3e20323639393436.roa (raw, json)
Hash identifier:          2cG8NIzTrCBD/tUF7MG1C6RealpDDbPwttif13ixPpE=
Subject key identifier:   4B:8A:12:13:51:68:B8:A6:09:56:D7:1B:85:58:3B:33:0A:FB:1E:8E
Certificate issuer:       /CN=0127A09EA99ADE58C0CCD84F18C499C45EC12185
Certificate serial:       101F8E8EC3FF0CEC2D64AACBCAF6AE8F0CBB11FD
Authority key identifier: 01:27:A0:9E:A9:9A:DE:58:C0:CC:D8:4F:18:C4:99:C4:5E:C1:21:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/323830333a333835303a3a2f33322d3332203d3e20323639393436.roa
Signing time:             Wed 15 May 2024 15:45:00 +0000
ROA not before:           Wed 15 May 2024 15:40:00 +0000
ROA not after:            Wed 14 May 2025 15:45:00 +0000
asID:                     269946
IP address blocks:        2803:3850::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sat 14 Sep 2024 02:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:1f:8e:8e:c3:ff:0c:ec:2d:64:aa:cb:ca:f6:ae:8f:0c:bb:11:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0127A09EA99ADE58C0CCD84F18C499C45EC12185
        Validity
            Not Before: May 15 15:40:00 2024 GMT
            Not After : May 14 15:45:00 2025 GMT
        Subject: CN=4B8A12135168B8A60956D71B85583B330AFB1E8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b3:56:39:fb:d1:85:eb:e4:c7:8e:b0:e7:ab:
                    24:b6:af:4e:dd:52:9a:7e:5a:e7:c8:e1:af:2e:eb:
                    47:d4:64:e2:23:71:76:ef:66:d3:67:55:cb:de:b1:
                    79:22:8f:9c:b4:18:82:0a:d6:08:c6:e7:0f:d7:fc:
                    4a:1f:88:fe:93:98:f2:42:5f:8d:75:26:16:52:ba:
                    b7:79:d5:5e:a9:c5:28:71:c9:6f:d9:08:88:b2:50:
                    ec:37:dd:de:c6:a4:5f:46:ef:c9:47:02:4a:18:5c:
                    23:75:8f:aa:82:75:9e:b5:f0:bd:9b:28:44:5e:d4:
                    39:19:46:af:e2:38:55:d2:3a:25:1a:72:4b:89:da:
                    0a:72:77:9f:3a:fd:59:e7:f1:f3:a6:64:70:4f:21:
                    9a:e2:91:84:d2:90:e4:21:9f:c8:b7:94:a1:c8:39:
                    03:be:e7:0d:97:fc:4c:80:a1:67:8a:a7:cb:e3:68:
                    b7:95:f8:dd:13:e7:59:12:92:b5:32:d1:d0:ce:da:
                    29:b4:6c:ac:1b:7a:78:0a:b4:a0:ff:57:49:7d:43:
                    bd:32:f3:e2:2d:51:ff:47:c5:99:65:c5:c3:49:28:
                    06:9d:69:9c:8d:94:ec:9e:10:3c:68:e3:95:eb:24:
                    87:3d:f2:d0:cd:0a:d4:f9:11:0c:75:bb:35:28:41:
                    cb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8A:12:13:51:68:B8:A6:09:56:D7:1B:85:58:3B:33:0A:FB:1E:8E
            X509v3 Authority Key Identifier:
                keyid:01:27:A0:9E:A9:9A:DE:58:C0:CC:D8:4F:18:C4:99:C4:5E:C1:21:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/323830333a333835303a3a2f33322d3332203d3e20323639393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3850::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:47:17:f7:83:fe:65:b4:27:d6:92:a5:d9:c3:1b:94:27:02:
         1d:8c:e2:2a:ff:78:c9:6b:8e:d8:fe:6f:e5:7c:02:4f:99:50:
         b6:ab:82:14:32:cd:86:39:58:83:1e:31:40:36:32:15:fc:56:
         4b:43:cd:c4:f5:c9:52:55:c8:66:a1:22:02:c3:5a:eb:0b:f5:
         96:5c:81:de:0e:f7:2d:60:42:58:38:41:63:80:ed:95:2e:46:
         5e:4b:1e:b0:ad:00:65:8a:30:2d:d5:04:1a:94:5b:7d:60:bd:
         43:d6:bd:18:cb:9d:bc:b7:f0:d4:a8:bf:ed:db:ab:30:e6:b7:
         7a:83:22:b3:47:ed:98:a4:40:9d:48:57:c6:32:70:14:2f:78:
         31:21:b2:46:ec:6b:66:10:c6:ed:94:80:02:b4:62:06:ff:2b:
         76:69:12:bb:64:d1:6d:fc:bc:cc:2b:6b:ee:1c:d6:bd:81:45:
         fc:7c:55:9f:21:5d:f1:24:c8:8e:33:29:26:d0:83:3e:0b:35:
         c8:95:2a:97:11:92:c9:5e:56:27:19:00:26:a4:74:ae:0e:00:
         43:de:58:e1:9a:14:a9:20:57:57:08:06:bd:31:9f:5a:04:a4:
         6d:7f:7d:1a:e7:ed:5c:ce:a0:3c:ba:39:fb:b0:23:16:2b:b9:
         1f:34:4c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----