Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/323830333a366236303a3a2f33322d3332203d3e20323639383036.roa
File:                     323830333a366236303a3a2f33322d3332203d3e20323639383036.roa (raw, json)
Hash identifier:          bNZeiVP/TPNFpfIQOc+nRCUzj9e0SsxaRfDFpSOHcx8=
Subject key identifier:   1C:89:89:8C:C8:49:11:34:C4:7E:D8:CC:63:A8:8D:A5:B6:8A:0D:0E
Certificate issuer:       /CN=87919A3C59C067523C21EF70A596F0B7F9C09798
Certificate serial:       275A83F662097F54E13790E3A642DA01B6766737
Authority key identifier: 87:91:9A:3C:59:C0:67:52:3C:21:EF:70:A5:96:F0:B7:F9:C0:97:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87919A3C59C067523C21EF70A596F0B7F9C09798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/323830333a366236303a3a2f33322d3332203d3e20323639383036.roa
Signing time:             Tue 05 Mar 2024 17:51:18 +0000
ROA not before:           Tue 05 Mar 2024 17:46:18 +0000
ROA not after:            Tue 04 Mar 2025 17:51:18 +0000
asID:                     269806
IP address blocks:        2803:6b60::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 18:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5a:83:f6:62:09:7f:54:e1:37:90:e3:a6:42:da:01:b6:76:67:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87919A3C59C067523C21EF70A596F0B7F9C09798
        Validity
            Not Before: Mar  5 17:46:18 2024 GMT
            Not After : Mar  4 17:51:18 2025 GMT
        Subject: CN=1C89898CC8491134C47ED8CC63A88DA5B68A0D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ce:53:08:75:56:0b:99:93:fe:79:2f:e7:e8:
                    66:56:79:0e:77:bc:fb:94:50:2c:4c:20:3b:5d:b2:
                    d2:46:3a:fe:16:e5:aa:22:93:02:af:82:69:f6:5b:
                    a1:bc:91:d6:e3:02:f8:99:ac:cb:fe:d9:00:4a:5e:
                    4c:11:dc:f4:50:c0:d2:01:ad:c0:ac:d3:c3:e9:46:
                    05:2e:e3:e4:0f:2e:9f:bc:3a:43:ef:77:bb:7b:10:
                    33:98:e3:8f:9e:77:5f:46:8c:3c:fe:d6:c9:2b:64:
                    0c:ee:1c:ae:98:e5:14:8e:41:59:af:44:9c:57:a8:
                    9a:8b:c1:46:3a:fc:79:2f:96:b9:f6:58:84:39:43:
                    bc:73:45:3f:96:8e:13:4b:a8:6d:c7:fb:48:c8:f7:
                    5e:98:a6:7a:6c:f2:a0:e7:ec:2c:65:f6:99:6e:7b:
                    8a:d1:eb:29:66:bf:dd:e0:30:ef:fc:c9:ba:c1:99:
                    4a:60:de:0d:f5:f4:58:3d:7d:59:0a:f0:e9:8e:1f:
                    65:48:d6:39:16:14:13:c5:b0:72:a6:e0:0d:11:90:
                    79:7f:b0:c6:e0:89:19:b8:da:5c:e0:f7:fd:df:26:
                    55:83:55:db:7e:14:f6:c6:73:46:10:c7:45:cb:3c:
                    43:56:a4:29:8b:94:06:05:a9:da:c8:60:0e:96:f6:
                    45:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:89:89:8C:C8:49:11:34:C4:7E:D8:CC:63:A8:8D:A5:B6:8A:0D:0E
            X509v3 Authority Key Identifier:
                keyid:87:91:9A:3C:59:C0:67:52:3C:21:EF:70:A5:96:F0:B7:F9:C0:97:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/87919A3C59C067523C21EF70A596F0B7F9C09798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87919A3C59C067523C21EF70A596F0B7F9C09798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/323830333a366236303a3a2f33322d3332203d3e20323639383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:3e:08:02:7e:7b:88:37:cb:0b:11:f3:2d:66:c5:a7:8e:8b:
         62:43:2b:3b:9a:7c:ae:4e:c0:3d:ce:fe:69:3c:f7:ef:5e:7b:
         c2:f9:b8:24:c5:0e:d2:b1:04:c6:5f:ca:26:81:29:e6:5a:11:
         b6:e7:75:e4:09:f0:8c:34:9a:cc:53:e3:a8:07:31:3e:a1:2b:
         af:3d:4b:74:d5:10:5b:ab:1d:c6:9e:46:51:0b:cb:6e:67:9e:
         cc:14:0c:ff:a9:fa:11:e3:01:fc:a0:1d:0b:c1:4b:3d:da:97:
         2c:b7:0b:d2:e0:66:d0:f5:37:f7:5d:bc:82:04:db:5f:ad:a1:
         9d:62:28:77:d1:32:c4:29:de:f6:56:07:b1:bd:ec:82:8e:23:
         ae:3d:df:ac:cf:c1:ba:d5:b1:54:fd:28:3e:c9:36:e6:9e:cf:
         6b:96:0a:27:9e:44:a7:28:46:6b:ba:e8:96:0c:d9:6c:f1:50:
         33:67:4d:c2:bc:b3:fa:11:1b:ae:6f:92:ea:ba:4c:fc:c1:6f:
         d5:e2:2b:ec:a5:ad:80:04:af:67:48:91:71:dc:d6:78:82:09:
         bb:a5:67:49:47:bf:d4:2c:19:6c:c9:f9:c4:42:de:58:6b:e9:
         51:87:d4:09:3b:84:e9:45:b4:11:96:9c:2a:ad:59:22:d2:22:
         8a:03:32:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----