Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/323830313a3137613a393a3a2f34382d3438203d3e20323730313035.roa
File:                     323830313a3137613a393a3a2f34382d3438203d3e20323730313035.roa (raw, json)
Hash identifier:          E1Tv37jNLWWEAuYLxyLpsfUMt+GWpNaKb0mUymkBBLw=
Subject key identifier:   6C:F8:2A:A6:E7:58:4A:2F:D1:08:B4:92:23:9D:7F:B8:36:2F:3D:4C
Certificate issuer:       /CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
Certificate serial:       2F883DB90D27DB27EDEA4FC4FD96586661E56C5A
Authority key identifier: D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/323830313a3137613a393a3a2f34382d3438203d3e20323730313035.roa
Signing time:             Tue 05 Mar 2024 17:44:03 +0000
ROA not before:           Tue 05 Mar 2024 17:39:03 +0000
ROA not after:            Tue 04 Mar 2025 17:44:03 +0000
asID:                     270105
IP address blocks:        2801:17a:9::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 00:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:88:3d:b9:0d:27:db:27:ed:ea:4f:c4:fd:96:58:66:61:e5:6c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
        Validity
            Not Before: Mar  5 17:39:03 2024 GMT
            Not After : Mar  4 17:44:03 2025 GMT
        Subject: CN=6CF82AA6E7584A2FD108B492239D7FB8362F3D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:55:21:fc:5b:fe:66:b3:56:39:01:de:44:
                    ec:a1:37:0a:5b:4c:1f:57:4b:77:cc:7b:e2:58:3b:
                    66:3b:4d:ac:33:85:8b:78:d3:0a:8e:bf:73:e1:85:
                    85:32:85:94:39:74:51:a2:c6:49:fa:3b:cd:dc:40:
                    7e:c0:45:ea:1b:36:f3:62:d1:3e:27:10:40:1f:8d:
                    de:f6:d3:3c:f3:c4:af:2c:a4:26:8c:37:a8:df:49:
                    37:dc:95:18:0b:44:86:f4:9b:9e:2b:91:b0:9f:65:
                    13:59:e5:70:18:c4:09:b8:41:7f:b4:6e:36:0b:c5:
                    6c:56:1e:25:a8:cf:58:5f:ac:1d:12:a1:94:74:af:
                    6c:3d:b8:9a:5a:6a:36:88:93:40:62:30:1c:f5:4f:
                    87:94:9a:1a:2e:92:78:b7:c4:3a:cb:48:9b:5f:6a:
                    3f:42:de:d9:8f:05:fd:14:c9:bf:8e:fb:39:dd:21:
                    bf:e4:ae:fd:62:c9:dc:da:c8:1b:2c:14:d0:35:de:
                    78:13:52:b4:e3:fd:83:25:7c:92:be:89:ac:70:1d:
                    0e:ab:a5:31:30:41:1d:1f:5a:c5:61:3a:59:f0:80:
                    3b:2c:4e:8b:27:c9:75:8a:ec:c1:6f:59:4b:24:7c:
                    9b:e9:40:20:25:29:14:70:01:0c:2c:fe:b4:16:8e:
                    34:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F8:2A:A6:E7:58:4A:2F:D1:08:B4:92:23:9D:7F:B8:36:2F:3D:4C
            X509v3 Authority Key Identifier:
                keyid:D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/323830313a3137613a393a3a2f34382d3438203d3e20323730313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17a:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:d8:c4:cc:ce:b0:62:6b:ff:55:29:46:cd:1a:f0:01:f7:97:
         15:d9:09:ea:ef:17:c1:f2:e5:32:55:f9:35:53:4b:e8:a9:6f:
         f3:1a:2e:12:4d:ef:c3:13:52:fe:3e:8f:9c:d4:af:0b:58:a3:
         fa:15:41:92:c0:69:c8:18:e3:57:32:c2:10:64:97:76:85:17:
         27:d9:7d:69:5e:bd:cd:d6:2c:45:7e:4d:c9:ca:8b:ca:9f:be:
         bb:61:3f:48:54:cd:bc:fc:5c:91:6f:ff:0c:60:9f:38:2f:3b:
         73:8f:96:ab:fa:a9:ca:5b:bb:e1:0b:b0:1e:0e:df:68:c4:fa:
         e8:9d:02:cd:a9:b4:5a:7c:6b:c0:1e:30:3f:d5:a8:d3:3f:73:
         07:cd:72:c0:97:6b:79:8c:bd:c5:0b:57:7e:1e:e6:a2:53:2b:
         b7:21:61:0b:07:9d:b3:55:33:cc:1e:18:06:f7:84:ed:2f:3f:
         4b:0d:e0:b2:8a:10:a9:83:ea:ae:e9:fb:84:b5:1d:fe:90:c8:
         00:15:e5:d0:5d:1c:c4:0b:6e:8b:af:63:a5:25:36:d8:9e:8e:
         17:71:e1:5a:5b:05:18:81:fd:73:d3:c2:bf:82:0c:ff:c6:c1:
         4f:b9:11:f2:01:95:6b:a4:7f:b3:57:ef:c0:1e:f6:94:55:61:
         32:13:20:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----