Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/323830333a323835303a3a2f33322d3332203d3e20323733313131.roa
File:                     323830333a323835303a3a2f33322d3332203d3e20323733313131.roa (raw, json)
Hash identifier:          L1Q7o9jk6Htdqkv13hZTWVMDFyQRxGMQg/HR4MbuGAY=
Subject key identifier:   44:6B:FC:89:DB:B6:21:29:89:44:FC:FB:64:4E:75:20:C5:01:56:53
Certificate issuer:       /CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
Certificate serial:       71491DAE68CF5D12A6597AD31CB41ADC98849EB9
Authority key identifier: D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/323830333a323835303a3a2f33322d3332203d3e20323733313131.roa
Signing time:             Tue 05 Mar 2024 18:11:22 +0000
ROA not before:           Tue 05 Mar 2024 18:06:22 +0000
ROA not after:            Tue 04 Mar 2025 18:11:22 +0000
asID:                     273111
IP address blocks:        2803:2850::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 07 May 2024 19:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:49:1d:ae:68:cf:5d:12:a6:59:7a:d3:1c:b4:1a:dc:98:84:9e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
        Validity
            Not Before: Mar  5 18:06:22 2024 GMT
            Not After : Mar  4 18:11:22 2025 GMT
        Subject: CN=446BFC89DBB621298944FCFB644E7520C5015653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:ba:2b:66:68:a4:bc:86:6a:11:bc:f7:72:
                    7e:fb:11:1b:0e:cc:c3:4e:7e:b3:69:42:a4:21:eb:
                    06:18:d7:f0:8d:a1:4a:23:ba:05:77:8e:f5:42:c8:
                    19:45:4c:c0:c8:3c:05:12:49:94:3e:1c:55:49:ee:
                    6b:c1:07:c7:62:dd:34:98:1f:2e:15:25:84:e4:a5:
                    ba:23:a5:81:59:93:1a:0c:12:15:d6:08:66:ad:8b:
                    8c:f3:31:cc:24:f3:e1:f9:5a:3b:fc:c7:df:b3:a6:
                    25:ec:02:86:cf:46:8a:0b:73:b7:3a:18:24:c0:24:
                    ad:8d:36:ee:9e:32:b3:6d:28:03:f1:bc:1a:69:d7:
                    29:2b:52:f1:7c:77:99:0b:7b:01:cb:4d:92:0e:5c:
                    54:a2:c6:97:7f:f1:12:6b:f1:60:93:b8:e8:58:82:
                    33:20:7c:f4:70:92:5c:09:54:75:94:65:3d:04:66:
                    f1:5c:ab:82:03:9e:f3:47:1e:f2:95:22:ab:96:f4:
                    19:ad:aa:d4:0f:29:ad:73:5a:9c:fe:35:ce:5c:dc:
                    16:34:67:1a:62:40:13:a9:ef:de:2f:a8:56:18:95:
                    5c:75:a5:33:61:63:c2:e2:d0:90:39:bc:36:96:01:
                    05:26:5d:bb:1e:05:f5:f2:7c:4a:77:60:51:31:43:
                    b2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6B:FC:89:DB:B6:21:29:89:44:FC:FB:64:4E:75:20:C5:01:56:53
            X509v3 Authority Key Identifier:
                keyid:D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/323830333a323835303a3a2f33322d3332203d3e20323733313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2850::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:51:f4:ba:2b:65:20:e3:0b:7c:aa:6e:30:d5:28:b0:8a:fd:
         16:fa:3e:20:20:a6:64:87:68:73:ce:83:6e:27:b1:bd:78:d4:
         26:2e:6c:c6:26:de:1f:dc:83:99:cd:63:03:9d:fc:7e:93:e1:
         c6:7b:47:f2:c8:5a:58:09:85:fc:d2:c9:d6:62:f1:57:3b:22:
         d6:8c:c9:a5:46:01:00:d5:b2:53:6f:fb:a1:3c:d8:6a:41:e8:
         cc:68:aa:45:ff:57:32:5b:b1:2c:f9:cd:f0:48:2a:83:b6:0d:
         f8:db:53:bb:db:81:e6:62:79:9e:e8:d0:d8:ad:48:62:fc:29:
         f1:56:83:47:67:9d:37:7b:ad:db:38:d7:e2:68:cf:10:27:77:
         9b:8f:17:37:58:2c:67:08:2d:ed:1b:f2:99:e3:58:c5:98:0d:
         19:3e:4a:dc:65:77:d5:21:84:bd:cf:c6:0f:93:3b:00:8c:5b:
         0c:d6:b7:91:e4:cb:91:f7:aa:0d:aa:59:c8:1c:3e:5f:18:8c:
         36:48:0c:f9:ab:4c:18:dd:33:88:36:00:88:69:bf:42:6b:61:
         34:65:f5:27:e1:a1:0a:3c:30:1d:e0:2e:37:94:71:0e:31:ac:
         45:98:bf:75:c4:b7:22:45:f0:5c:55:df:ee:04:2e:8f:a5:67:
         c7:12:e4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----