Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a333a3a2f34382d3438203d3e203533333536.roa
File:                     323830363a3431393a333a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier:          wzET66hXXNj8y1+LuNCrvlnOAITn3ph8Jw1Z74qlT+o=
Subject key identifier:   B6:9D:DF:AD:2E:5C:D2:06:82:35:DF:87:EB:3D:05:D6:E6:29:0A:86
Certificate issuer:       /CN=7B20BC301183746CAE82E0BCAE353B6BC9A24568
Certificate serial:       19E7D08F5E68863E95B638F915BE42B5EA22A984
Authority key identifier: 7B:20:BC:30:11:83:74:6C:AE:82:E0:BC:AE:35:3B:6B:C9:A2:45:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a333a3a2f34382d3438203d3e203533333536.roa
Signing time:             Wed 17 Apr 2024 22:10:00 +0000
ROA not before:           Wed 17 Apr 2024 22:05:00 +0000
ROA not after:            Wed 16 Apr 2025 22:10:00 +0000
asID:                     53356
IP address blocks:        2806:419:3::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 12 Jul 2024 06:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e7:d0:8f:5e:68:86:3e:95:b6:38:f9:15:be:42:b5:ea:22:a9:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B20BC301183746CAE82E0BCAE353B6BC9A24568
        Validity
            Not Before: Apr 17 22:05:00 2024 GMT
            Not After : Apr 16 22:10:00 2025 GMT
        Subject: CN=B69DDFAD2E5CD2068235DF87EB3D05D6E6290A86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b2:a9:4a:0e:0b:fd:0e:59:f6:cd:6c:de:5c:
                    d9:ba:8c:1f:09:0d:df:5f:a9:0c:34:90:2c:a3:64:
                    ea:d8:45:70:39:12:1e:1d:1c:80:f8:f4:6b:24:17:
                    0e:c3:3c:e4:b2:73:7e:92:36:29:6f:95:54:75:e1:
                    48:4a:f0:26:8c:2e:26:de:b0:5b:af:1a:b8:42:dc:
                    f8:e9:f9:35:bc:7c:8e:41:9f:d7:aa:45:e2:f2:47:
                    3a:73:0d:f9:54:61:64:31:30:fe:86:49:3c:88:a7:
                    2a:6c:0f:7f:c4:bb:f2:fb:bc:0b:ae:42:fa:af:e3:
                    0e:e7:60:36:42:62:3c:25:0c:6d:7a:c5:9a:0e:38:
                    de:35:67:72:0d:33:0b:50:50:13:b2:79:ee:12:05:
                    45:4c:91:eb:e3:c2:23:69:12:d8:9e:85:90:9b:9d:
                    58:a1:06:9f:1b:30:b9:a3:b2:7e:36:4a:f7:59:12:
                    d0:10:41:e3:18:79:74:33:36:b2:ed:53:41:fc:73:
                    aa:4e:1a:be:27:12:73:66:cd:cd:cd:4a:c5:08:c7:
                    44:6e:50:fd:d8:de:6e:fa:dd:d0:2c:99:f1:ca:2c:
                    15:8d:72:f8:27:5b:ca:e3:dc:e4:7f:0c:19:a4:1c:
                    34:ae:9e:ce:b0:83:07:14:7c:f3:cf:23:31:af:af:
                    80:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9D:DF:AD:2E:5C:D2:06:82:35:DF:87:EB:3D:05:D6:E6:29:0A:86
            X509v3 Authority Key Identifier:
                keyid:7B:20:BC:30:11:83:74:6C:AE:82:E0:BC:AE:35:3B:6B:C9:A2:45:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a333a3a2f34382d3438203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:419:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         d3:c7:40:62:f3:7d:5a:47:de:1b:a9:15:d4:f3:6f:47:b1:80:
         a2:b7:f7:de:d4:26:5d:6a:55:6f:8a:b4:6f:c0:78:62:25:f1:
         63:cf:ac:2b:24:78:df:38:7f:47:fc:9a:49:97:53:f2:0f:f4:
         4b:01:5c:ee:36:c1:b4:85:ca:84:96:56:c3:a3:e8:90:9d:27:
         bf:42:5b:fb:82:57:3f:82:46:00:eb:e3:6b:98:24:ee:c8:3b:
         14:1d:2f:b2:79:5e:97:22:e3:f3:b6:b0:da:8a:b8:c1:c9:9b:
         92:a3:44:7e:fc:06:fd:61:57:77:b3:ec:d8:fe:89:d6:04:78:
         2f:40:2b:52:9c:0d:a4:4a:b9:0e:67:9b:ab:94:90:04:3d:b5:
         7a:96:f8:30:68:ff:b0:e7:2b:e0:f1:21:47:70:e5:0b:38:b1:
         05:9f:20:62:5a:d5:0f:ec:e3:85:3c:3e:d9:dd:f3:8e:2a:c1:
         60:0d:0f:19:6f:fc:32:47:95:e9:01:fb:37:04:5e:13:c4:44:
         2a:ed:5b:89:f7:c0:26:b5:bb:a1:4e:88:63:e6:95:8b:d3:f2:
         e8:f5:35:42:26:50:9b:ad:0d:53:bc:47:9e:14:7c:a9:14:74:
         da:8e:be:1a:f2:71:d0:f3:30:50:10:44:c1:1f:d0:d8:b2:32:
         f5:cf:be:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----