Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/323830333a643534303a3a2f33322d3332203d3e20323634363238.roa
File:                     323830333a643534303a3a2f33322d3332203d3e20323634363238.roa (raw, json)
Hash identifier:          0+8j7xH/3JLjV1W5UmuLiWba6uj+//OHV51YptL73lM=
Subject key identifier:   4E:B6:F5:B2:B8:4A:16:5D:86:A4:9A:88:1F:DE:97:22:C5:95:B8:19
Certificate issuer:       /CN=E45FE5E7213B150375DA656763256CB72EEEE655
Certificate serial:       0BFEEA73B629F1EF698C98571211131E83BDB7E0
Authority key identifier: E4:5F:E5:E7:21:3B:15:03:75:DA:65:67:63:25:6C:B7:2E:EE:E6:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45FE5E7213B150375DA656763256CB72EEEE655.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/323830333a643534303a3a2f33322d3332203d3e20323634363238.roa
Signing time:             Fri 31 May 2024 18:45:00 +0000
ROA not before:           Fri 31 May 2024 18:40:00 +0000
ROA not after:            Fri 30 May 2025 18:45:00 +0000
asID:                     264628
IP address blocks:        2803:d540::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 31 May 2024 19:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fe:ea:73:b6:29:f1:ef:69:8c:98:57:12:11:13:1e:83:bd:b7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E45FE5E7213B150375DA656763256CB72EEEE655
        Validity
            Not Before: May 31 18:40:00 2024 GMT
            Not After : May 30 18:45:00 2025 GMT
        Subject: CN=4EB6F5B2B84A165D86A49A881FDE9722C595B819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:76:d1:4e:9b:80:3d:79:82:46:bb:a8:bf:23:
                    2c:10:1d:25:50:79:9e:84:3c:81:b9:ec:dc:2a:57:
                    3a:db:23:f4:a2:cb:b9:88:3b:40:1b:7d:c9:b4:50:
                    9a:c3:9d:68:f6:07:ca:19:6c:8a:fc:f1:91:30:27:
                    f8:10:7c:2a:7b:8d:d3:e6:20:58:11:90:c6:cf:7f:
                    40:44:af:7d:78:0f:59:81:cb:80:d4:34:73:93:a9:
                    5c:6f:7b:f0:ce:7b:74:a9:d0:2f:ee:9f:1e:82:88:
                    2b:26:11:3c:19:f4:71:4d:f1:b7:e1:c0:4e:c0:d9:
                    f5:73:9d:74:76:cc:18:3d:a2:ea:5f:66:c8:7f:b4:
                    ae:0b:2f:83:67:75:39:88:57:34:ff:b5:c7:92:24:
                    1f:5e:9e:9c:22:78:7a:e6:60:4a:a2:4a:4c:85:a6:
                    eb:30:1a:e8:dc:1a:42:60:03:1b:11:b5:4b:c3:a7:
                    b9:02:83:ff:94:9d:38:9f:54:87:c5:b3:25:09:e5:
                    6b:ae:60:4e:fa:f6:5a:f4:ac:ba:c0:15:c2:2d:59:
                    67:14:d0:42:11:92:2d:2f:5c:ad:63:bb:4c:71:e6:
                    f1:90:63:ff:1a:84:64:a8:35:02:18:a2:aa:1f:3a:
                    b6:9d:ee:a3:6a:1d:78:67:06:2e:bc:5d:df:9e:5d:
                    74:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B6:F5:B2:B8:4A:16:5D:86:A4:9A:88:1F:DE:97:22:C5:95:B8:19
            X509v3 Authority Key Identifier:
                keyid:E4:5F:E5:E7:21:3B:15:03:75:DA:65:67:63:25:6C:B7:2E:EE:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/E45FE5E7213B150375DA656763256CB72EEEE655.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45FE5E7213B150375DA656763256CB72EEEE655.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/323830333a643534303a3a2f33322d3332203d3e20323634363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d540::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:ca:cb:6e:49:82:e2:5b:f5:fa:ae:d9:df:85:25:72:ee:25:
         b3:bb:87:39:48:3f:bc:9e:78:31:a4:6f:61:bc:fc:54:5b:38:
         e4:93:4f:37:a5:44:6c:6a:ef:f1:28:95:5e:64:82:ec:10:21:
         f9:2b:94:19:ea:0e:59:7d:81:8b:cc:78:2e:76:b7:5e:e9:ee:
         03:d7:95:5d:f4:6d:52:5c:ee:69:bb:7e:f2:ea:3d:45:a4:03:
         1b:87:4a:83:30:e0:7e:d3:81:c3:3c:9d:53:5e:a0:7b:1f:e5:
         b4:ff:03:ff:c2:f8:b0:28:46:ad:40:0a:e5:1a:c9:38:e3:fe:
         0c:e5:fe:4d:36:a5:a2:4f:a4:22:82:cf:d1:2a:f0:04:5d:4b:
         af:df:80:bd:bd:8f:d6:35:a5:e4:bf:a0:cb:01:fd:0a:d7:e1:
         d7:41:df:cc:e5:1f:00:a3:04:9f:2e:55:98:7c:c2:14:fd:c6:
         5d:d9:92:79:74:45:6d:66:93:be:36:cb:84:17:89:31:9a:7d:
         4b:7d:9f:a3:15:3e:11:7f:10:64:68:63:09:5a:20:fc:ea:20:
         a8:a8:79:bd:dd:30:ce:85:e2:ca:c4:73:79:5e:af:e7:ba:01:
         d1:34:12:7d:60:da:91:85:37:c8:a5:67:71:94:72:b6:91:b6:
         86:4b:bd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----