Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/323830333a626663303a313a3a2f34382d3438203d3e20323635373837.roa
File:                     323830333a626663303a313a3a2f34382d3438203d3e20323635373837.roa (raw, json)
Hash identifier:          q+WzrM7AyXwhB12i9pFGh7SXn5jWuyBWLaS9easexhQ=
Subject key identifier:   CC:FF:22:4F:68:40:82:D1:93:B6:FE:50:FF:70:65:BE:3E:E1:17:2D
Certificate issuer:       /CN=7CE45D98F41C9AB7061F84A19C190414D5CB4FCA
Certificate serial:       41AB526EA7CEE80C94CEA7905274BC40411288B8
Authority key identifier: 7C:E4:5D:98:F4:1C:9A:B7:06:1F:84:A1:9C:19:04:14:D5:CB:4F:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/323830333a626663303a313a3a2f34382d3438203d3e20323635373837.roa
Signing time:             Tue 05 Mar 2024 17:47:14 +0000
ROA not before:           Tue 05 Mar 2024 17:42:14 +0000
ROA not after:            Tue 04 Mar 2025 17:47:14 +0000
asID:                     265787
IP address blocks:        2803:bfc0:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 06 May 2024 15:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ab:52:6e:a7:ce:e8:0c:94:ce:a7:90:52:74:bc:40:41:12:88:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE45D98F41C9AB7061F84A19C190414D5CB4FCA
        Validity
            Not Before: Mar  5 17:42:14 2024 GMT
            Not After : Mar  4 17:47:14 2025 GMT
        Subject: CN=CCFF224F684082D193B6FE50FF7065BE3EE1172D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fa:7d:8b:06:8d:5f:d4:df:a8:be:b0:31:40:
                    e5:69:e3:ce:0d:d5:2e:32:42:cc:63:5b:7d:81:6a:
                    15:b8:32:7e:ac:8e:46:78:a7:74:11:7a:cd:a5:a6:
                    96:f5:8c:d4:b6:38:b7:9c:1d:68:45:7b:06:ac:42:
                    24:57:46:d9:a6:c2:91:1a:ae:f5:61:9b:e1:ec:04:
                    72:64:a3:67:2f:75:b7:ac:17:66:b6:d3:97:c0:73:
                    b1:82:2c:2d:44:5b:1c:a2:4e:34:97:43:d8:84:de:
                    00:2c:a3:fd:8d:ba:df:6f:c8:30:3e:54:2f:af:26:
                    a1:52:08:7f:d3:cc:e7:57:a9:78:47:98:b5:b3:12:
                    1b:2a:af:e2:ec:72:fd:4f:47:21:67:e3:a0:02:df:
                    70:79:d1:ce:c2:85:cb:2e:6e:95:b4:58:19:d9:62:
                    ba:92:86:50:d2:a3:2d:d3:18:89:3a:65:65:df:ea:
                    ba:15:3a:2e:a4:ac:73:24:7b:96:b3:3e:65:f2:63:
                    f0:dd:cc:55:17:66:7f:9b:85:06:bc:87:1e:c0:a2:
                    74:a0:3d:43:f7:c1:85:b9:f5:81:f7:f7:0f:88:2c:
                    a1:1e:85:93:d4:2c:dc:83:50:91:57:54:c4:3b:c0:
                    83:db:ab:8e:3f:20:33:1d:6d:28:92:80:4d:c4:8e:
                    86:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FF:22:4F:68:40:82:D1:93:B6:FE:50:FF:70:65:BE:3E:E1:17:2D
            X509v3 Authority Key Identifier:
                keyid:7C:E4:5D:98:F4:1C:9A:B7:06:1F:84:A1:9C:19:04:14:D5:CB:4F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/323830333a626663303a313a3a2f34382d3438203d3e20323635373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bfc0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:93:e9:bf:38:08:5b:6b:0e:bb:04:a0:da:f9:08:1d:2c:62:
         12:7c:1a:b3:7e:42:3a:8e:17:8f:f9:fb:76:ed:0d:da:05:79:
         1f:39:bd:34:97:c1:62:b6:51:c7:39:03:fd:8e:e5:7d:5a:12:
         20:17:16:c8:28:cc:86:34:40:5b:12:46:c9:3e:0a:11:85:7e:
         07:95:f4:bd:ff:41:69:e4:88:10:a8:ec:24:ac:a5:0c:6f:29:
         96:77:0e:32:f6:f8:ff:6f:36:a4:d7:06:74:e1:0b:5d:0d:96:
         26:52:93:e9:32:de:c2:0d:08:04:a5:57:df:92:e8:f9:44:f1:
         0f:57:2d:40:68:e7:21:b4:a6:d6:50:db:72:02:41:30:4a:fd:
         f4:6f:a4:19:75:44:31:79:ed:e6:92:76:d6:9b:95:a1:ee:3d:
         41:6e:b0:e8:0f:7e:10:9d:2b:17:4d:a5:d3:d0:93:0e:77:5f:
         ec:97:3e:23:d8:45:31:a1:16:88:ae:14:81:9c:e8:6a:88:e5:
         ee:3b:a9:a3:f1:9c:50:89:33:84:88:1b:69:7d:85:da:90:72:
         9e:63:7a:b2:a8:95:5b:4b:0e:a9:d3:9e:9d:13:e4:08:50:93:
         68:4a:d9:75:5e:1e:44:82:a2:eb:40:63:5f:06:ce:6b:b1:63:
         34:52:7e:08
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUQatSbqfO6AyUzqeQUnS8QEESiLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NFNDVEOThGNDFDOUFCNzA2MUY4NEExOUMxOTA0MTRE
NUNCNEZDQTAeFw0yNDAzMDUxNzQyMTRaFw0yNTAzMDQxNzQ3MTRaMDMxMTAvBgNV
BAMTKENDRkYyMjRGNjg0MDgyRDE5M0I2RkU1MEZGNzA2NUJFM0VFMTE3MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF+n2LBo1f1N+ovrAxQOVp484N
1S4yQsxjW32BahW4Mn6sjkZ4p3QRes2lppb1jNS2OLecHWhFewasQiRXRtmmwpEa
rvVhm+HsBHJko2cvdbesF2a205fAc7GCLC1EWxyiTjSXQ9iE3gAso/2Nut9vyDA+
VC+vJqFSCH/TzOdXqXhHmLWzEhsqr+Lscv1PRyFn46AC33B50c7ChcsubpW0WBnZ
YrqShlDSoy3TGIk6ZWXf6roVOi6krHMke5azPmXyY/DdzFUXZn+bhQa8hx7AonSg
PUP3wYW59YH39w+ILKEehZPULNyDUJFXVMQ7wIPbq44/IDMdbSiSgE3EjoZFAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUzP8iT2hAgtGTtv5Q/3Blvj7hFy0wHwYDVR0j
BBgwFoAUfORdmPQcmrcGH4ShnBkEFNXLT8owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QUIwOEVDMkFDNDQ2RTMwNEQ2MjM4MEQ5MUY5RDVCNDE0
QTY0Njg4NEI4RkZGOUExMzAyNzFCQzkyM0QxNTI5LzAvN0NFNDVEOThGNDFDOUFC
NzA2MUY4NEExOUMxOTA0MTRENUNCNEZDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83Q0U0NUQ5OEY0MUM5QUI3MDYx
Rjg0QTE5QzE5MDQxNEQ1Q0I0RkNBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0FCMDhFQzJBQzQ0NkUzMDRENjIzODBEOTFGOUQ1QjQxNEE2NDY4ODRC
OEZGRjlBMTMwMjcxQkM5MjNEMTUyOS8wLzMyMzgzMDMzM2E2MjY2NjMzMDNhMzEz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzUzNzM4Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
A7/AAAEwDQYJKoZIhvcNAQELBQADggEBAFmT6b84CFtrDrsEoNr5CB0sYhJ8GrN+
QjqOF4/5+3btDdoFeR85vTSXwWK2Ucc5A/2O5X1aEiAXFsgozIY0QFsSRsk+ChGF
fgeV9L3/QWnkiBCo7CSspQxvKZZ3DjL2+P9vNqTXBnThC10NliZSk+ky3sINCASl
V9+S6PlE8Q9XLUBo5yG0ptZQ23ICQTBK/fRvpBl1RDF57eaSdtablaHuPUFusOgP
fhCdKxdNpdPQkw53X+yXPiPYRTGhFoiuFIGc6GqI5e47qaPxnFCJM4SIG2l9hdqQ
cp5jerKolVtLDqnTnp0T5AhQk2hK2XVeHkSCoutAY18GzmuxYzRSfgg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:02 2024 by rpki-client on console-ams.rpki-client.org