Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a363030303a3a2f33362d3336203d3e20323639393138.roa
File:                     323830333a646438303a363030303a3a2f33362d3336203d3e20323639393138.roa (raw, json)
Hash identifier:          BPb59/TsP4OdC4VDnLw+l2Zcqx6Xc4isyMlCjlnjrUg=
Subject key identifier:   D1:BD:61:CA:03:88:1C:AB:0C:6F:CB:3B:A6:1A:57:90:8B:FF:06:FD
Certificate issuer:       /CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
Certificate serial:       72E448D73B651BC2933DE2E4CF074DC02ADC9991
Authority key identifier: 00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a363030303a3a2f33362d3336203d3e20323639393138.roa
Signing time:             Tue 17 Sep 2024 15:05:06 +0000
ROA not before:           Tue 17 Sep 2024 15:00:06 +0000
ROA not after:            Tue 16 Sep 2025 15:05:06 +0000
asID:                     269918
IP address blocks:        2803:dd80:6000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 04 Oct 2024 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e4:48:d7:3b:65:1b:c2:93:3d:e2:e4:cf:07:4d:c0:2a:dc:99:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
        Validity
            Not Before: Sep 17 15:00:06 2024 GMT
            Not After : Sep 16 15:05:06 2025 GMT
        Subject: CN=D1BD61CA03881CAB0C6FCB3BA61A57908BFF06FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a5:0d:4c:d4:f1:b7:11:d2:b6:73:15:85:b0:
                    12:ee:42:91:c0:13:0c:50:13:e0:c8:0c:9b:84:5a:
                    66:93:be:f3:67:b9:f3:5e:fc:32:c2:51:b2:c4:e0:
                    cc:33:cb:e4:fd:f7:1e:54:5b:8e:12:0e:56:e9:e6:
                    7f:9a:ef:c2:75:8b:9d:97:72:81:d8:0d:f6:ca:27:
                    58:88:e2:54:31:0d:b5:ae:6a:95:c7:ed:cd:cb:8f:
                    3d:a2:09:b5:a2:88:53:22:8a:28:9e:98:b0:40:72:
                    03:ea:ad:3d:9f:3b:19:8c:fa:a4:98:36:bf:b8:a7:
                    b7:47:01:f9:98:00:9e:47:2f:57:76:39:a1:b3:9e:
                    99:7b:ff:a6:cb:1d:e2:62:7b:a0:fb:b5:80:6a:6e:
                    f4:e4:07:ec:cb:a9:a3:66:b7:41:e5:25:72:f1:a5:
                    c1:f9:9d:c4:fb:62:ab:7c:42:20:f5:b8:86:cf:1e:
                    8c:d9:69:91:6a:99:0a:67:a9:f0:97:01:da:f2:99:
                    66:2c:d9:48:78:0e:0d:7f:1f:37:63:27:ef:af:13:
                    fa:54:05:c8:64:37:47:6f:7c:b3:80:53:78:b2:0d:
                    cd:be:d1:80:00:12:33:12:00:61:c4:e1:68:aa:a7:
                    a8:52:2e:3a:f0:d2:0d:7c:31:cd:29:d5:ee:45:62:
                    2c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BD:61:CA:03:88:1C:AB:0C:6F:CB:3B:A6:1A:57:90:8B:FF:06:FD
            X509v3 Authority Key Identifier:
                keyid:00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a363030303a3a2f33362d3336203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         46:57:43:ce:1b:0a:ed:39:44:6f:96:61:ae:1e:48:17:cc:05:
         da:14:4b:ba:d5:5e:e3:06:20:3b:88:35:81:fb:a1:33:71:a6:
         ec:d0:60:f1:b0:61:dd:a7:01:2b:ae:4a:64:40:d8:0f:2d:e1:
         38:3d:36:0a:a2:b9:9a:de:07:7e:8b:51:8f:76:ee:a3:a1:02:
         1c:06:ee:4a:d7:3d:67:85:08:94:10:11:00:96:cb:36:73:59:
         9f:c0:ab:d2:9e:8b:be:3f:c9:6e:e6:2a:97:ac:47:51:f2:8c:
         c0:00:96:6a:ad:99:17:7b:a4:a6:42:77:09:31:77:01:16:6b:
         e3:a4:73:15:12:ae:e9:5d:ca:81:95:9a:fc:45:4e:3a:35:7d:
         e0:43:5d:7f:90:1a:ba:1d:8e:d6:62:5f:3a:ba:46:be:d9:14:
         59:fa:fe:f1:59:0e:9b:82:6e:4b:c0:bf:c5:72:d3:9f:b0:7b:
         de:71:3a:46:d0:1f:f5:ec:ec:89:b7:67:d7:a3:39:de:1e:81:
         d0:d7:4e:98:96:dd:68:e9:79:6c:0c:03:7d:ea:7b:99:06:6f:
         b0:fd:e6:56:2e:86:2a:0c:fe:aa:1b:fe:f2:48:0b:5a:0a:03:
         1a:33:48:4d:73:48:56:24:dd:c3:e4:24:6d:f6:37:0a:e3:80:
         1a:46:cd:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Oct 4 06:52:39 2024 by rpki-client on console-fra.rpki-client.org