Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a613030303a3a2f33362d3336203d3e20323639393138.roa
File:                     323830333a646438303a613030303a3a2f33362d3336203d3e20323639393138.roa (raw, json)
Hash identifier:          6hMzuapVqBzJTDAOjIrJuSlLcC6KPOvRBm8ilgnBjd8=
Subject key identifier:   AE:0D:04:90:36:13:03:07:65:FB:55:18:89:81:48:4E:DB:23:20:32
Certificate issuer:       /CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
Certificate serial:       599BCF0F0FF7DED523899081C0B581E7CB8B43EF
Authority key identifier: 00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a613030303a3a2f33362d3336203d3e20323639393138.roa
Signing time:             Tue 17 Sep 2024 15:05:02 +0000
ROA not before:           Tue 17 Sep 2024 15:00:02 +0000
ROA not after:            Tue 16 Sep 2025 15:05:02 +0000
asID:                     269918
IP address blocks:        2803:dd80:a000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 04 Oct 2024 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9b:cf:0f:0f:f7:de:d5:23:89:90:81:c0:b5:81:e7:cb:8b:43:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
        Validity
            Not Before: Sep 17 15:00:02 2024 GMT
            Not After : Sep 16 15:05:02 2025 GMT
        Subject: CN=AE0D04903613030765FB55188981484EDB232032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ce:16:e9:21:65:09:cf:89:6e:d2:2e:4c:e9:
                    1a:1b:e5:09:28:e7:f4:a7:f0:0c:ac:bb:c0:bc:4b:
                    22:26:13:3f:fc:ca:a7:51:a4:aa:ab:a2:c5:37:8d:
                    4f:0f:fc:7a:f6:d4:e7:f5:56:21:61:30:b5:cb:05:
                    c6:96:df:da:0b:8e:ce:9c:46:c5:5d:e3:80:73:85:
                    eb:94:6c:bb:ee:d8:ba:e1:c6:4a:cf:a9:87:27:eb:
                    37:6a:6d:0c:fb:1f:6c:d0:24:14:24:5a:27:fe:63:
                    4a:9d:19:3f:49:66:5b:06:10:76:c7:fa:4d:e3:94:
                    2c:9f:83:e0:67:59:cf:d5:b9:9a:45:75:ba:30:96:
                    62:22:72:d1:85:ff:4f:20:d9:86:51:6e:bf:e4:dd:
                    c7:f4:d4:98:6c:07:73:67:b4:5d:e2:fa:b2:ec:cd:
                    20:4a:1c:f3:71:7e:86:45:6b:c9:d4:d1:98:3e:0c:
                    98:9b:bd:32:d5:e0:aa:a2:58:61:3b:83:f3:ad:8e:
                    f6:24:f2:a6:cb:0a:ef:65:a7:62:d8:61:52:ff:e2:
                    78:fe:14:35:a9:33:68:66:67:78:89:09:37:12:f5:
                    92:59:4f:97:6a:f8:7b:b0:0d:3f:79:22:55:40:88:
                    c2:52:a4:74:14:a0:ef:88:7e:96:b6:57:e4:53:f2:
                    c5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0D:04:90:36:13:03:07:65:FB:55:18:89:81:48:4E:DB:23:20:32
            X509v3 Authority Key Identifier:
                keyid:00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a613030303a3a2f33362d3336203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         21:95:6d:3f:fa:72:86:34:67:68:6a:af:7f:5a:6a:c9:86:84:
         68:b7:6d:02:6b:56:0e:44:b0:74:24:03:33:12:67:d4:a1:b4:
         8d:14:a3:a6:80:02:7f:6f:13:15:b0:1a:9d:81:f8:1a:e9:4b:
         32:e3:81:17:70:8d:fb:d8:40:af:4e:8a:84:48:5f:67:90:ea:
         a7:a3:c5:20:45:2c:4c:d5:00:d1:64:bd:7f:55:d4:45:8a:c5:
         e9:f1:1d:17:75:88:ea:3f:85:17:aa:ae:d1:67:2c:14:24:ab:
         dd:a4:bd:6b:58:a4:69:10:73:16:b1:ba:90:bc:28:b1:98:e3:
         bb:78:b8:2c:d2:65:4c:19:74:8d:b2:18:31:5a:9b:47:04:cc:
         04:b7:15:17:13:80:fd:f2:33:75:44:6b:6d:07:74:c0:f1:8e:
         07:1d:4a:5f:c6:4b:52:b7:56:c8:70:d6:3c:f6:7c:42:2d:6f:
         ed:d9:72:b0:3c:90:36:0f:9e:95:b9:d9:db:03:07:fb:6b:fe:
         f9:00:05:87:e9:2e:64:a5:07:c3:0d:cf:57:3c:e8:20:ae:89:
         67:02:51:3d:71:d6:73:35:d0:4b:2f:30:61:0d:c4:3a:d6:e2:
         b0:da:88:96:58:ad:14:b6:4d:c3:96:50:71:0f:bc:d0:b3:e1:
         33:f5:09:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Oct 4 08:05:26 2024 by rpki-client on console-ams.rpki-client.org