Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a643030303a3a2f33362d3336203d3e20323639393138.roa
File:                     323830333a646438303a643030303a3a2f33362d3336203d3e20323639393138.roa (raw, json)
Hash identifier:          tq/DdulskZd7cvmqAnlfn1en4pLBjC54YWHqJXzqgMU=
Subject key identifier:   AE:6E:9F:8A:27:4D:7E:C9:02:9B:4B:2E:CF:05:10:38:28:81:98:F9
Certificate issuer:       /CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
Certificate serial:       2C24660BBC4DED4CC43F769C58E2ED7AF372EA8C
Authority key identifier: 00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a643030303a3a2f33362d3336203d3e20323639393138.roa
Signing time:             Tue 17 Sep 2024 15:05:03 +0000
ROA not before:           Tue 17 Sep 2024 15:00:03 +0000
ROA not after:            Tue 16 Sep 2025 15:05:03 +0000
asID:                     269918
IP address blocks:        2803:dd80:d000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Fri 04 Oct 2024 02:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:24:66:0b:bc:4d:ed:4c:c4:3f:76:9c:58:e2:ed:7a:f3:72:ea:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
        Validity
            Not Before: Sep 17 15:00:03 2024 GMT
            Not After : Sep 16 15:05:03 2025 GMT
        Subject: CN=AE6E9F8A274D7EC9029B4B2ECF051038288198F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:46:4c:17:48:fe:52:79:67:4f:b1:b6:71:
                    6d:4f:77:3a:d5:82:09:5b:f1:7b:c6:dd:02:b9:5f:
                    10:07:83:f4:56:d8:c9:c1:51:e3:2c:d3:b3:cc:a8:
                    94:9b:1e:64:be:a9:e4:06:cf:18:ba:97:97:1f:b3:
                    7d:02:eb:07:a3:8d:ba:43:a1:b0:71:4c:60:de:22:
                    3f:84:64:6c:e8:04:81:9e:f1:8d:ec:61:6b:a8:c7:
                    5d:ce:b1:52:ce:52:12:0a:e3:9e:ab:8b:7a:f8:71:
                    4f:39:c8:90:b6:d6:7a:30:6d:6d:ae:72:23:7c:56:
                    1c:45:70:6c:7b:ec:cc:27:7a:a3:65:13:0f:69:e8:
                    18:27:6d:f7:55:d3:a7:73:70:9c:09:6f:ab:23:22:
                    a5:6c:64:9a:1a:00:b0:0b:57:b0:34:d1:0a:55:77:
                    97:8a:6d:53:25:87:fe:e8:c9:f6:9b:18:8b:97:58:
                    d9:ff:3c:bf:71:51:cf:74:2b:62:cf:4b:72:89:dd:
                    de:87:6e:f2:e9:e7:8a:94:72:87:26:32:81:69:56:
                    ba:69:a7:3c:6a:8d:8f:4b:9d:78:86:42:21:0f:d0:
                    94:d8:b4:32:c5:42:f0:ff:c7:42:b8:cd:d1:ff:dd:
                    1f:06:4f:9e:71:2a:fd:36:ae:6f:3c:c3:a7:91:c8:
                    66:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6E:9F:8A:27:4D:7E:C9:02:9B:4B:2E:CF:05:10:38:28:81:98:F9
            X509v3 Authority Key Identifier:
                keyid:00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a643030303a3a2f33362d3336203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4e:58:5b:3f:d0:04:d2:f7:d4:01:a5:d5:9a:68:6e:ba:db:34:
         2d:97:dc:60:e1:6d:7d:c4:30:96:c0:1b:6f:78:7c:b0:0a:53:
         1d:95:77:f1:55:42:5c:3c:77:11:f1:3c:ac:0c:43:17:87:30:
         34:2c:c0:05:37:09:0c:7d:3c:76:ce:c4:e6:0a:a5:31:fc:8e:
         1c:6d:81:92:e6:c8:3e:1d:4c:41:23:53:50:9b:09:ef:05:0f:
         87:a8:f7:19:ee:67:a5:25:df:7a:51:6b:3a:e7:62:0e:b9:79:
         d6:a9:20:fc:e3:5a:30:1d:91:9d:72:7b:0b:08:16:59:18:2c:
         85:9b:c4:04:01:dc:a7:ab:dd:1a:3b:ed:89:6b:28:bf:92:71:
         29:bb:0b:8c:c3:ae:e4:d0:4c:30:f2:63:74:1c:5c:fa:3a:c1:
         52:f4:f9:d7:2a:96:0c:a5:81:7e:ed:0d:2f:6c:eb:b3:43:70:
         8d:27:53:80:63:45:bd:8e:f7:24:a3:de:e0:b0:2d:04:07:a9:
         a3:ad:c9:23:e4:05:b1:2b:79:6d:07:58:13:bc:2a:54:e4:d3:
         93:ce:f0:38:1a:db:cc:af:27:66:99:3d:22:da:4b:cd:85:a7:
         3a:d6:cb:bb:62:9d:66:54:e5:37:13:98:1b:09:0c:95:dc:23:
         57:1f:f7:85
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIULCRmC7xN7UzEP3acWOLtevNy6owwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA5RjVEN0YxMzg1QThGQUM0OTRDQTdCMzQ4QkU0RjBD
NjgwRTY2RjAeFw0yNDA5MTcxNTAwMDNaFw0yNTA5MTYxNTA1MDNaMDMxMTAvBgNV
BAMTKEFFNkU5RjhBMjc0RDdFQzkwMjlCNEIyRUNGMDUxMDM4Mjg4MTk4RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBH0ZMF0j+UnlnT7G2cW1PdzrV
gglb8XvG3QK5XxAHg/RW2MnBUeMs07PMqJSbHmS+qeQGzxi6l5cfs30C6wejjbpD
obBxTGDeIj+EZGzoBIGe8Y3sYWuox13OsVLOUhIK456ri3r4cU85yJC21nowbW2u
ciN8VhxFcGx77MwneqNlEw9p6BgnbfdV06dzcJwJb6sjIqVsZJoaALALV7A00QpV
d5eKbVMlh/7oyfabGIuXWNn/PL9xUc90K2LPS3KJ3d6HbvLp54qUcocmMoFpVrpp
pzxqjY9LnXiGQiEP0JTYtDLFQvD/x0K4zdH/3R8GT55xKv02rm88w6eRyGbBAgMB
AAGjggLUMIIC0DAdBgNVHQ4EFgQUrm6fiidNfskCm0suzwUQOCiBmPkwHwYDVR0j
BBgwFoAUAJ9dfxOFqPrElMp7NIvk8MaA5m8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMzI4QjE4QzU2NzZBOTM3QUNENDZEMTk1NjUwNkMxQTlE
RDc4MUYyNzBEMjk5MkM1MjlCMTc1ODVDMDY1QjU5LzAvMDA5RjVEN0YxMzg1QThG
QUM0OTRDQTdCMzQ4QkU0RjBDNjgwRTY2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMDlGNUQ3RjEzODVBOEZBQzQ5
NENBN0IzNDhCRTRGMEM2ODBFNjZGLmNlcjCB0QYIKwYBBQUHAQsEgcQwgcEwgb4G
CCsGAQUFBzALhoGxcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDMyOEIxOEM1Njc2QTkzN0FDRDQ2RDE5NTY1MDZDMUE5REQ3ODFGMjcw
RDI5OTJDNTI5QjE3NTg1QzA2NUI1OS8wLzMyMzgzMDMzM2E2NDY0MzgzMDNhNjQz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzOTMxMzgucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQoA92A0DANBgkqhkiG9w0BAQsFAAOCAQEATlhbP9AE0vfUAaXVmmhuuts0
LZfcYOFtfcQwlsAbb3h8sApTHZV38VVCXDx3EfE8rAxDF4cwNCzABTcJDH08ds7E
5gqlMfyOHG2BkubIPh1MQSNTUJsJ7wUPh6j3Ge5npSXfelFrOudiDrl51qkg/ONa
MB2RnXJ7CwgWWRgshZvEBAHcp6vdGjvtiWsov5JxKbsLjMOu5NBMMPJjdBxc+jrB
UvT51yqWDKWBfu0NL2zrs0NwjSdTgGNFvY73JKPe4LAtBAepo63JI+QFsSt5bQdY
E7wqVOTTk87wOBrbzK8nZpk9ItpLzYWnOtbLu2KdZlTlNxOYGwkMldwjVx/3hQ==
-----END CERTIFICATE-----