Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a663030303a3a2f33362d3438203d3e20323639393138.roa
File:                     323830333a646438303a663030303a3a2f33362d3438203d3e20323639393138.roa (raw, json)
Hash identifier:          0bhoqd0NCBe2EDsC6pR8C9EhO4xTECHj092VJBfkyCA=
Subject key identifier:   74:F3:59:88:15:2F:39:00:91:B4:70:0F:BA:AD:6D:B8:7B:A3:86:FB
Certificate issuer:       /CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
Certificate serial:       13A69C32C27774B6ADA2207EB50FC008CBDE9A7B
Authority key identifier: 00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a663030303a3a2f33362d3438203d3e20323639393138.roa
Signing time:             Fri 04 Oct 2024 02:50:00 +0000
ROA not before:           Fri 04 Oct 2024 02:45:00 +0000
ROA not after:            Fri 03 Oct 2025 02:50:00 +0000
asID:                     269918
IP address blocks:        2803:dd80:f000::/36 maxlen: 48

Validation:               Failed, certificate revoked on Fri 04 Oct 2024 21:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a6:9c:32:c2:77:74:b6:ad:a2:20:7e:b5:0f:c0:08:cb:de:9a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
        Validity
            Not Before: Oct  4 02:45:00 2024 GMT
            Not After : Oct  3 02:50:00 2025 GMT
        Subject: CN=74F35988152F390091B4700FBAAD6DB87BA386FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3b:b8:59:b6:b8:17:b1:db:5d:b9:94:11:c7:
                    1c:58:aa:89:f4:69:4e:37:ec:2a:d9:98:57:82:ec:
                    c1:de:0a:1c:2b:ce:65:6d:98:77:b3:67:d4:15:7b:
                    a6:22:34:2b:76:ec:81:3f:1b:7e:da:0f:dc:e4:c2:
                    d4:0c:59:28:ba:03:ef:7b:30:4c:ca:fe:db:54:6b:
                    68:89:a4:49:f6:b7:ff:30:f2:46:0c:60:08:dc:2e:
                    bc:95:83:24:a4:80:e2:94:99:2c:fe:d6:e2:1e:db:
                    26:0d:a2:f4:57:1c:08:84:ee:29:3c:4c:f7:21:0c:
                    dc:47:8f:5f:1e:2b:a0:da:c9:bb:b7:67:b9:7a:cc:
                    f0:17:d6:21:1a:d2:6f:03:47:a3:2d:8d:5e:d1:0a:
                    ae:7e:f1:dd:a8:8b:0f:22:27:be:0c:b2:87:15:cc:
                    8f:6f:7c:23:eb:87:b2:5d:8b:a6:2c:bd:bc:60:1d:
                    ba:bf:0f:9e:90:27:8c:82:ee:44:f7:38:65:a7:13:
                    6e:3a:bf:72:0f:f8:bd:b3:dc:11:75:18:43:b1:f7:
                    1e:ea:6a:2d:ad:91:22:de:db:98:a8:55:ec:b6:d1:
                    be:e9:65:b9:72:cd:99:17:2c:d5:b2:98:35:2e:ff:
                    d0:ce:5b:bf:2e:e2:c3:cd:a8:c6:1a:bc:9c:89:57:
                    8e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F3:59:88:15:2F:39:00:91:B4:70:0F:BA:AD:6D:B8:7B:A3:86:FB
            X509v3 Authority Key Identifier:
                keyid:00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a663030303a3a2f33362d3438203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:61:60:03:87:2f:33:13:a7:8c:50:ba:ee:a3:e6:6d:fd:67:
         72:3c:67:55:64:99:99:ce:01:63:34:30:02:70:a7:ff:29:7c:
         f8:cf:06:84:4e:4a:2a:23:44:76:01:e5:b0:43:66:37:87:5f:
         00:12:6d:e7:5c:36:b0:df:c9:82:93:21:61:26:07:59:40:da:
         82:df:1d:4f:33:cb:cc:b0:bc:83:24:26:9d:98:43:04:22:ad:
         c2:03:d0:ae:4d:bb:26:9e:29:03:4a:a1:3b:2e:a4:60:a8:f7:
         02:3f:77:80:67:46:46:0d:6e:5f:42:4a:9e:5b:4a:71:37:aa:
         be:53:45:2e:8c:25:3f:ff:29:74:0c:9c:6f:f6:8c:61:26:10:
         b0:c1:e8:90:40:98:47:41:6e:30:4f:cd:94:2b:f7:3d:90:d3:
         16:8f:e6:70:a4:7d:89:d5:58:f6:c7:68:16:35:18:a5:d8:e3:
         e3:5d:ed:43:b6:83:21:57:42:c4:93:cd:64:b1:ce:32:44:e4:
         0c:5a:24:1d:15:35:c8:82:cf:3f:fc:77:8a:59:33:78:e4:e6:
         e7:57:e8:63:c7:94:13:39:bd:7b:3e:4b:3b:24:ad:f0:e6:8a:
         85:3f:94:80:c2:f1:d4:00:1b:0e:a6:5d:63:75:f8:a2:39:63:
         63:15:4e:46
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Oct 4 22:43:17 2024 by rpki-client on console-fra.rpki-client.org