Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AAC69A41956A439A25582BDD0999F3376F62F5C0C3F0DCE526AB1EEF391C2E4/0/323830333a353935303a3a2f33322d3332203d3e20323733383431.roa
File:                     323830333a353935303a3a2f33322d3332203d3e20323733383431.roa (raw, json)
Hash identifier:          O0tnC0X1qeqfGdLhreHDVdedAaUFsQUF9+6CPpYjvgM=
Subject key identifier:   63:3A:63:EA:EC:2F:A6:98:E7:B0:C0:E9:50:DB:65:59:51:59:AF:C0
Certificate issuer:       /CN=92524D32A26E7E8BEFE0DAA1838F06F018C6783B
Certificate serial:       0EE3601480916D3292F9A74DE507F495F9F9C349
Authority key identifier: 92:52:4D:32:A2:6E:7E:8B:EF:E0:DA:A1:83:8F:06:F0:18:C6:78:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92524D32A26E7E8BEFE0DAA1838F06F018C6783B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AAC69A41956A439A25582BDD0999F3376F62F5C0C3F0DCE526AB1EEF391C2E4/0/323830333a353935303a3a2f33322d3332203d3e20323733383431.roa
Signing time:             Tue 06 Aug 2024 05:05:00 +0000
ROA not before:           Tue 06 Aug 2024 05:00:00 +0000
ROA not after:            Tue 05 Aug 2025 05:05:00 +0000
asID:                     273841
IP address blocks:        2803:5950::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 06 Aug 2024 07:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e3:60:14:80:91:6d:32:92:f9:a7:4d:e5:07:f4:95:f9:f9:c3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92524D32A26E7E8BEFE0DAA1838F06F018C6783B
        Validity
            Not Before: Aug  6 05:00:00 2024 GMT
            Not After : Aug  5 05:05:00 2025 GMT
        Subject: CN=633A63EAEC2FA698E7B0C0E950DB65595159AFC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:18:6a:3c:68:0e:c7:c5:df:74:e0:d6:f4:b7:
                    15:78:e5:c7:da:8b:f6:7f:1d:9c:b2:62:64:a2:98:
                    95:99:69:63:f2:53:bf:51:95:68:35:f1:b4:f7:74:
                    23:53:96:42:12:23:d3:a9:e4:cb:cc:09:6b:db:86:
                    dc:a9:c6:91:6a:c4:58:4a:59:81:ec:87:1e:e2:01:
                    09:7b:3c:1b:f3:1f:b1:61:50:e1:69:81:bb:e7:47:
                    fd:79:67:c9:4e:10:55:73:80:6d:d2:04:ad:c0:a4:
                    df:83:49:bd:01:df:58:0d:c5:cd:98:fe:49:b9:d7:
                    8c:43:da:4b:7c:a0:db:19:f9:7c:e6:dc:12:17:4c:
                    88:c4:ff:dd:b1:fd:eb:dc:5a:bc:d0:4d:25:d8:d4:
                    65:67:d6:5d:fa:1d:94:d2:b3:2a:14:a4:cc:a8:01:
                    91:5a:19:08:7f:7a:17:b4:95:58:f7:3d:38:40:2a:
                    c0:ab:c7:f8:a2:34:c5:8f:5e:04:36:a6:d4:e9:1a:
                    97:6d:09:3d:2c:e2:1d:a3:82:b8:54:e0:bc:80:11:
                    13:9d:b9:b9:32:5a:67:2a:fb:2c:32:8b:f7:30:1e:
                    ff:ea:ac:a7:4c:8e:ee:a3:7e:55:38:19:6c:08:8a:
                    0c:7a:46:2c:4a:8a:c5:46:38:ed:3f:3f:0c:b4:02:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3A:63:EA:EC:2F:A6:98:E7:B0:C0:E9:50:DB:65:59:51:59:AF:C0
            X509v3 Authority Key Identifier:
                keyid:92:52:4D:32:A2:6E:7E:8B:EF:E0:DA:A1:83:8F:06:F0:18:C6:78:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AAC69A41956A439A25582BDD0999F3376F62F5C0C3F0DCE526AB1EEF391C2E4/0/92524D32A26E7E8BEFE0DAA1838F06F018C6783B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92524D32A26E7E8BEFE0DAA1838F06F018C6783B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AAC69A41956A439A25582BDD0999F3376F62F5C0C3F0DCE526AB1EEF391C2E4/0/323830333a353935303a3a2f33322d3332203d3e20323733383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5950::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:28:64:d4:cd:c3:d9:f2:f5:8f:fc:67:2a:c0:f8:53:4d:88:
         48:b3:63:1f:c5:22:00:c0:23:27:20:b7:ca:07:e5:9d:cb:86:
         4e:ff:1f:70:45:fa:ec:e3:c1:7b:ce:b0:5c:36:8f:22:38:7a:
         4d:18:9d:38:45:4c:9f:21:80:81:f9:89:60:d6:3f:e1:a0:9e:
         92:9c:b0:1f:1e:92:ad:a6:a9:e4:17:d2:f9:6e:90:18:ec:50:
         73:4a:b7:da:98:cb:cd:49:c3:8b:35:08:ff:70:b5:62:66:9f:
         72:12:ae:37:0b:eb:4e:ac:8c:cc:d9:99:1c:1d:98:fd:9e:21:
         21:f0:c8:e0:2b:fa:38:6e:bd:5d:ca:77:db:17:0d:7e:fa:37:
         a5:6e:f6:a0:1a:8b:08:42:db:aa:ad:61:11:3c:8d:44:4e:21:
         df:c9:f6:6d:6a:be:ea:f5:95:8b:28:1b:45:5d:83:af:ef:1f:
         64:4c:80:49:fb:45:c0:d6:16:f8:c8:bb:a7:3c:95:30:56:ba:
         cc:2b:ad:14:da:dd:1c:d1:32:98:25:98:4e:85:a3:f6:04:cb:
         81:03:63:be:8a:08:c5:f6:11:b8:e7:20:1c:b0:24:3c:f3:1a:
         a3:ec:f6:9e:db:e0:3a:b3:00:46:11:ac:53:84:4e:bc:f4:f1:
         1b:e7:21:54
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUDuNgFICRbTKS+adN5Qf0lfn5w0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI1MjREMzJBMjZFN0U4QkVGRTBEQUExODM4RjA2RjAx
OEM2NzgzQjAeFw0yNDA4MDYwNTAwMDBaFw0yNTA4MDUwNTA1MDBaMDMxMTAvBgNV
BAMTKDYzM0E2M0VBRUMyRkE2OThFN0IwQzBFOTUwREI2NTU5NTE1OUFGQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGGo8aA7Hxd904Nb0txV45cfa
i/Z/HZyyYmSimJWZaWPyU79RlWg18bT3dCNTlkISI9Op5MvMCWvbhtypxpFqxFhK
WYHshx7iAQl7PBvzH7FhUOFpgbvnR/15Z8lOEFVzgG3SBK3ApN+DSb0B31gNxc2Y
/km514xD2kt8oNsZ+Xzm3BIXTIjE/92x/evcWrzQTSXY1GVn1l36HZTSsyoUpMyo
AZFaGQh/ehe0lVj3PThAKsCrx/iiNMWPXgQ2ptTpGpdtCT0s4h2jgrhU4LyAEROd
ubkyWmcq+ywyi/cwHv/qrKdMju6jflU4GWwIigx6RixKisVGOO0/Pwy0AgEPAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUYzpj6uwvppjnsMDpUNtlWVFZr8AwHwYDVR0j
BBgwFoAUklJNMqJufovv4Nqhg48G8BjGeDswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQUFDNjlBNDE5NTZBNDM5QTI1NTgyQkREMDk5OUYzMzc2
RjYyRjVDMEMzRjBEQ0U1MjZBQjFFRUYzOTFDMkU0LzAvOTI1MjREMzJBMjZFN0U4
QkVGRTBEQUExODM4RjA2RjAxOEM2NzgzQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MjUyNEQzMkEyNkU3RThCRUZF
MERBQTE4MzhGMDZGMDE4QzY3ODNCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEFBQzY5QTQxOTU2QTQzOUEyNTU4MkJERDA5OTlGMzM3NkY2MkY1QzBD
M0YwRENFNTI2QUIxRUVGMzkxQzJFNC8wLzMyMzgzMDMzM2EzNTM5MzUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMzM4MzQzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDWVAw
DQYJKoZIhvcNAQELBQADggEBAFQoZNTNw9ny9Y/8ZyrA+FNNiEizYx/FIgDAIycg
t8oH5Z3Lhk7/H3BF+uzjwXvOsFw2jyI4ek0YnThFTJ8hgIH5iWDWP+GgnpKcsB8e
kq2mqeQX0vlukBjsUHNKt9qYy81Jw4s1CP9wtWJmn3ISrjcL606sjMzZmRwdmP2e
ISHwyOAr+jhuvV3Kd9sXDX76N6Vu9qAaiwhC26qtYRE8jUROId/J9m1qvur1lYso
G0Vdg6/vH2RMgEn7RcDWFvjIu6c8lTBWuswrrRTa3RzRMpglmE6Fo/YEy4EDY76K
CMX2EbjnIBywJDzzGqPs9p7b4DqzAEYRrFOETrz08RvnIVQ=
-----END CERTIFICATE-----
Generated at Tue Aug 6 09:30:02 2024 by rpki-client on console-ams.rpki-client.org