Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/323830333a373532303a3a2f33332d3438203d3e20323636363934.roa
File:                     323830333a373532303a3a2f33332d3438203d3e20323636363934.roa (raw, json)
Hash identifier:          Yhq1BJUAHtWxeNrYPSTf6uIXjigip32V8x2QDQ2GoyU=
Subject key identifier:   0C:A4:79:DE:F4:87:19:7A:4C:AB:D1:40:73:FA:8C:6E:0E:E6:F4:56
Certificate issuer:       /CN=F16271A6D5A5968361D977B117B0281F2D2B08AE
Certificate serial:       09300A21D70E5CD0504B141CAE93EA7F8577CD8D
Authority key identifier: F1:62:71:A6:D5:A5:96:83:61:D9:77:B1:17:B0:28:1F:2D:2B:08:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/323830333a373532303a3a2f33332d3438203d3e20323636363934.roa
Signing time:             Tue 28 May 2024 17:35:02 +0000
ROA not before:           Tue 28 May 2024 17:30:02 +0000
ROA not after:            Tue 27 May 2025 17:35:02 +0000
asID:                     266694
IP address blocks:        2803:7520::/33 maxlen: 48

Validation:               Failed, certificate revoked on Wed 29 May 2024 11:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:30:0a:21:d7:0e:5c:d0:50:4b:14:1c:ae:93:ea:7f:85:77:cd:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16271A6D5A5968361D977B117B0281F2D2B08AE
        Validity
            Not Before: May 28 17:30:02 2024 GMT
            Not After : May 27 17:35:02 2025 GMT
        Subject: CN=0CA479DEF487197A4CABD14073FA8C6E0EE6F456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:dd:a1:3d:3d:6d:85:74:75:9c:43:76:a8:
                    d8:6a:e1:44:4b:9e:dc:ff:97:01:1e:dc:fa:45:94:
                    e3:fc:fe:50:a8:79:1e:9d:bf:90:e6:c1:04:b2:d6:
                    cb:73:6a:6b:ff:c3:1f:dc:05:4a:0d:07:83:51:45:
                    49:b1:e8:6f:e1:ae:79:d6:33:68:6d:dd:dd:82:85:
                    03:36:c2:89:35:fe:a7:a5:37:b3:08:bb:0d:0f:77:
                    7f:a5:23:b6:a7:af:c3:f2:04:98:31:be:16:8b:09:
                    f5:23:22:38:ea:34:98:ab:00:56:54:a3:3c:66:5d:
                    1c:44:3b:cb:87:6b:c1:ae:59:a1:3a:9e:6a:7b:ec:
                    02:24:7d:da:2a:46:f2:c7:1a:f5:ed:3c:fc:d4:38:
                    ab:bd:fb:c7:ee:cf:e4:1b:18:01:b7:80:05:d6:af:
                    d9:4e:d4:52:49:a2:00:15:bb:f7:d8:61:9e:fb:65:
                    79:0b:ac:b6:08:e6:df:f9:ce:82:d5:e9:42:90:6f:
                    ee:3b:b5:dd:5b:96:cd:11:ce:3d:fe:af:12:12:b3:
                    53:45:c2:76:be:ad:2b:2e:92:0c:b6:b5:c3:e7:a7:
                    06:6e:a6:40:7f:ff:00:a1:b2:a4:1d:a8:1b:e9:8a:
                    e7:ef:93:e9:2d:2a:e0:2e:ae:bf:ef:f1:78:98:96:
                    f3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A4:79:DE:F4:87:19:7A:4C:AB:D1:40:73:FA:8C:6E:0E:E6:F4:56
            X509v3 Authority Key Identifier:
                keyid:F1:62:71:A6:D5:A5:96:83:61:D9:77:B1:17:B0:28:1F:2D:2B:08:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/323830333a373532303a3a2f33332d3438203d3e20323636363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7520::/33

    Signature Algorithm: sha256WithRSAEncryption
         99:ca:c6:b3:ab:eb:8e:7a:22:8c:19:a1:e3:61:17:f5:86:e8:
         1b:86:0f:6d:de:d9:70:f3:58:03:3c:43:ad:b8:7e:ab:58:53:
         22:e7:c2:51:69:e6:30:56:14:91:b9:5e:af:3a:f9:17:db:90:
         87:17:7a:72:89:51:48:cd:0b:80:a1:c6:37:6d:11:a8:cc:35:
         e4:ca:4c:3e:61:8a:75:61:54:5d:8f:0e:76:2d:9c:2d:32:53:
         2f:a3:88:66:64:c0:33:eb:84:e7:b5:f6:70:29:5f:b8:56:de:
         60:7c:ab:d5:5a:ea:b5:c6:00:d6:81:1b:89:9d:48:67:a4:b7:
         fb:d6:78:9d:4b:18:72:06:d3:fc:9a:20:32:a1:d8:b9:6d:06:
         1d:38:78:dd:ec:86:fe:17:b2:21:44:57:50:db:8b:da:cf:0b:
         6a:85:6d:49:9a:58:fd:c8:53:f6:c4:ea:50:77:01:7a:52:2e:
         90:a5:93:48:24:f0:21:22:49:b5:3a:1f:71:5a:aa:82:4f:89:
         39:0f:8f:36:9e:c9:cb:ed:bb:3a:5c:ec:58:c9:24:67:f8:54:
         45:f5:bb:73:7c:fc:8c:42:01:08:c0:1f:9e:96:b3:41:23:2f:
         59:f2:2c:68:4b:cc:1f:b5:f4:3f:4c:3c:6f:21:3c:0e:9c:05:
         fd:52:7e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----