Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/323830303a6430303a3a2f33322d3332203d3e20323633373636.roa
File:                     323830303a6430303a3a2f33322d3332203d3e20323633373636.roa (raw, json)
Hash identifier:          jgS39gz8HFYvE0pp8xdGiHM0zMK41lzXaAdmHTO2wdY=
Subject key identifier:   EA:C9:9B:FE:22:D0:E0:1F:92:CD:54:50:44:D2:EF:79:A2:BC:A4:BA
Certificate issuer:       /CN=B9E6C43D762E93FD87830A253F11922C7BC63907
Certificate serial:       44D528225759186CD19619B4410449461B3F991D
Authority key identifier: B9:E6:C4:3D:76:2E:93:FD:87:83:0A:25:3F:11:92:2C:7B:C6:39:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/323830303a6430303a3a2f33322d3332203d3e20323633373636.roa
Signing time:             Tue 05 Mar 2024 18:22:47 +0000
ROA not before:           Tue 05 Mar 2024 18:17:47 +0000
ROA not after:            Tue 04 Mar 2025 18:22:47 +0000
asID:                     263766
IP address blocks:        2800:d00::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d5:28:22:57:59:18:6c:d1:96:19:b4:41:04:49:46:1b:3f:99:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E6C43D762E93FD87830A253F11922C7BC63907
        Validity
            Not Before: Mar  5 18:17:47 2024 GMT
            Not After : Mar  4 18:22:47 2025 GMT
        Subject: CN=EAC99BFE22D0E01F92CD545044D2EF79A2BCA4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:98:49:f9:37:e8:37:28:2a:8a:c9:b2:6e:c4:
                    c3:bd:9e:4a:cf:7c:15:29:2e:2e:33:32:86:70:a4:
                    50:ac:62:30:10:93:73:fc:a0:2b:05:0d:9e:68:3b:
                    cb:e3:98:37:e6:36:93:51:1c:8a:83:de:76:b9:2e:
                    da:b0:b9:32:22:0e:37:40:a8:7f:80:c6:8c:d6:44:
                    eb:b7:31:f7:e7:e6:04:e3:0d:65:59:98:a0:7b:02:
                    08:07:66:20:80:50:cc:57:82:03:ae:0a:e1:83:04:
                    d6:53:00:49:d9:a5:ac:bd:2e:07:f1:4c:73:05:24:
                    12:ff:4b:9a:06:0c:f5:f4:34:4d:2b:65:32:b0:0d:
                    6f:23:6c:66:ee:33:2d:4e:89:07:eb:a4:92:d1:6e:
                    9c:38:af:82:5a:d4:7d:15:ac:08:a3:64:df:e0:3f:
                    6d:0a:b3:5d:e7:24:60:fe:b9:43:e5:56:78:f4:c9:
                    18:5d:13:3a:85:52:56:8d:86:05:c8:cc:0b:ae:13:
                    92:78:f0:54:d6:2e:ee:8b:91:4e:87:4e:02:80:7d:
                    33:0f:28:d1:f9:bb:e7:e4:70:33:ae:2c:27:81:c0:
                    cc:b8:30:dc:fb:12:23:ad:1c:4e:21:ce:97:5a:c0:
                    a3:7f:5b:8b:68:88:aa:4f:8b:cf:1b:1f:3b:1d:1e:
                    ae:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C9:9B:FE:22:D0:E0:1F:92:CD:54:50:44:D2:EF:79:A2:BC:A4:BA
            X509v3 Authority Key Identifier:
                keyid:B9:E6:C4:3D:76:2E:93:FD:87:83:0A:25:3F:11:92:2C:7B:C6:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/323830303a6430303a3a2f33322d3332203d3e20323633373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:7b:30:4e:a0:11:ad:2f:2d:5e:0a:d9:99:ba:25:7c:6d:97:
         d7:f8:11:82:34:58:59:ea:29:37:c6:71:fe:ad:2a:e9:27:69:
         ec:5a:7b:55:ac:c5:22:76:38:91:c6:84:52:71:0f:ae:10:e3:
         18:eb:82:a1:1b:42:e7:a6:b0:60:1b:b3:d7:51:ab:d8:74:52:
         99:0c:47:d0:19:de:12:b5:9f:7c:67:bd:73:2b:8e:d5:ba:28:
         3a:af:60:00:b0:36:b8:e2:e5:4a:7a:ee:2a:d9:67:98:5d:e2:
         54:d7:f4:e5:dc:7f:b2:3f:2a:2f:cc:43:fb:02:22:7b:48:9f:
         84:79:18:e1:ee:be:3e:4b:a9:ff:b6:ef:9a:5b:b1:d4:08:a8:
         10:24:54:fc:96:57:ae:66:df:72:d2:19:2c:40:21:9a:ef:d5:
         49:8f:14:a4:6b:07:f2:5f:92:1d:aa:20:0d:aa:1c:c8:42:a5:
         f6:92:37:59:ac:00:90:c1:23:f7:a0:45:88:9b:2c:e6:f5:60:
         44:35:40:b5:f6:a9:d7:39:92:b9:36:b8:55:e7:19:9e:23:0e:
         4c:73:a7:ef:ca:c5:36:46:77:a8:7a:2b:ab:a5:fe:97:c8:b7:
         84:19:4b:40:1c:35:52:af:b5:83:9b:e5:3d:00:fa:cb:46:76:
         c4:fd:47:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----