Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a3a2f33322d3332203d3e20323730303935.roa
File:                     323830333a383765303a3a2f33322d3332203d3e20323730303935.roa (raw, json)
Hash identifier:          hBOe9BGdvp613fPCsk8mtAQ/N18BzyO9+QkvmTrtbAQ=
Subject key identifier:   85:D0:D7:2E:AE:03:54:80:2B:33:94:1A:A6:D3:F8:42:15:DF:7A:2A
Certificate issuer:       /CN=D8A18733999685921EBB92D26BE397469451AF8B
Certificate serial:       50DC7DE4D7A18A5EEA6BEA1E83085F17692B48F3
Authority key identifier: D8:A1:87:33:99:96:85:92:1E:BB:92:D2:6B:E3:97:46:94:51:AF:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a3a2f33322d3332203d3e20323730303935.roa
Signing time:             Tue 05 Mar 2024 17:41:24 +0000
ROA not before:           Tue 05 Mar 2024 17:36:24 +0000
ROA not after:            Tue 04 Mar 2025 17:41:24 +0000
asID:                     270095
IP address blocks:        2803:87e0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 07 Jun 2024 16:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:dc:7d:e4:d7:a1:8a:5e:ea:6b:ea:1e:83:08:5f:17:69:2b:48:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8A18733999685921EBB92D26BE397469451AF8B
        Validity
            Not Before: Mar  5 17:36:24 2024 GMT
            Not After : Mar  4 17:41:24 2025 GMT
        Subject: CN=85D0D72EAE0354802B33941AA6D3F84215DF7A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:45:be:12:90:83:60:c6:12:14:ed:43:07:f1:
                    5c:6b:31:24:ea:3e:b8:04:a1:44:0a:b4:47:61:a7:
                    dd:00:82:2f:d2:bb:f9:d8:ac:9c:31:be:d9:df:4b:
                    bc:dd:a2:9b:e1:fe:f3:e8:27:86:c8:5d:d2:2a:3e:
                    65:3a:3e:33:08:ff:c0:88:6e:8c:3d:37:e4:2c:ef:
                    c7:52:97:5b:10:e8:25:69:dc:8b:ed:ad:0a:33:43:
                    4d:38:e5:88:b5:a1:03:04:7c:98:8b:98:2b:a9:5a:
                    c3:c4:ce:a0:27:5c:0e:e0:27:f6:af:95:be:88:28:
                    77:e4:5f:c5:90:01:6a:a0:e0:a8:ba:9b:90:7c:de:
                    3c:c1:55:e6:4f:19:7b:6b:a6:43:ce:a6:f4:c8:f9:
                    4c:58:94:fe:17:00:f1:e5:5c:74:ca:d0:f0:42:e6:
                    b3:f1:ae:36:5b:de:7b:a4:67:86:b8:36:f1:f0:5d:
                    43:26:bb:19:fa:41:46:ca:fd:d8:ef:0a:33:9d:23:
                    b6:f5:41:d8:fa:a0:09:40:45:26:83:f9:b2:30:9e:
                    c7:40:1f:c8:b1:a2:59:a0:f5:9d:b8:51:48:26:70:
                    36:4a:f7:a0:ee:88:d4:b5:47:f4:1c:d8:70:11:d7:
                    b9:18:b0:09:44:80:fc:58:52:54:ba:41:11:b8:0b:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D0:D7:2E:AE:03:54:80:2B:33:94:1A:A6:D3:F8:42:15:DF:7A:2A
            X509v3 Authority Key Identifier:
                keyid:D8:A1:87:33:99:96:85:92:1E:BB:92:D2:6B:E3:97:46:94:51:AF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/D8A18733999685921EBB92D26BE397469451AF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a3a2f33322d3332203d3e20323730303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:87e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:02:59:6c:ac:e6:63:05:31:26:5d:06:a3:03:33:f4:e1:35:
         d4:46:ec:5f:57:91:18:e7:8e:85:7f:90:8a:05:6a:ef:36:fa:
         39:ad:ea:26:e1:92:c5:79:86:83:60:79:f1:b2:10:c2:53:35:
         9d:dd:14:01:8a:06:a7:47:88:b0:66:bd:ab:17:23:cb:b1:52:
         40:e4:63:ba:6a:37:3d:03:db:de:10:59:28:aa:ec:57:4a:fd:
         51:69:a7:2f:27:20:2c:c4:c8:a9:14:8b:2f:1c:f5:15:05:f1:
         3c:29:94:53:b8:16:7e:cc:6a:f2:03:7d:59:c3:d7:7c:ad:8a:
         de:bf:ca:c8:f9:7e:a6:81:0d:5b:4f:a3:ca:49:a1:4b:11:d9:
         b9:02:6d:3f:2a:21:b2:ad:ed:5e:bf:49:d2:df:d8:95:6a:74:
         5d:36:de:7d:41:05:a2:32:d2:21:e8:1a:2f:ce:8d:b7:d0:c4:
         b1:12:f3:bf:07:63:6d:f6:ec:e1:5b:ef:1f:cf:3e:cf:a4:59:
         b5:23:84:a2:65:fd:d8:4e:bb:19:43:2e:9d:36:cc:c0:70:cf:
         c6:4c:fc:39:00:63:49:3a:4e:0b:4e:9d:c4:be:18:46:ee:c9:
         e9:4f:74:df:21:57:d1:a5:52:26:c5:56:8b:8c:10:23:06:f0:
         a0:fa:d3:a2
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUUNx95Nehil7qa+oegwhfF2krSPMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhBMTg3MzM5OTk2ODU5MjFFQkI5MkQyNkJFMzk3NDY5
NDUxQUY4QjAeFw0yNDAzMDUxNzM2MjRaFw0yNTAzMDQxNzQxMjRaMDMxMTAvBgNV
BAMTKDg1RDBENzJFQUUwMzU0ODAyQjMzOTQxQUE2RDNGODQyMTVERjdBMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRRb4SkINgxhIU7UMH8VxrMSTq
PrgEoUQKtEdhp90Agi/Su/nYrJwxvtnfS7zdopvh/vPoJ4bIXdIqPmU6PjMI/8CI
bow9N+Qs78dSl1sQ6CVp3IvtrQozQ0045Yi1oQMEfJiLmCupWsPEzqAnXA7gJ/av
lb6IKHfkX8WQAWqg4Ki6m5B83jzBVeZPGXtrpkPOpvTI+UxYlP4XAPHlXHTK0PBC
5rPxrjZb3nukZ4a4NvHwXUMmuxn6QUbK/djvCjOdI7b1Qdj6oAlARSaD+bIwnsdA
H8ixolmg9Z24UUgmcDZK96DuiNS1R/Qc2HAR17kYsAlEgPxYUlS6QRG4C9aXAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUhdDXLq4DVIArM5QaptP4QhXfeiowHwYDVR0j
BBgwFoAU2KGHM5mWhZIeu5LSa+OXRpRRr4swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMTE4QTJEOURCN0JBNUVDMTE4QUIzODU4QUZGNjJFNkMy
MUM3NjlDRDgzOTAwN0MzODQ0MzU5NzkwQ0FCMDU2LzAvRDhBMTg3MzM5OTk2ODU5
MjFFQkI5MkQyNkJFMzk3NDY5NDUxQUY4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOEExODczMzk5OTY4NTkyMUVC
QjkyRDI2QkUzOTc0Njk0NTFBRjhCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTExOEEyRDlEQjdCQTVFQzExOEFCMzg1OEFGRjYyRTZDMjFDNzY5Q0Q4
MzkwMDdDMzg0NDM1OTc5MENBQjA1Ni8wLzMyMzgzMDMzM2EzODM3NjUzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMDMwMzkzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDh+Aw
DQYJKoZIhvcNAQELBQADggEBAFkCWWys5mMFMSZdBqMDM/ThNdRG7F9XkRjnjoV/
kIoFau82+jmt6ibhksV5hoNgefGyEMJTNZ3dFAGKBqdHiLBmvasXI8uxUkDkY7pq
Nz0D294QWSiq7FdK/VFppy8nICzEyKkUiy8c9RUF8TwplFO4Fn7MavIDfVnD13yt
it6/ysj5fqaBDVtPo8pJoUsR2bkCbT8qIbKt7V6/SdLf2JVqdF023n1BBaIy0iHo
Gi/OjbfQxLES878HY2327OFb7x/PPs+kWbUjhKJl/dhOuxlDLp02zMBwz8ZM/DkA
Y0k6TgtOncS+GEbuyelPdN8hV9GlUibFVouMECMG8KD606I=
-----END CERTIFICATE-----
Generated at Fri Jun 7 21:11:03 2024 by rpki-client on console-ams.rpki-client.org