Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/323830333a646539303a3a2f33322d3332203d3e20323634373733.roa
File:                     323830333a646539303a3a2f33322d3332203d3e20323634373733.roa (raw, json)
Hash identifier:          1klfSSfERAPqiBjYTLvAK++nvnSrmLePflvE0JJ5TWk=
Subject key identifier:   F1:15:50:4F:E0:B8:0A:D3:8D:21:EC:2F:E8:80:E3:7D:14:66:78:3C
Certificate issuer:       /CN=18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F
Certificate serial:       06EBF613B5668292D067D0F20B6444AF37F206D1
Authority key identifier: 18:CD:F6:7D:EB:5A:4D:EB:A3:6F:8B:FA:60:8A:B3:EF:53:58:F1:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/323830333a646539303a3a2f33322d3332203d3e20323634373733.roa
Signing time:             Tue 05 Mar 2024 17:45:56 +0000
ROA not before:           Tue 05 Mar 2024 17:40:56 +0000
ROA not after:            Tue 04 Mar 2025 17:45:56 +0000
asID:                     264773
IP address blocks:        2803:de90::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 24 Jul 2024 21:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:eb:f6:13:b5:66:82:92:d0:67:d0:f2:0b:64:44:af:37:f2:06:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F
        Validity
            Not Before: Mar  5 17:40:56 2024 GMT
            Not After : Mar  4 17:45:56 2025 GMT
        Subject: CN=F115504FE0B80AD38D21EC2FE880E37D1466783C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f1:a2:d5:08:c3:5d:1f:f1:11:49:82:09:20:
                    19:39:9c:d8:41:87:27:be:e1:ac:1e:d4:7a:e9:4a:
                    a8:4d:cc:6a:9f:93:1b:63:32:03:b7:e2:75:c4:e2:
                    da:2d:f8:77:37:72:d2:39:df:8f:1d:3b:4e:e0:ba:
                    78:7a:3e:3b:b0:35:0a:95:c8:a7:00:b8:b9:5f:2a:
                    62:eb:82:9b:ea:f0:60:fb:16:24:2b:f2:aa:05:3d:
                    34:53:fc:41:4c:ff:e6:f6:60:2f:cc:90:cb:d6:dc:
                    23:2a:22:19:44:f4:a0:c0:f6:a8:08:2a:73:75:9e:
                    65:43:21:35:32:61:1c:79:eb:49:81:9e:0a:92:1f:
                    cd:0b:74:f7:ad:68:e7:61:7a:a2:2b:74:0b:8c:8a:
                    55:da:30:e1:ab:f0:f7:68:07:b1:d6:62:35:bb:59:
                    43:db:64:07:53:46:3c:d3:c2:a7:75:64:91:d1:3b:
                    6a:ba:80:e5:e5:5c:65:5a:e3:6d:f1:7d:18:dc:57:
                    a5:6e:c4:ed:24:29:3f:72:6c:64:c1:7c:c8:64:a1:
                    bc:c1:17:bb:d1:96:e7:d0:c8:79:b1:f8:ab:70:cd:
                    97:c6:5d:20:52:90:ba:e2:ae:2e:c2:3c:de:b5:61:
                    da:ce:15:c4:16:70:ac:d3:b9:17:b1:e3:de:66:81:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:15:50:4F:E0:B8:0A:D3:8D:21:EC:2F:E8:80:E3:7D:14:66:78:3C
            X509v3 Authority Key Identifier:
                keyid:18:CD:F6:7D:EB:5A:4D:EB:A3:6F:8B:FA:60:8A:B3:EF:53:58:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/323830333a646539303a3a2f33322d3332203d3e20323634373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:de90::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:8b:d2:db:c0:a9:63:dc:ff:f6:7a:ae:96:8e:0b:ea:97:38:
         1c:2b:58:79:b7:6c:4b:35:55:b5:91:7d:11:50:6a:f6:b3:22:
         5c:60:48:0f:9c:09:57:e8:f3:f1:ce:2e:09:d1:5a:d3:92:c2:
         d4:4e:25:d8:ac:c9:bd:d6:fc:2c:d3:4b:72:2b:97:5f:8c:4c:
         93:bc:eb:9c:d1:1b:3a:6c:e2:71:77:6d:05:fa:b6:6b:68:73:
         8e:eb:12:ef:ea:0e:9d:9b:88:e6:3e:c2:fd:dc:92:02:38:04:
         91:d8:d3:62:1a:2f:c1:08:d5:91:e1:c9:ba:a7:87:2e:66:0f:
         ad:c1:2c:cd:38:1b:1f:0d:12:67:6e:99:df:df:ad:d1:4d:09:
         7f:82:47:d8:0f:fa:04:cc:21:3d:6e:50:7a:a1:3e:69:a8:69:
         e4:77:1e:53:35:b5:61:76:9d:81:2a:54:58:7d:1f:1b:da:4a:
         6f:33:ac:39:cd:86:9a:b3:b0:97:6b:06:e3:37:49:52:60:d1:
         73:53:ec:bb:d7:d3:6c:9b:d7:0d:fd:28:4b:d6:4a:92:e3:84:
         86:20:59:3f:81:22:77:73:89:f6:50:e3:32:dd:fc:3a:67:cd:
         da:ee:eb:a2:48:0c:63:3e:f8:58:a7:e1:7c:63:62:6d:8d:a4:
         bf:d3:cf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----