Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/323830333a3730303a3a2f33322d3332203d3e203237393736.roa
File:                     323830333a3730303a3a2f33322d3332203d3e203237393736.roa (raw, json)
Hash identifier:          ySgALLWG4pY+hTKAESS5bJmD8j6399+Q0M3+06or4SM=
Subject key identifier:   C8:D7:B2:19:9B:A7:8A:62:7E:AE:45:E9:78:0C:DF:9C:DE:ED:02:CB
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       0BC50ED4B1D092EE61071DF2B17F06EA4E1F2B81
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/323830333a3730303a3a2f33322d3332203d3e203237393736.roa
Signing time:             Tue 05 Mar 2024 17:49:30 +0000
ROA not before:           Tue 05 Mar 2024 17:44:30 +0000
ROA not after:            Tue 04 Mar 2025 17:49:30 +0000
asID:                     27976
IP address blocks:        2803:700::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c5:0e:d4:b1:d0:92:ee:61:07:1d:f2:b1:7f:06:ea:4e:1f:2b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Mar  5 17:44:30 2024 GMT
            Not After : Mar  4 17:49:30 2025 GMT
        Subject: CN=C8D7B2199BA78A627EAE45E9780CDF9CDEED02CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:85:85:e6:df:8d:41:97:75:5a:14:f2:66:e7:
                    2c:f4:ab:20:85:af:a4:eb:fa:4c:96:cc:85:72:55:
                    f2:08:74:d4:d2:54:0d:19:ba:94:d9:2d:65:13:1f:
                    e9:e2:b7:98:44:9a:8e:42:e0:9b:07:34:36:c2:a1:
                    f9:18:fd:05:03:69:4a:64:54:42:3f:e0:02:76:45:
                    9a:86:13:b4:e6:c9:4d:8b:be:0c:8e:73:8f:52:f4:
                    a4:3a:af:49:9a:42:42:b5:cc:7b:95:bd:66:ac:c2:
                    fa:9a:87:49:c5:46:88:de:2f:3f:18:d5:3f:31:b3:
                    a1:ce:7e:10:d4:a9:20:e4:04:ce:22:02:2f:3b:57:
                    4c:aa:15:e0:3f:21:98:c9:7a:55:59:21:91:15:f4:
                    32:c3:a6:67:e1:55:09:a0:7d:7a:09:18:74:40:e3:
                    93:ab:85:46:57:3f:4e:98:2c:0c:b9:f3:8b:b1:53:
                    bb:f1:44:7e:1f:9c:16:97:75:1d:5a:11:5a:e8:29:
                    77:58:24:52:af:f3:60:98:7d:59:7a:9c:79:3f:38:
                    09:1d:53:14:24:84:a5:c3:de:4c:d8:12:83:24:b0:
                    e8:85:84:56:d0:cc:91:37:65:75:a2:97:01:bc:64:
                    a1:2a:90:e1:46:98:ad:8a:7d:3f:2e:f5:1b:41:25:
                    31:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D7:B2:19:9B:A7:8A:62:7E:AE:45:E9:78:0C:DF:9C:DE:ED:02:CB
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/323830333a3730303a3a2f33322d3332203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:9e:33:d9:7e:d3:16:65:82:d5:f8:31:44:3e:99:1e:36:8f:
         6e:25:d6:01:3b:6a:af:64:84:64:1e:9b:99:a3:3a:7b:81:da:
         a8:59:d9:f7:ce:9e:bd:89:0b:25:a5:59:87:5d:28:bf:58:aa:
         83:65:ab:e1:14:14:36:8b:05:71:bc:78:22:fd:33:33:89:40:
         d4:c9:5e:db:d6:8c:d9:b1:7a:67:10:7c:b7:df:5f:ac:cf:41:
         3e:40:38:07:1f:70:7c:5e:13:6e:a6:75:e3:f9:c2:29:40:71:
         11:1a:80:4c:27:9e:de:d1:26:3b:f0:7e:cc:20:6a:fc:49:f1:
         eb:1a:22:06:f9:38:eb:9a:c1:39:b4:97:3a:c7:6a:1c:2b:03:
         d0:71:ba:0e:cc:44:55:1c:95:e0:3e:9f:60:47:f5:35:a3:94:
         73:93:26:52:e4:0f:d5:c7:16:fb:5f:65:c7:45:f5:99:d2:c5:
         f7:b9:be:69:18:bb:df:0c:78:2c:fd:49:69:54:f4:99:75:2f:
         4e:4c:3d:97:26:49:22:09:39:a2:24:c4:d2:0a:5c:d8:2a:47:
         f8:5f:43:69:09:f4:94:59:e9:f5:10:1a:06:a6:b9:88:6d:f8:
         9c:55:66:5f:e4:4f:a4:ee:16:fa:16:3b:a2:63:9a:b9:c3:bf:
         8e:8f:a8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----