Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/323830333a616463303a313030303a3a2f33362d3336203d3e20323635373232.roa
File:                     323830333a616463303a313030303a3a2f33362d3336203d3e20323635373232.roa (raw, json)
Hash identifier:          7YFAFkxBFwOsYgCPHFxwFZ79Dh8Fb+3LSE25rn7Jw2k=
Subject key identifier:   A7:D1:06:6E:7D:0A:96:19:3E:F7:0D:77:B6:80:FF:1E:0D:4F:A9:C1
Certificate issuer:       /CN=FB037DD6ACAA6389722AF82D5B43CBAFA3A33153
Certificate serial:       03D88EA30540AAF9EED392DB4A765C59D4A5E1BA
Authority key identifier: FB:03:7D:D6:AC:AA:63:89:72:2A:F8:2D:5B:43:CB:AF:A3:A3:31:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/323830333a616463303a313030303a3a2f33362d3336203d3e20323635373232.roa
Signing time:             Sun 07 Jul 2024 20:25:00 +0000
ROA not before:           Sun 07 Jul 2024 20:20:00 +0000
ROA not after:            Sun 06 Jul 2025 20:25:00 +0000
asID:                     265722
IP address blocks:        2803:adc0:1000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 14:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d8:8e:a3:05:40:aa:f9:ee:d3:92:db:4a:76:5c:59:d4:a5:e1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB037DD6ACAA6389722AF82D5B43CBAFA3A33153
        Validity
            Not Before: Jul  7 20:20:00 2024 GMT
            Not After : Jul  6 20:25:00 2025 GMT
        Subject: CN=A7D1066E7D0A96193EF70D77B680FF1E0D4FA9C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:eb:18:89:b3:ee:b1:1c:21:b7:7e:4c:f3:ff:
                    d7:50:8f:16:d5:1b:df:7b:1c:69:e1:f1:38:fe:ad:
                    e9:8d:d9:d4:8c:b8:ea:4d:f4:d3:bb:7e:8f:d5:5e:
                    91:4a:21:83:f9:ac:ed:00:3b:43:1e:8c:e0:fd:b4:
                    6c:1d:5b:27:20:ce:d5:af:02:b6:a0:19:24:fd:6d:
                    0f:e6:76:9d:e7:2e:ca:3f:27:a5:9e:c3:7f:2d:02:
                    42:04:fe:2e:c0:2f:88:ab:47:0f:ec:ea:3e:eb:4b:
                    22:b9:fb:a8:4d:3a:b6:86:d1:74:3f:e2:8b:11:7c:
                    7c:46:21:f7:74:df:0e:3f:8f:c2:35:94:e3:ec:a4:
                    1e:6d:85:35:06:ac:57:af:c3:7c:44:2a:bc:57:7c:
                    46:cd:ed:46:de:fc:54:5b:c5:98:31:5f:c0:a0:4a:
                    75:10:10:04:fd:64:4f:79:bb:e6:6b:81:7d:ff:a5:
                    5c:68:29:f0:54:9e:e1:63:14:10:48:fb:0d:99:dd:
                    ce:4e:5f:40:06:d9:9f:4a:12:a9:07:53:38:48:42:
                    a2:69:ed:a2:1e:3a:c6:38:62:27:ea:42:3f:c7:cb:
                    cc:6c:61:61:f2:fb:38:72:8d:e9:23:9c:4b:15:7e:
                    94:1e:11:49:50:36:33:e8:50:e2:1d:e8:e8:6f:9e:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D1:06:6E:7D:0A:96:19:3E:F7:0D:77:B6:80:FF:1E:0D:4F:A9:C1
            X509v3 Authority Key Identifier:
                keyid:FB:03:7D:D6:AC:AA:63:89:72:2A:F8:2D:5B:43:CB:AF:A3:A3:31:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/323830333a616463303a313030303a3a2f33362d3336203d3e20323635373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:adc0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         33:d5:87:97:b8:0d:c5:16:3c:aa:c7:b9:91:4b:cf:e7:8c:63:
         e5:e2:d1:0d:43:43:29:22:21:22:6c:de:6e:9e:b7:8f:18:d6:
         ed:67:08:1a:7f:dc:72:7e:f8:b6:8e:2d:61:90:67:ce:b0:7e:
         96:15:4c:46:4e:30:c3:6c:14:67:b5:95:fb:e2:1a:75:99:fe:
         1c:78:ba:b8:35:79:2f:7e:70:af:6b:7b:40:54:03:fe:17:53:
         ca:2a:32:14:63:5d:0d:a0:a4:92:3b:31:cd:a0:39:6b:68:cc:
         b5:76:c6:3a:9c:35:fc:1b:9a:ea:0e:49:51:1d:ce:20:81:1d:
         8c:d1:b5:08:10:07:94:8d:7c:2f:e8:20:cb:4e:f2:db:3b:95:
         bb:27:9d:52:74:14:61:a4:79:1c:d9:15:33:1c:c2:fd:37:bc:
         3c:36:2c:15:52:86:8e:7c:49:b2:39:68:f3:89:8b:33:0a:e9:
         91:d7:f9:96:85:b4:da:e5:b9:3f:3d:40:5d:15:0e:a5:f6:72:
         8a:db:fc:00:33:0a:09:a8:8c:33:6c:71:ef:6e:63:00:c7:c3:
         79:f6:dd:a4:60:be:4b:2e:ac:fd:9f:da:a1:55:13:14:dc:a9:
         07:b2:d8:4f:70:f7:8c:75:c5:b6:6d:03:a8:58:ba:fa:bf:78:
         25:7e:42:bc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 10 16:30:34 2024 by rpki-client on console-ams.rpki-client.org