Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/323830333a613531303a3a2f33322d3438203d3e20323732303235.roa
File:                     323830333a613531303a3a2f33322d3438203d3e20323732303235.roa (raw, json)
Hash identifier:          J6UyIs+EBvUsrH2HzNJcNqsu1Inlba1aD9z2Z4pPF8s=
Subject key identifier:   72:A5:61:09:75:88:B7:9D:00:48:D4:92:16:EE:B9:97:56:83:AA:C9
Certificate issuer:       /CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
Certificate serial:       0DDC5F19342B2F0492CA60206CC95FEA81867388
Authority key identifier: FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/323830333a613531303a3a2f33322d3438203d3e20323732303235.roa
Signing time:             Tue 05 Mar 2024 18:12:11 +0000
ROA not before:           Tue 05 Mar 2024 18:07:11 +0000
ROA not after:            Tue 04 Mar 2025 18:12:11 +0000
asID:                     272025
IP address blocks:        2803:a510::/32 maxlen: 48

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 17:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:dc:5f:19:34:2b:2f:04:92:ca:60:20:6c:c9:5f:ea:81:86:73:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
        Validity
            Not Before: Mar  5 18:07:11 2024 GMT
            Not After : Mar  4 18:12:11 2025 GMT
        Subject: CN=72A561097588B79D0048D49216EEB9975683AAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:84:db:fe:58:6f:38:6a:14:9b:04:60:55:47:
                    50:be:20:02:cd:56:ec:1f:dc:4b:a1:67:7a:62:0c:
                    9f:98:45:f6:60:af:cc:20:44:14:60:a0:bf:f5:dc:
                    34:4b:35:95:d2:31:a4:10:24:9e:31:45:d6:04:ee:
                    44:3a:47:e8:21:e6:ef:f9:00:07:cd:bf:46:db:eb:
                    6a:ad:d4:54:b1:ee:2f:10:74:55:99:41:a9:b4:ab:
                    e0:ed:19:c3:f1:0c:23:fa:8d:79:87:e5:2e:67:59:
                    3d:fc:0d:7c:90:fd:6e:33:4d:72:b4:d5:7c:ad:fa:
                    6e:7f:bd:c7:a8:09:31:70:35:e5:b4:e6:e5:73:e8:
                    8d:2d:c3:03:56:66:dd:a1:08:03:27:7a:cd:47:f0:
                    49:bc:ac:95:1c:8b:b9:28:9b:b9:b4:78:8a:10:40:
                    c4:4d:ef:32:c1:05:2c:27:70:fc:27:2d:30:ac:c3:
                    57:19:76:aa:07:3a:de:6d:1c:45:8f:6e:47:a1:29:
                    68:bc:70:bb:c0:70:24:ba:bf:e6:15:50:0b:31:4a:
                    1d:e8:e7:c2:93:3e:99:a9:b6:0e:b8:93:34:53:b8:
                    0d:bf:3b:66:80:34:b8:36:4f:f1:7a:0a:21:bb:12:
                    98:cb:eb:a7:06:65:aa:ba:44:bd:63:bf:4a:34:61:
                    5c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A5:61:09:75:88:B7:9D:00:48:D4:92:16:EE:B9:97:56:83:AA:C9
            X509v3 Authority Key Identifier:
                keyid:FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/323830333a613531303a3a2f33322d3438203d3e20323732303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a510::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:f6:34:42:cc:6c:85:d6:ea:ba:80:bb:15:b6:26:ef:ee:ba:
         bb:37:53:15:9d:d3:d3:fd:c8:15:a4:22:92:e1:37:d2:ef:54:
         90:ce:4a:3d:20:ea:4f:5c:2c:d5:3b:d1:93:df:c1:32:ac:4c:
         48:bf:52:e9:3f:76:c3:c4:11:49:55:8c:5b:5c:92:17:99:c9:
         36:e8:6f:d3:90:32:62:10:92:f0:c8:60:8a:19:87:6b:35:e5:
         8c:f6:ee:f1:46:b2:48:40:3d:53:a8:b1:a3:2d:c1:29:e0:22:
         91:5f:a8:3d:7a:c0:6a:38:9c:a3:1b:53:a5:46:bc:7f:67:4c:
         86:86:86:d8:e1:87:b2:c2:81:88:a2:e1:8b:30:e3:c7:53:d6:
         d6:2b:e5:4a:44:48:47:8e:4e:57:c5:b0:21:96:2b:65:c5:85:
         4e:71:e0:4d:e7:95:23:5b:c7:15:88:2a:84:f5:12:4e:67:15:
         53:49:42:4b:b2:c9:f4:97:33:50:31:ee:c7:91:3e:3c:a7:2c:
         20:6a:c4:30:4b:7f:58:d7:b0:d8:fc:36:64:7c:fa:c9:1b:cc:
         99:57:95:a7:bf:df:5a:da:6e:86:15:3a:e7:f2:f1:0c:76:ce:
         48:35:f5:23:f3:cd:28:ff:8f:11:d4:63:32:a9:31:36:99:3c:
         fd:fb:91:ef
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUDdxfGTQrLwSSymAgbMlf6oGGc4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM2MUU3Qjg1NkEyODU4QjMzMUNFNEVDNDhBMjdEODE2
MkZBNUU1NzAeFw0yNDAzMDUxODA3MTFaFw0yNTAzMDQxODEyMTFaMDMxMTAvBgNV
BAMTKDcyQTU2MTA5NzU4OEI3OUQwMDQ4RDQ5MjE2RUVCOTk3NTY4M0FBQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLhNv+WG84ahSbBGBVR1C+IALN
Vuwf3EuhZ3piDJ+YRfZgr8wgRBRgoL/13DRLNZXSMaQQJJ4xRdYE7kQ6R+gh5u/5
AAfNv0bb62qt1FSx7i8QdFWZQam0q+DtGcPxDCP6jXmH5S5nWT38DXyQ/W4zTXK0
1Xyt+m5/vceoCTFwNeW05uVz6I0twwNWZt2hCAMnes1H8Em8rJUci7kom7m0eIoQ
QMRN7zLBBSwncPwnLTCsw1cZdqoHOt5tHEWPbkehKWi8cLvAcCS6v+YVUAsxSh3o
58KTPpmptg64kzRTuA2/O2aANLg2T/F6CiG7EpjL66cGZaq6RL1jv0o0YVxrAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUcqVhCXWIt50ASNSSFu65l1aDqskwHwYDVR0j
BBgwFoAU/GHnuFaihYszHOTsSKJ9gWL6XlcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQ0RERjdGOTlDMjY2MTk1RkYzOUM5NTVCQzdFMEY2MUND
RENGQjFDOTYwRUMyOTVCQUYwMjUyRkNDNjVBN0NDLzAvRkM2MUU3Qjg1NkEyODU4
QjMzMUNFNEVDNDhBMjdEODE2MkZBNUU1Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQzYxRTdCODU2QTI4NThCMzMx
Q0U0RUM0OEEyN0Q4MTYyRkE1RTU3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0NEREY3Rjk5QzI2NjE5NUZGMzlDOTU1QkM3RTBGNjFDQ0RDRkIxQzk2
MEVDMjk1QkFGMDI1MkZDQzY1QTdDQy8wLzMyMzgzMDMzM2E2MTM1MzEzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzczMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDpRAw
DQYJKoZIhvcNAQELBQADggEBAHj2NELMbIXW6rqAuxW2Ju/uurs3UxWd09P9yBWk
IpLhN9LvVJDOSj0g6k9cLNU70ZPfwTKsTEi/Uuk/dsPEEUlVjFtckheZyTbob9OQ
MmIQkvDIYIoZh2s15Yz27vFGskhAPVOosaMtwSngIpFfqD16wGo4nKMbU6VGvH9n
TIaGhtjhh7LCgYii4Ysw48dT1tYr5UpESEeOTlfFsCGWK2XFhU5x4E3nlSNbxxWI
KoT1Ek5nFVNJQkuyyfSXM1Ax7seRPjynLCBqxDBLf1jXsNj8NmR8+skbzJlXlae/
31raboYVOufy8Qx2zkg19SPzzSj/jxHUYzKpMTaZPP37ke8=
-----END CERTIFICATE-----
Generated at Fri Sep 13 19:53:11 2024 by rpki-client on console-ams.rpki-client.org