Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/323830313a3163393a343a3a2f34382d3438203d3e20323732393230.roa
File:                     323830313a3163393a343a3a2f34382d3438203d3e20323732393230.roa (raw, json)
Hash identifier:          02wH+UFRxg+9ek4jzfkUaqDnBamKyPC6Z/OWl6aKUaI=
Subject key identifier:   28:95:EC:30:30:E9:1B:A8:0A:10:EF:B0:C1:45:FD:79:5E:ED:D9:41
Certificate issuer:       /CN=0A60287FCFC03A930FA4A0AD2D5562D53F568984
Certificate serial:       2867BC25316E1B0CAAA3FB259D6DDCF772F6DC80
Authority key identifier: 0A:60:28:7F:CF:C0:3A:93:0F:A4:A0:AD:2D:55:62:D5:3F:56:89:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/323830313a3163393a343a3a2f34382d3438203d3e20323732393230.roa
Signing time:             Tue 05 Mar 2024 17:40:53 +0000
ROA not before:           Tue 05 Mar 2024 17:35:53 +0000
ROA not after:            Tue 04 Mar 2025 17:40:53 +0000
asID:                     272920
IP address blocks:        2801:1c9:4::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 29 Oct 2024 13:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:67:bc:25:31:6e:1b:0c:aa:a3:fb:25:9d:6d:dc:f7:72:f6:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A60287FCFC03A930FA4A0AD2D5562D53F568984
        Validity
            Not Before: Mar  5 17:35:53 2024 GMT
            Not After : Mar  4 17:40:53 2025 GMT
        Subject: CN=2895EC3030E91BA80A10EFB0C145FD795EEDD941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e4:82:02:34:eb:4a:2a:24:5c:45:66:6f:63:
                    e9:05:0e:c1:ba:32:ab:08:c7:09:2a:86:4d:ba:21:
                    04:92:27:c7:27:2c:1b:9b:cd:0f:74:47:ad:9d:f4:
                    4e:8a:73:03:42:75:dd:b3:6d:8d:8f:aa:4a:1c:e6:
                    ce:d1:eb:12:5a:7e:c2:fe:75:41:5f:1f:d9:a7:2f:
                    02:1c:59:27:ad:28:cb:a0:93:0a:e5:35:6d:a4:7b:
                    3d:61:b8:8e:5b:21:fd:58:98:bd:01:37:7a:78:c0:
                    68:86:d1:b2:2c:bc:dd:d3:2c:4d:7a:4b:7a:d1:0f:
                    7b:b3:bc:58:c5:f5:88:b4:67:37:a4:a1:41:44:df:
                    f4:f8:85:d4:f1:9d:5f:f5:7e:e2:d2:03:13:c9:a0:
                    14:48:1e:81:c3:19:d6:9b:cc:ed:42:ba:85:2d:bb:
                    b5:aa:2f:bc:6c:1e:fd:38:41:66:62:1b:79:75:96:
                    9e:c1:37:f6:6c:65:f1:01:5d:94:55:a9:a6:89:53:
                    42:18:a3:ce:a6:86:1d:f3:33:49:0c:00:18:6a:e7:
                    42:2b:e4:33:8c:d5:04:d0:21:6d:fc:6b:9e:c0:c5:
                    66:12:a4:10:1a:56:5f:de:9d:9d:a2:85:cb:bb:24:
                    c3:cf:c5:7f:55:5e:7b:b7:48:18:46:b1:f4:67:78:
                    07:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:95:EC:30:30:E9:1B:A8:0A:10:EF:B0:C1:45:FD:79:5E:ED:D9:41
            X509v3 Authority Key Identifier:
                keyid:0A:60:28:7F:CF:C0:3A:93:0F:A4:A0:AD:2D:55:62:D5:3F:56:89:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A60287FCFC03A930FA4A0AD2D5562D53F568984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CFDA7C0136255682D7C4A7BFD2B33605D8CF14B30A630967D025473A0879930/0/323830313a3163393a343a3a2f34382d3438203d3e20323732393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c9:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:a2:c0:88:9d:23:e3:f3:de:8e:09:cd:89:6a:15:61:af:85:
         d3:0c:55:dd:8b:b2:a6:f0:a6:8f:c9:eb:c1:12:08:7c:ab:40:
         3c:58:dd:cd:ec:30:52:f7:a2:5d:f8:9e:b3:43:79:ac:97:22:
         f2:45:5e:60:fd:66:ba:af:ee:c2:d4:6d:7e:51:11:c9:44:2d:
         4c:ae:4f:20:7c:e5:ac:11:4b:5b:65:8c:4d:bc:95:e4:03:11:
         c4:76:28:72:a9:52:c5:7d:02:e6:b9:2a:48:02:c8:d9:30:dc:
         1a:3c:05:f5:1c:d2:93:84:f0:20:74:13:c7:0e:75:c5:44:04:
         39:d9:1a:87:84:e5:af:e8:7a:85:bc:ee:b2:2e:74:36:0e:d3:
         01:7d:a1:b1:7a:0a:16:3e:fe:be:93:22:9f:d9:0b:46:6d:c5:
         0b:84:b4:d2:72:05:1b:24:81:67:e3:af:2d:b3:c6:be:e4:a5:
         58:d4:54:e2:be:4b:c8:b1:71:c9:d7:39:08:23:e6:7a:ad:a6:
         14:8e:09:60:1b:a7:63:62:a6:ac:65:21:4e:38:9b:8a:7b:f4:
         b8:05:91:ab:bd:f5:da:73:25:f0:86:82:3b:2a:ee:38:b1:6a:
         85:f0:c4:c6:16:da:29:22:19:bb:57:69:27:8e:84:3e:bb:fe:
         93:a1:1a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 17:39:19 2024 by rpki-client on console-fra.rpki-client.org