Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/323830333a366131303a3a2f33322d3332203d3e203634313331.roa
File:                     323830333a366131303a3a2f33322d3332203d3e203634313331.roa (raw, json)
Hash identifier:          fFy0UDFJzhzcEPL7iCHg6q8Zr2kjtLZvmDj7YOJOxqQ=
Subject key identifier:   8E:D8:6E:F7:C9:6E:C6:0C:9F:91:00:77:31:D0:A0:CB:3A:68:67:5D
Certificate issuer:       /CN=4F8BDA7981C17C999F0DEF92264319AC1A10CE1D
Certificate serial:       73BC331E5F4D2490B4A8AD3352D46D69C56DB74D
Authority key identifier: 4F:8B:DA:79:81:C1:7C:99:9F:0D:EF:92:26:43:19:AC:1A:10:CE:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F8BDA7981C17C999F0DEF92264319AC1A10CE1D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/323830333a366131303a3a2f33322d3332203d3e203634313331.roa
Signing time:             Tue 04 Feb 2025 18:27:20 +0000
ROA not before:           Tue 04 Feb 2025 18:22:20 +0000
ROA not after:            Tue 03 Feb 2026 18:27:20 +0000
asID:                     64131
IP address blocks:        2803:6a10::/32 maxlen: 32
Validation:               Failed, certificate revoked on Mon 10 Feb 2025 14:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:bc:33:1e:5f:4d:24:90:b4:a8:ad:33:52:d4:6d:69:c5:6d:b7:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F8BDA7981C17C999F0DEF92264319AC1A10CE1D
        Validity
            Not Before: Feb  4 18:22:20 2025 GMT
            Not After : Feb  3 18:27:20 2026 GMT
        Subject: CN=8ED86EF7C96EC60C9F91007731D0A0CB3A68675D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:77:ff:ba:54:ad:ba:c2:68:be:d4:9a:f5:
                    12:3a:81:d9:3f:9f:1d:bc:da:fc:31:a8:de:92:dc:
                    cd:91:fb:e8:a7:2b:7e:74:f9:ea:a9:9e:64:a9:ab:
                    b0:92:02:b4:55:70:e6:d1:ac:de:3a:bd:da:c1:6b:
                    80:e8:b8:4b:42:03:fa:0b:61:96:4d:74:97:fb:4b:
                    84:5a:38:02:3b:10:fb:57:41:86:a3:aa:47:7c:b8:
                    bb:28:cd:dc:89:d4:bb:24:03:cf:bf:e6:4c:1a:3f:
                    a7:4e:ab:1e:fa:04:63:ae:36:82:39:ed:f1:bc:72:
                    a2:e7:f4:d2:76:d5:73:f1:58:8f:78:12:4e:f8:e5:
                    02:fa:85:41:db:60:e1:f6:05:50:30:c0:97:7f:b3:
                    6a:f0:59:b0:ab:96:e2:f4:13:f8:81:b8:50:c8:27:
                    14:3a:7d:c3:c0:e2:de:e0:22:00:db:58:61:4d:0c:
                    77:77:76:9d:0a:cf:77:48:cf:c5:ad:6d:c6:46:78:
                    69:60:1d:5f:6a:42:15:57:68:f5:21:4d:d7:fa:a6:
                    00:6f:da:ef:3d:23:75:03:38:86:5c:aa:fa:b0:fc:
                    ca:74:4c:b6:dd:8a:7c:8f:3b:8f:2a:0d:ca:94:9c:
                    60:3f:9a:a4:1d:3f:7e:94:49:33:77:9c:b6:49:77:
                    64:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D8:6E:F7:C9:6E:C6:0C:9F:91:00:77:31:D0:A0:CB:3A:68:67:5D
            X509v3 Authority Key Identifier:
                keyid:4F:8B:DA:79:81:C1:7C:99:9F:0D:EF:92:26:43:19:AC:1A:10:CE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/4F8BDA7981C17C999F0DEF92264319AC1A10CE1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F8BDA7981C17C999F0DEF92264319AC1A10CE1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45173EC92C6A0C594F767CBC1F9976C1BAE85E18EA66655427B7952D5DC4D45A/0/323830333a366131303a3a2f33322d3332203d3e203634313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:2f:b5:c7:16:e2:88:a7:fe:4a:ad:62:d3:48:54:30:7d:a6:
         0a:0b:70:ef:6e:d9:83:53:47:f1:fb:61:a3:70:b3:c6:08:d0:
         98:fe:fa:a6:66:d0:c3:23:0b:8a:d8:4c:84:fa:14:0e:da:01:
         24:7f:ac:c5:b1:76:3d:2e:06:f3:bf:f8:e7:26:72:a1:d1:f9:
         75:69:e8:de:67:48:ce:80:97:85:bc:ea:c6:eb:b4:f9:04:ab:
         fd:a6:fb:c3:ee:fd:cf:19:72:fa:63:85:f8:0a:ad:e2:fd:ac:
         fc:e1:31:22:20:e5:7c:ac:33:44:ae:2a:bc:e3:3f:e2:e0:20:
         8b:1c:e7:7d:4f:a5:fe:b3:75:84:35:f1:bb:87:55:0c:c2:de:
         b7:7b:dc:51:9b:b2:9e:00:2c:84:07:e4:30:b0:56:8f:76:68:
         30:52:88:5e:37:84:6f:1e:e1:b4:db:8b:3b:fa:cd:35:07:1b:
         61:28:50:73:a6:e5:cb:7c:8e:84:99:7c:02:b4:db:5e:05:f5:
         87:14:e7:88:29:f9:4c:25:fd:41:59:10:34:7a:17:f4:3f:13:
         6d:fe:ef:d1:e9:ac:34:ef:80:39:80:d9:7e:e9:dc:f8:66:ce:
         3f:8d:9e:4f:c7:28:01:3b:db:fb:b3:81:29:89:30:89:36:50:
         52:26:c8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:07 2025 by rpki-client