Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/323830333a626330303a3130303a3a2f34302d313238203d3e203532343338.roa
File:                     323830333a626330303a3130303a3a2f34302d313238203d3e203532343338.roa (raw, json)
Hash identifier:          fUGMA8A5+HnSZUfTZQueKYQo58ww/ZHuIIWUHtYN6Jc=
Subject key identifier:   90:91:01:66:1E:03:B5:F1:09:A1:38:BC:B6:E4:80:B2:0F:14:DE:FB
Certificate issuer:       /CN=A537F8449EAA5150B4958CB0F49E0C2358347988
Certificate serial:       13DEEA2CF80E9F11D77938C6C9FF71907A5441FD
Authority key identifier: A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/323830333a626330303a3130303a3a2f34302d313238203d3e203532343338.roa
Signing time:             Tue 05 Mar 2024 17:40:36 +0000
ROA not before:           Tue 05 Mar 2024 17:35:36 +0000
ROA not after:            Tue 04 Mar 2025 17:40:36 +0000
asID:                     52438
IP address blocks:        2803:bc00:100::/40 maxlen: 128

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 15:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:de:ea:2c:f8:0e:9f:11:d7:79:38:c6:c9:ff:71:90:7a:54:41:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537F8449EAA5150B4958CB0F49E0C2358347988
        Validity
            Not Before: Mar  5 17:35:36 2024 GMT
            Not After : Mar  4 17:40:36 2025 GMT
        Subject: CN=909101661E03B5F109A138BCB6E480B20F14DEFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:32:f5:ff:92:ab:25:66:03:7a:2f:08:20:22:
                    94:e6:e4:51:76:fc:18:e6:ea:b2:6d:ec:a1:1b:32:
                    b3:9b:1a:31:1e:9b:fa:d8:be:6e:b9:91:fb:b6:df:
                    cd:92:eb:ec:ef:65:ed:34:f3:35:c3:c8:30:41:d2:
                    06:81:6e:4b:b7:ee:f8:c3:94:68:38:f8:48:13:51:
                    72:d3:34:0a:3b:b3:05:77:99:93:0b:ea:32:2e:13:
                    14:91:1c:82:38:c2:a3:20:1e:f5:69:67:3f:11:45:
                    f7:dd:6d:f0:b4:cf:7d:6a:3d:b2:d2:9e:d9:d4:a9:
                    8b:f5:4a:e5:8d:b9:b6:f2:6f:ea:8b:92:29:c1:4e:
                    d4:75:f8:dc:2a:2d:87:44:f5:31:9f:45:8d:78:13:
                    0a:e6:08:19:57:aa:cc:d7:81:6a:75:d2:ad:95:33:
                    4a:71:93:11:f9:5f:a0:13:41:ce:0e:d0:3a:d7:e9:
                    ea:67:1a:60:29:c1:92:6a:56:c1:58:e1:34:98:ff:
                    48:29:99:8b:3d:bb:85:6a:13:e4:c9:0b:90:fa:d2:
                    20:b5:7a:d0:73:74:41:77:41:e8:44:34:8f:a3:72:
                    fc:f6:05:9c:cb:8b:e9:1b:ca:c1:95:ac:58:5a:aa:
                    8f:5f:bc:70:ef:51:0d:f4:44:b1:e0:cc:d5:53:a4:
                    3d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:91:01:66:1E:03:B5:F1:09:A1:38:BC:B6:E4:80:B2:0F:14:DE:FB
            X509v3 Authority Key Identifier:
                keyid:A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/323830333a626330303a3130303a3a2f34302d313238203d3e203532343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bc00:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:84:32:95:6f:1b:6a:fe:68:fa:2b:45:03:b0:8f:8d:6a:f7:
         ca:01:a8:5d:e0:ed:38:35:71:9d:8c:65:53:c0:5d:86:0e:0b:
         4b:4f:5f:11:2b:6f:45:91:81:fd:9f:87:7c:06:17:b2:0d:d1:
         41:27:9d:77:8f:ab:d4:d4:45:ad:05:42:3d:18:89:ef:c5:40:
         ff:39:ba:86:d6:44:37:23:be:f5:0a:18:fa:fb:b7:15:30:36:
         d1:3a:c7:c7:70:bd:2e:17:7a:c2:1a:90:6d:8e:b1:63:08:85:
         a2:f6:11:66:54:c0:9e:56:3d:87:3d:67:2c:34:c6:f5:c5:95:
         81:d9:55:c1:ae:00:aa:6f:00:b9:f6:e3:a8:74:f3:e1:d9:6e:
         9b:72:9c:36:61:eb:e6:fc:59:56:df:5a:20:f2:2e:d8:e4:6a:
         d0:c3:69:58:93:4f:dc:00:0b:39:3c:e8:42:4b:20:7a:bd:bd:
         4d:7a:39:84:5c:7b:d6:03:61:b9:c7:0b:ed:c2:ba:9f:4e:e1:
         da:9b:1b:cf:c8:09:0d:4d:af:d3:0e:16:58:f3:98:d2:e6:97:
         1f:58:c0:82:e8:e5:9b:2c:b2:b9:bc:b9:f5:15:36:e4:d9:41:
         76:be:cd:e6:01:18:b1:51:fb:45:3a:b4:33:e9:2e:e3:a9:f1:
         4b:ec:db:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 16:54:12 2024 by rpki-client on console-ams.rpki-client.org