Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35303a3a2f34352d3435203d3e203133333335.roa
File:                     323830333a663830303a35303a3a2f34352d3435203d3e203133333335.roa (raw, json)
Hash identifier:          wyOEMElt0kPazEgy+uO/swjdbCzJospLD9iiUxAT88U=
Subject key identifier:   FA:60:DC:82:B3:79:34:1D:B5:C5:D1:5F:1C:5E:A0:6C:F9:11:80:C9
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       56BF1D57F88FCB4298AF7594BD19F44D6D131B33
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35303a3a2f34352d3435203d3e203133333335.roa
Signing time:             Tue 05 Mar 2024 18:17:53 +0000
ROA not before:           Tue 05 Mar 2024 18:12:53 +0000
ROA not after:            Tue 04 Mar 2025 18:17:53 +0000
asID:                     13335
IP address blocks:        2803:f800:50::/45 maxlen: 45

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 15:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:bf:1d:57:f8:8f:cb:42:98:af:75:94:bd:19:f4:4d:6d:13:1b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Mar  5 18:12:53 2024 GMT
            Not After : Mar  4 18:17:53 2025 GMT
        Subject: CN=FA60DC82B379341DB5C5D15F1C5EA06CF91180C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a5:6c:b2:76:22:1e:67:52:37:f4:dc:e1:70:
                    7f:34:58:0a:81:58:a3:54:f5:5f:c6:52:07:7c:0b:
                    93:cc:34:ae:bc:83:0d:e2:5d:2c:6c:1a:6f:58:29:
                    a7:b2:6d:7d:1c:58:7c:89:a7:42:f0:e7:17:c5:55:
                    35:e4:95:1e:5e:79:ad:2c:47:9e:eb:f9:a6:44:ce:
                    9d:5e:23:40:85:60:33:33:b4:64:6c:0b:e2:70:3a:
                    64:7f:42:d8:b3:1a:8c:e4:cc:ee:d0:c2:ad:b3:92:
                    1f:3d:da:95:71:ef:58:d1:eb:a0:d2:ea:67:5b:3d:
                    73:8c:66:41:c8:e1:10:47:85:97:39:6a:bc:91:f6:
                    33:d0:e7:d3:49:4a:48:35:9b:f1:ed:9d:71:b7:d0:
                    f8:31:e8:be:40:9b:93:67:1e:77:0a:4f:60:31:f0:
                    a5:92:a1:e3:8a:e4:f7:23:14:ce:06:80:19:8a:2b:
                    9c:5f:cf:22:0d:eb:d1:4e:a3:be:08:ad:89:44:d1:
                    8b:d3:cb:89:24:ac:1b:64:ca:68:0c:a6:0e:70:24:
                    41:95:a6:a6:40:aa:0f:27:15:67:25:04:e3:10:78:
                    3a:32:07:e3:ce:a2:84:60:50:3f:30:af:51:b5:48:
                    dc:5e:36:ce:31:0c:62:db:73:0a:7b:54:49:eb:62:
                    13:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:60:DC:82:B3:79:34:1D:B5:C5:D1:5F:1C:5E:A0:6C:F9:11:80:C9
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a35303a3a2f34352d3435203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800:50::/45

    Signature Algorithm: sha256WithRSAEncryption
         09:41:19:8c:da:47:8e:40:d3:80:ee:6b:92:9f:22:0e:3c:7b:
         f5:40:cb:52:24:ea:3f:11:70:23:87:e8:f2:97:1d:3c:c3:b0:
         ea:72:1b:f5:af:58:79:b8:be:e7:87:55:36:15:2e:64:67:ca:
         8f:b1:07:2c:cd:5d:c4:58:27:3d:31:a1:01:94:02:3b:e2:aa:
         d3:f4:f9:b6:20:c1:e5:38:2a:2d:9b:76:c1:34:15:08:d2:9f:
         2a:36:7c:8f:47:2f:11:46:96:be:b7:a8:17:62:8b:bd:87:4f:
         e4:e4:77:29:1b:8e:a8:68:a6:69:a2:3b:d4:39:c2:6d:fd:43:
         50:c9:26:8b:88:1d:d1:6b:a2:bd:76:71:7a:63:31:e9:c8:cd:
         fd:b8:17:61:f1:30:49:8e:80:47:b5:bc:ac:98:40:34:63:1e:
         39:46:13:78:39:72:48:de:75:74:27:fe:87:8a:4f:67:67:4f:
         a3:85:5f:81:6e:24:2e:79:48:42:38:30:19:84:50:d8:24:ff:
         dd:15:2e:d9:5f:06:63:98:c7:c8:b0:43:11:6f:49:b1:b6:d1:
         f0:1a:fa:47:e7:8c:2a:85:a0:f5:79:cd:01:b8:80:04:de:ce:
         59:52:e3:40:ea:e7:7e:60:d4:d7:27:6e:31:58:99:32:04:e7:
         72:f5:fb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 19:47:17 2024 by rpki-client on console-fra.rpki-client.org