Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3a2f33322d3332203d3e203133333335.roa
File:                     323830333a663830303a3a2f33322d3332203d3e203133333335.roa (raw, json)
Hash identifier:          ARo2FOwYHGOIruO3uFUobFWROiCnBhcUgkmMiU4XMTg=
Subject key identifier:   A8:1A:10:8A:DB:5C:33:35:76:4E:3B:87:2F:57:6F:9C:A5:2A:59:4A
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       46C9C9EEEE5D634B58ADB054887BB977D5C8A827
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3a2f33322d3332203d3e203133333335.roa
Signing time:             Tue 05 Mar 2024 18:17:52 +0000
ROA not before:           Tue 05 Mar 2024 18:12:52 +0000
ROA not after:            Tue 04 Mar 2025 18:17:52 +0000
asID:                     13335
IP address blocks:        2803:f800::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 29 Apr 2024 15:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c9:c9:ee:ee:5d:63:4b:58:ad:b0:54:88:7b:b9:77:d5:c8:a8:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Mar  5 18:12:52 2024 GMT
            Not After : Mar  4 18:17:52 2025 GMT
        Subject: CN=A81A108ADB5C3335764E3B872F576F9CA52A594A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4d:56:9a:43:7c:21:bc:02:45:56:43:8a:c3:
                    4d:87:a7:c8:ff:fb:ce:50:d6:e4:a0:70:1a:3b:a7:
                    4b:59:cb:02:c6:11:dc:a4:9a:a2:3a:fd:44:11:03:
                    a7:95:41:ee:97:f3:ea:0f:81:ad:e2:67:7b:30:f5:
                    c3:93:fa:c8:f9:39:7c:b2:50:7a:85:76:64:4c:84:
                    fa:80:36:7a:bd:4c:85:60:e1:87:b4:03:1d:13:ad:
                    90:dc:a4:39:b3:57:f3:8b:2b:50:21:db:8f:02:fb:
                    ad:a6:fe:20:f0:60:ee:5c:12:b9:d7:a0:66:fc:23:
                    0e:47:c9:7a:43:69:89:e1:bd:2b:13:5a:15:53:8c:
                    e5:47:05:cc:c5:a7:f3:12:8c:a0:2d:83:e0:92:8f:
                    d1:9f:1f:ab:77:52:38:e6:fb:88:da:4e:41:ad:b4:
                    10:3c:5f:24:72:4d:45:e8:f3:1a:be:e3:10:30:01:
                    e0:27:4a:29:3d:e5:f2:a6:c7:9a:6e:b6:08:2b:55:
                    42:61:aa:17:28:6f:cc:61:da:6b:52:c4:3b:15:ce:
                    72:db:f4:9d:6e:c7:34:ac:57:02:e5:70:78:d3:57:
                    3a:23:25:35:72:1d:d6:97:25:a3:1e:f0:ce:78:0c:
                    bd:bb:b5:e4:5d:aa:95:f1:84:4f:ad:c0:cd:10:2a:
                    d7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1A:10:8A:DB:5C:33:35:76:4E:3B:87:2F:57:6F:9C:A5:2A:59:4A
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/323830333a663830303a3a2f33322d3332203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f800::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:1b:10:c7:d0:ad:bf:e5:40:30:a4:c7:d0:da:be:96:b9:3b:
         13:37:4a:7d:05:b8:b5:d6:e6:91:e9:6e:12:3b:83:9c:cb:5b:
         a6:76:bf:8e:6f:e4:90:3f:e8:a8:15:0d:82:3f:fd:a1:db:af:
         52:bd:50:77:59:aa:41:ec:6f:7b:94:c3:bd:43:ce:64:e1:60:
         1d:bb:cf:c6:15:35:01:41:04:d2:8b:99:36:7d:69:d7:55:5b:
         bf:0f:a4:53:87:2d:59:73:42:83:c2:5b:48:55:1f:d3:4b:b4:
         c9:77:27:24:b5:d7:bb:08:fb:a1:3d:42:78:be:80:e3:27:23:
         57:66:f4:38:15:b2:7b:62:aa:fc:e5:ff:bb:10:f6:e2:af:4f:
         05:50:99:fb:18:4e:81:bb:b9:33:97:0a:77:d0:77:e3:27:19:
         e5:b1:83:42:5e:68:69:b8:68:9a:63:a4:a0:b0:e9:bb:85:0b:
         5d:c3:a1:c7:62:bc:75:d5:6a:fa:81:02:35:61:58:29:c9:ba:
         7a:db:18:2e:f5:d2:00:c1:48:59:73:99:b1:55:df:63:aa:81:
         ad:1f:24:49:dc:46:88:ae:3f:26:9e:5c:2e:4b:c0:13:1c:58:
         8f:3f:93:e3:8e:8b:e7:96:31:7a:8b:cb:bd:ee:44:ca:48:a8:
         d0:f9:3c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org