Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/323830333a316435303a3a2f33322d3438203d3e20323639383332.roa
File:                     323830333a316435303a3a2f33322d3438203d3e20323639383332.roa (raw, json)
Hash identifier:          5S/HZrQH5VP5LArOBv7oepeecb2dNjckX3NgAA1xZBQ=
Subject key identifier:   C0:E8:D8:5F:CB:FD:A9:C7:7F:A9:00:1B:FE:B8:8D:A9:1E:23:93:59
Certificate issuer:       /CN=0883966BE5B6856A564CAC730936B0CC5143EE6A
Certificate serial:       21129EB26EAEB318C1C90C554EE99CB5055C6ACE
Authority key identifier: 08:83:96:6B:E5:B6:85:6A:56:4C:AC:73:09:36:B0:CC:51:43:EE:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/323830333a316435303a3a2f33322d3438203d3e20323639383332.roa
Signing time:             Tue 03 Sep 2024 15:10:00 +0000
ROA not before:           Tue 03 Sep 2024 15:05:00 +0000
ROA not after:            Tue 02 Sep 2025 15:10:00 +0000
asID:                     269832
IP address blocks:        2803:1d50::/32 maxlen: 48

Validation:               Failed, certificate revoked on Sat 07 Sep 2024 00:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:12:9e:b2:6e:ae:b3:18:c1:c9:0c:55:4e:e9:9c:b5:05:5c:6a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0883966BE5B6856A564CAC730936B0CC5143EE6A
        Validity
            Not Before: Sep  3 15:05:00 2024 GMT
            Not After : Sep  2 15:10:00 2025 GMT
        Subject: CN=C0E8D85FCBFDA9C77FA9001BFEB88DA91E239359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:89:9b:06:7d:88:cc:a2:19:1e:05:c1:e3:15:
                    cc:cd:c8:b5:c9:27:4a:8c:3a:1d:ae:10:34:b8:34:
                    f2:83:c1:b7:23:30:9b:17:a7:4d:f5:b5:75:77:c1:
                    5f:c9:e8:4f:1b:e4:21:af:69:9c:d2:01:0a:a0:0d:
                    63:b1:85:ca:83:b9:a9:f7:29:b5:a7:7e:e6:d0:e3:
                    e4:c6:6e:b1:0f:50:6a:27:b7:44:91:64:a2:11:ab:
                    5c:88:42:38:f0:31:c3:2e:c9:49:56:50:53:94:26:
                    11:d2:f6:72:24:2f:3d:54:f8:5e:1d:60:09:9e:13:
                    4b:ef:7c:d3:e2:12:f5:e2:90:23:aa:02:a5:ed:6c:
                    aa:e1:bb:7c:a4:94:9d:6f:6f:d0:35:36:05:1f:4f:
                    ef:b6:ee:50:c1:3e:6b:67:54:f0:1b:98:c4:5f:90:
                    5a:9e:31:f3:16:a6:ab:be:e3:dd:e6:c1:71:d4:38:
                    07:b6:fa:de:1e:41:6d:db:ec:0c:47:f6:8f:3f:52:
                    de:1f:5f:42:32:08:21:46:33:96:c7:1e:78:9d:95:
                    08:dd:c2:f6:8f:49:86:85:ce:27:02:f5:5a:15:6e:
                    c1:db:03:19:00:b4:8d:17:9e:02:c0:61:17:e1:83:
                    35:2d:32:07:3b:30:36:8f:9d:fe:1d:2c:5e:39:63:
                    e7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E8:D8:5F:CB:FD:A9:C7:7F:A9:00:1B:FE:B8:8D:A9:1E:23:93:59
            X509v3 Authority Key Identifier:
                keyid:08:83:96:6B:E5:B6:85:6A:56:4C:AC:73:09:36:B0:CC:51:43:EE:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0883966BE5B6856A564CAC730936B0CC5143EE6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C4303D66338C20B9ED3DE7FE4E7DAD08F476A1D5C503595ED8465EEBE4EF76E/0/323830333a316435303a3a2f33322d3438203d3e20323639383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1d50::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:02:8e:89:80:81:24:3c:cc:3a:58:d5:fc:1f:a5:0b:1a:52:
         85:42:55:91:3e:fa:1f:d4:51:3b:35:0f:85:69:74:cf:13:2a:
         65:a0:14:cc:db:62:56:a0:09:b3:16:31:4c:69:83:e7:b1:a6:
         fb:ae:af:78:54:42:95:6c:1e:89:f4:58:b4:2c:07:ce:8e:8f:
         c2:83:11:1e:c4:ae:ed:f6:23:8b:c3:38:57:30:02:50:ec:da:
         7d:f8:04:96:ef:97:cc:58:43:51:ed:28:40:da:78:92:b4:08:
         fd:c6:d9:eb:0c:bb:70:7d:7a:99:ec:7e:70:16:d3:65:40:f6:
         e3:f2:1c:fd:7e:ae:92:1b:bb:73:03:1c:f4:14:fb:16:2b:12:
         16:3a:87:8c:d4:a4:e4:ec:b0:d6:79:7c:ec:42:76:ec:9b:b0:
         77:e9:9b:d0:23:63:a5:b7:b8:5a:79:0d:25:65:fd:39:d7:7a:
         8f:22:40:91:8e:ce:3a:ad:54:95:69:d4:41:c8:19:2a:86:0e:
         50:4a:c5:5e:40:0c:bb:1c:20:1d:12:ef:42:16:d5:0e:73:5a:
         11:82:a3:4c:da:55:ec:92:cd:4d:89:7d:da:a8:8d:77:e0:06:
         31:9a:28:2c:fb:4f:bf:8d:17:ec:11:31:74:f3:d0:14:29:a1:
         7f:92:8f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 02:57:09 2024 by rpki-client on console-fra.rpki-client.org