Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/323830333a383932303a3a2f33322d3332203d3e20323636363733.roa
File:                     323830333a383932303a3a2f33322d3332203d3e20323636363733.roa (raw, json)
Hash identifier:          eGSRmwfYBCZHqgt53nwg2I6fEQIvyn8sYGdpDd4QkIA=
Subject key identifier:   1A:A1:FE:63:DB:54:53:00:02:34:F3:51:CF:D8:4A:62:35:04:01:91
Certificate issuer:       /CN=D762BD634950F86F90198996258F5C888AE2933E
Certificate serial:       752C52F8C517BBE10CC15082A3F1A0D76887FE83
Authority key identifier: D7:62:BD:63:49:50:F8:6F:90:19:89:96:25:8F:5C:88:8A:E2:93:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D762BD634950F86F90198996258F5C888AE2933E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/323830333a383932303a3a2f33322d3332203d3e20323636363733.roa
Signing time:             Tue 05 Mar 2024 18:07:42 +0000
ROA not before:           Tue 05 Mar 2024 18:02:42 +0000
ROA not after:            Tue 04 Mar 2025 18:07:42 +0000
asID:                     266673
IP address blocks:        2803:8920::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 21 May 2024 03:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:2c:52:f8:c5:17:bb:e1:0c:c1:50:82:a3:f1:a0:d7:68:87:fe:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D762BD634950F86F90198996258F5C888AE2933E
        Validity
            Not Before: Mar  5 18:02:42 2024 GMT
            Not After : Mar  4 18:07:42 2025 GMT
        Subject: CN=1AA1FE63DB5453000234F351CFD84A6235040191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2c:ee:00:f6:d1:3c:7a:25:82:e0:57:ee:52:
                    a2:2a:58:44:30:2e:c5:e6:5f:f7:b2:c6:01:99:ff:
                    b8:04:66:ca:8d:63:2b:53:6b:9a:c4:9d:d0:f0:b2:
                    7b:30:4c:28:78:5a:5b:13:ff:52:06:34:fa:ca:06:
                    80:a4:22:1e:97:9e:0b:82:37:e0:ff:c5:b8:39:8e:
                    54:fb:8a:15:f4:6f:24:40:02:1f:8b:33:06:3e:58:
                    28:a4:e8:58:68:d5:f3:d6:b3:01:25:a7:84:af:e8:
                    a1:72:a7:ad:94:ca:48:a3:9a:cc:19:5d:6b:1c:62:
                    87:66:d1:d5:3c:ca:c4:df:9a:b8:92:57:da:8d:a1:
                    93:91:0b:3d:2d:d8:df:de:5b:15:42:82:df:cb:94:
                    fd:a0:ec:d4:80:7a:5a:99:b6:79:54:0c:0e:1b:b8:
                    ca:de:eb:42:c4:4c:86:c4:a5:f8:4c:7c:14:ee:c0:
                    58:76:7e:a3:bf:cf:13:e1:16:b0:5b:26:8a:73:e9:
                    3c:20:0f:d4:74:81:22:4a:da:73:ee:b1:b9:dc:fc:
                    3f:17:d9:1f:a9:ba:4c:a9:a4:dc:4d:cf:9f:a7:a6:
                    6a:f0:bf:c4:3e:53:4d:f4:54:74:27:23:1c:6f:ec:
                    02:f9:35:c7:72:a8:61:fa:80:7d:aa:54:4a:c3:e0:
                    4e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A1:FE:63:DB:54:53:00:02:34:F3:51:CF:D8:4A:62:35:04:01:91
            X509v3 Authority Key Identifier:
                keyid:D7:62:BD:63:49:50:F8:6F:90:19:89:96:25:8F:5C:88:8A:E2:93:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/D762BD634950F86F90198996258F5C888AE2933E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D762BD634950F86F90198996258F5C888AE2933E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/323830333a383932303a3a2f33322d3332203d3e20323636363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8920::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:04:0a:63:c9:fa:24:4e:bd:f5:ef:38:90:af:04:0d:8b:08:
         75:11:32:78:01:4d:2c:51:89:a2:98:f0:0b:00:34:24:12:a1:
         f0:de:1c:c2:5b:c2:df:37:e4:3d:0b:81:1a:90:62:f1:41:1e:
         f9:c8:df:1f:6f:c5:6a:90:ff:29:d4:77:82:33:dd:d1:69:78:
         b4:2d:1e:c5:67:14:9e:51:a3:44:a6:05:cc:cc:f7:28:81:1b:
         ad:bc:8b:54:c6:3a:84:72:c0:11:2e:dc:f8:67:96:e9:45:1e:
         d5:e2:90:28:eb:63:98:b9:86:98:d2:49:8f:d7:ba:64:32:e4:
         49:d6:80:70:67:47:3e:1d:a4:36:cb:1f:ba:a9:f0:4c:92:66:
         fb:ce:da:7e:0c:72:ae:dc:db:d9:2d:d7:71:4c:18:ef:ad:31:
         85:f7:f8:b5:83:81:98:28:80:b2:ca:ec:26:5c:c3:80:d2:b9:
         04:70:ea:a1:0f:09:53:06:03:d0:08:a7:8a:8f:73:e9:24:fc:
         43:95:78:96:a3:e6:3f:2b:33:e1:9a:50:fc:5d:a9:e9:3f:0b:
         c0:a8:c2:6c:23:46:17:55:8e:cd:c2:36:33:14:ce:46:9c:7b:
         a7:94:8f:7a:25:bf:14:97:f6:cc:72:f8:df:89:47:f0:ec:17:
         a2:5b:0b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org