Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/323830313a31623a313830313a333a3a2f36342d3634203d3e203134303830.roa
File:                     323830313a31623a313830313a333a3a2f36342d3634203d3e203134303830.roa (raw, json)
Hash identifier:          Nk6G+bfWtJ5llrrV0PKmeBAy1upEWCN7wZhuA2LPy8w=
Subject key identifier:   2F:04:23:07:E8:D0:2C:28:08:53:EE:98:9C:72:39:8C:C2:33:B4:B0
Certificate issuer:       /CN=E921B16CF4E7DF02798073C6D5771DD71D9BAADD
Certificate serial:       6E63EEC9421A2908C1EC9C4ACBA19CAF7A4FA6CF
Authority key identifier: E9:21:B1:6C:F4:E7:DF:02:79:80:73:C6:D5:77:1D:D7:1D:9B:AA:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/323830313a31623a313830313a333a3a2f36342d3634203d3e203134303830.roa
Signing time:             Wed 27 Mar 2024 19:20:01 +0000
ROA not before:           Wed 27 Mar 2024 19:15:01 +0000
ROA not after:            Wed 26 Mar 2025 19:20:01 +0000
asID:                     14080
IP address blocks:        2801:1b:1801:3::/64 maxlen: 64

Validation:               Failed, certificate revoked on Mon 15 Apr 2024 19:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:63:ee:c9:42:1a:29:08:c1:ec:9c:4a:cb:a1:9c:af:7a:4f:a6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E921B16CF4E7DF02798073C6D5771DD71D9BAADD
        Validity
            Not Before: Mar 27 19:15:01 2024 GMT
            Not After : Mar 26 19:20:01 2025 GMT
        Subject: CN=2F042307E8D02C280853EE989C72398CC233B4B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:42:ed:80:a7:6d:f2:6a:71:06:eb:4b:61:23:
                    5a:10:20:9c:c6:27:a3:2a:a7:ff:63:69:ed:0e:40:
                    65:dd:77:19:d4:c1:d2:22:2a:68:72:80:6f:6a:53:
                    99:2c:0b:9a:34:14:c1:97:b0:4f:fa:f1:a7:3c:d6:
                    ff:0c:b2:db:7b:90:b0:68:91:28:74:44:52:bf:ca:
                    89:e7:f0:01:74:a3:fc:8d:90:dd:09:90:cc:e9:e4:
                    02:f1:09:7f:d7:a3:38:bf:93:da:25:a1:55:db:64:
                    aa:cb:ba:44:b5:be:66:fa:54:20:20:4e:13:ad:1c:
                    ad:2f:c2:2b:8f:af:14:a5:5c:60:f6:97:d5:f4:a8:
                    a2:da:73:57:35:5c:8e:6f:5b:99:7f:eb:9e:3a:b8:
                    c8:c6:08:18:48:ff:ef:a6:c8:56:05:fe:05:1b:db:
                    f6:22:15:90:46:2f:78:32:3e:1a:53:ae:ca:b4:62:
                    c2:32:85:78:52:5b:f6:b8:68:d6:08:5d:70:23:b3:
                    a7:9a:f4:7b:16:91:76:4b:29:ad:f1:05:d2:8b:1a:
                    d6:36:62:06:17:10:c3:8e:7d:51:cc:e0:52:31:05:
                    91:af:d9:d8:b0:e5:ee:6a:88:95:7b:88:12:e4:45:
                    28:c8:b8:ba:08:59:2b:74:17:1a:f9:d2:ff:50:0b:
                    db:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:04:23:07:E8:D0:2C:28:08:53:EE:98:9C:72:39:8C:C2:33:B4:B0
            X509v3 Authority Key Identifier:
                keyid:E9:21:B1:6C:F4:E7:DF:02:79:80:73:C6:D5:77:1D:D7:1D:9B:AA:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/323830313a31623a313830313a333a3a2f36342d3634203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:1801:3::/64

    Signature Algorithm: sha256WithRSAEncryption
         44:95:8a:3e:65:34:f1:31:23:f9:ce:68:d2:2b:46:bc:d6:5c:
         5e:91:bb:36:31:3f:87:96:c6:98:ba:78:55:80:90:63:16:ba:
         4f:8e:a0:b5:fe:e6:db:29:e9:1d:83:e4:b8:c7:71:5b:c5:b4:
         65:a4:47:b5:a8:83:ef:30:e9:48:a2:eb:0d:7e:6d:7f:0d:23:
         fd:56:7c:af:6c:c9:54:3d:d9:ea:6a:df:67:6a:d2:69:39:b3:
         a0:26:67:9e:77:14:23:6e:b5:e7:6b:a9:07:6c:8b:7d:39:89:
         41:90:40:90:c1:b3:13:3f:41:9c:ce:9f:80:d9:4c:05:34:2a:
         e5:40:d3:fa:a5:ad:85:fe:36:ef:69:4c:91:31:80:a7:62:6f:
         83:89:93:c6:ec:9d:7e:62:69:d4:87:7e:b5:33:64:39:14:fc:
         a2:27:5d:5e:7e:b9:2b:ed:e5:31:12:42:cf:db:09:17:5f:c5:
         d4:5f:0e:ab:e1:73:f5:8c:32:5b:b5:49:dc:f6:c6:8f:f2:53:
         3c:38:94:fa:88:06:c8:98:bf:70:f7:12:55:9e:c4:0f:f5:68:
         7e:22:5a:6a:0f:2d:21:e3:bd:6c:3b:3b:a3:00:87:2c:17:84:
         c4:fb:ea:fa:fc:46:8a:c8:1d:89:fa:cd:0c:b9:1a:4b:66:bb:
         a9:b0:8c:83
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUbmPuyUIaKQjB7JxKy6Gcr3pPps8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTkyMUIxNkNGNEU3REYwMjc5ODA3M0M2RDU3NzFERDcx
RDlCQUFERDAeFw0yNDAzMjcxOTE1MDFaFw0yNTAzMjYxOTIwMDFaMDMxMTAvBgNV
BAMTKDJGMDQyMzA3RThEMDJDMjgwODUzRUU5ODlDNzIzOThDQzIzM0I0QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmQu2Ap23yanEG60thI1oQIJzG
J6Mqp/9jae0OQGXddxnUwdIiKmhygG9qU5ksC5o0FMGXsE/68ac81v8Mstt7kLBo
kSh0RFK/yonn8AF0o/yNkN0JkMzp5ALxCX/Xozi/k9oloVXbZKrLukS1vmb6VCAg
ThOtHK0vwiuPrxSlXGD2l9X0qKLac1c1XI5vW5l/6546uMjGCBhI/++myFYF/gUb
2/YiFZBGL3gyPhpTrsq0YsIyhXhSW/a4aNYIXXAjs6ea9HsWkXZLKa3xBdKLGtY2
YgYXEMOOfVHM4FIxBZGv2diw5e5qiJV7iBLkRSjIuLoIWSt0Fxr50v9QC9sLAgMB
AAGjggLVMIIC0TAdBgNVHQ4EFgQULwQjB+jQLCgIU+6YnHI5jMIztLAwHwYDVR0j
BBgwFoAU6SGxbPTn3wJ5gHPG1Xcd1x2bqt0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MTFGQjkyMzBFNkY4QTFGMzg0ODhGQzdFNDE1MTkxREQ3
NjVGNkU1NDhCNDVDRDJGNDIxRjI4RTlBNENGMUNDLzAvRTkyMUIxNkNGNEU3REYw
Mjc5ODA3M0M2RDU3NzFERDcxRDlCQUFERC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTIxQjE2Q0Y0RTdERjAyNzk4
MDczQzZENTc3MURENzFEOUJBQURELmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzExRkI5MjMwRTZGOEExRjM4NDg4RkM3RTQxNTE5MURENzY1RjZFNTQ4
QjQ1Q0QyRjQyMUYyOEU5QTRDRjFDQy8wLzMyMzgzMDMxM2EzMTYyM2EzMTM4MzAz
MTNhMzMzYTNhMmYzNjM0MmQzNjM0MjAzZDNlMjAzMTM0MzAzODMwLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjAL
AwkAKAEAGxgBAAMwDQYJKoZIhvcNAQELBQADggEBAESVij5lNPExI/nOaNIrRrzW
XF6RuzYxP4eWxpi6eFWAkGMWuk+OoLX+5tsp6R2D5LjHcVvFtGWkR7Wog+8w6Uii
6w1+bX8NI/1WfK9syVQ92epq32dq0mk5s6AmZ553FCNutedrqQdsi305iUGQQJDB
sxM/QZzOn4DZTAU0KuVA0/qlrYX+Nu9pTJExgKdib4OJk8bsnX5iadSHfrUzZDkU
/KInXV5+uSvt5TESQs/bCRdfxdRfDqvhc/WMMlu1Sdz2xo/yUzw4lPqIBsiYv3D3
ElWexA/1aH4iWmoPLSHjvWw7O6MAhywXhMT76vr8RorIHYn6zQy5Gktmu6mwjIM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org