Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/323830333a626663303a3a2f34372d3438203d3e20323635373837.roa
File:                     323830333a626663303a3a2f34372d3438203d3e20323635373837.roa (raw, json)
Hash identifier:          5O0c4W6T9eiOLjtQoWW20h83F856140/I3ILSWWL/HE=
Subject key identifier:   B4:24:C5:84:06:68:90:2C:08:4C:B3:22:1B:07:27:2F:54:B8:54:35
Certificate issuer:       /CN=7CE45D98F41C9AB7061F84A19C190414D5CB4FCA
Certificate serial:       379B2BD1461524A836932583E1A4655E4ACC68CB
Authority key identifier: 7C:E4:5D:98:F4:1C:9A:B7:06:1F:84:A1:9C:19:04:14:D5:CB:4F:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/323830333a626663303a3a2f34372d3438203d3e20323635373837.roa
Signing time:             Mon 06 May 2024 15:55:00 +0000
ROA not before:           Mon 06 May 2024 15:50:00 +0000
ROA not after:            Mon 05 May 2025 15:55:00 +0000
asID:                     265787
IP address blocks:        2803:bfc0::/47 maxlen: 48

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9b:2b:d1:46:15:24:a8:36:93:25:83:e1:a4:65:5e:4a:cc:68:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE45D98F41C9AB7061F84A19C190414D5CB4FCA
        Validity
            Not Before: May  6 15:50:00 2024 GMT
            Not After : May  5 15:55:00 2025 GMT
        Subject: CN=B424C5840668902C084CB3221B07272F54B85435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ec:0b:09:6d:03:7b:50:c6:43:25:43:3b:84:
                    48:c8:24:c3:16:3d:10:b8:68:50:ba:fd:84:26:2e:
                    1d:ba:83:db:34:bf:1f:2e:72:5d:07:4e:a0:ce:7a:
                    23:10:f7:d0:ea:10:6b:22:59:0e:46:a0:ec:b4:9a:
                    c0:14:d3:6f:67:9f:19:46:dc:28:b4:47:49:63:50:
                    da:18:29:6c:e6:39:ce:2e:5e:0b:de:e8:06:1f:6d:
                    90:6d:9a:0a:3d:42:a8:5a:ba:bf:17:59:a0:4c:91:
                    b2:5a:26:77:c3:6e:87:7d:fa:b7:88:2c:ce:41:ff:
                    fb:16:4b:b1:a8:7c:e0:20:36:c0:67:b7:84:c1:5a:
                    b8:20:d0:f7:d5:be:39:ec:a2:f7:c9:14:e9:3f:10:
                    23:de:a3:fe:c8:19:3f:26:25:49:00:92:68:c6:2c:
                    33:6f:7c:7b:c1:f7:f6:32:5d:37:d4:b9:86:1f:0a:
                    61:6b:2f:66:4c:d6:2f:14:3e:db:a5:e7:f3:16:b8:
                    93:8f:55:5d:1f:e4:a0:1a:30:bd:86:37:de:a5:ac:
                    48:2d:89:7d:8c:dc:03:e2:ed:f2:af:97:10:68:2d:
                    28:41:79:c4:99:58:ab:e0:f7:50:d5:0c:a3:db:96:
                    8d:eb:5f:b7:c8:25:46:61:39:ea:75:9b:c4:ca:e1:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:24:C5:84:06:68:90:2C:08:4C:B3:22:1B:07:27:2F:54:B8:54:35
            X509v3 Authority Key Identifier:
                keyid:7C:E4:5D:98:F4:1C:9A:B7:06:1F:84:A1:9C:19:04:14:D5:CB:4F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/323830333a626663303a3a2f34372d3438203d3e20323635373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bfc0::/47

    Signature Algorithm: sha256WithRSAEncryption
         6f:75:a7:6b:92:8d:3f:97:cc:e5:c5:94:f3:db:e5:5f:28:ea:
         41:c0:bb:12:c2:3e:4a:33:5e:b9:8b:31:0f:fa:d8:ab:0f:2e:
         30:7c:d6:c5:a3:00:b2:07:d8:47:db:9b:4b:3f:82:62:1e:c8:
         da:c6:02:fd:fe:ea:8b:19:40:78:5a:b5:bd:0c:13:7a:80:e3:
         c8:61:8c:4e:d1:74:d1:f3:c6:42:8b:aa:8d:ec:d6:48:d2:3c:
         b0:24:77:8d:d0:13:bb:2c:66:ea:f4:dd:71:28:99:f9:02:4b:
         87:dc:f4:1a:49:85:d6:07:f0:17:2b:2a:02:48:51:04:a3:b9:
         c4:86:63:1c:0b:9e:bf:20:30:4c:04:85:d5:55:b6:cf:5b:60:
         ab:0d:f7:88:56:f1:55:6b:93:50:ff:9a:97:b8:8e:3a:fb:6a:
         33:5a:be:9d:de:81:7a:c8:df:24:c7:ed:12:46:58:0a:9c:d9:
         3d:a3:30:e2:4a:33:ed:c6:d8:fd:98:df:2e:ca:f2:58:0a:92:
         01:84:b9:bf:4b:fe:e7:09:71:72:22:0c:17:1c:29:a7:47:d9:
         61:a2:7f:98:81:bf:b9:7b:5e:c7:c8:0e:e0:02:68:7b:72:2f:
         26:11:ee:1d:04:b6:3a:e0:05:13:8d:00:2f:17:8d:23:a5:00:
         03:d9:84:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 04:54:41 2024 by rpki-client on console-fra.rpki-client.org