Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/323830333a323634303a3a2f33322d3332203d3e20323632353839.roa
File:                     323830333a323634303a3a2f33322d3332203d3e20323632353839.roa (raw, json)
Hash identifier:          I5vKAQqkTuYQjMeAeBivh1G0Z9XBDBkEuOPOVgUqRa8=
Subject key identifier:   04:60:30:94:27:FC:B8:28:B1:01:AF:16:92:B3:CA:00:48:71:5A:E3
Certificate issuer:       /CN=E5AE7BFB852947BC2524209953A000E85EF4362B
Certificate serial:       0BBDB6B4A5AC2F48585852F06F25FB27B63E23BE
Authority key identifier: E5:AE:7B:FB:85:29:47:BC:25:24:20:99:53:A0:00:E8:5E:F4:36:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/323830333a323634303a3a2f33322d3332203d3e20323632353839.roa
Signing time:             Fri 12 Apr 2024 16:20:00 +0000
ROA not before:           Fri 12 Apr 2024 16:15:00 +0000
ROA not after:            Fri 11 Apr 2025 16:20:00 +0000
asID:                     262589
IP address blocks:        2803:2640::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 23 Apr 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bd:b6:b4:a5:ac:2f:48:58:58:52:f0:6f:25:fb:27:b6:3e:23:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5AE7BFB852947BC2524209953A000E85EF4362B
        Validity
            Not Before: Apr 12 16:15:00 2024 GMT
            Not After : Apr 11 16:20:00 2025 GMT
        Subject: CN=0460309427FCB828B101AF1692B3CA0048715AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:31:84:02:28:d3:b0:0c:ad:3e:68:fd:17:
                    13:c7:a2:7a:5b:7f:1a:40:bb:c0:16:4d:f1:06:2c:
                    38:2a:c9:be:2c:77:f6:b5:30:58:5d:e6:55:b8:4c:
                    25:4f:bd:3f:37:dd:91:c0:c0:a0:1c:fd:ab:fb:33:
                    8e:22:de:d6:d3:1b:3d:d4:1c:d3:5f:42:b7:d3:84:
                    d3:49:58:9f:c8:e8:79:c9:7c:0b:34:99:d1:bf:e1:
                    76:32:89:be:45:90:12:cc:5e:fa:1c:63:74:c0:93:
                    23:b6:3b:f7:04:4b:ad:68:78:ba:84:9b:55:2e:df:
                    25:bc:44:c7:15:46:c2:db:2a:6c:90:c8:e6:8b:c3:
                    dd:d3:f4:d9:4c:54:6a:b1:4f:55:6a:0c:8f:89:18:
                    7c:3a:ce:ae:62:e8:e3:bf:f6:cc:3d:81:15:34:77:
                    cf:ae:d7:ec:5b:c6:36:d6:65:1b:c7:6c:1f:d6:37:
                    bc:8c:b3:68:ec:c3:ff:2c:e1:24:ac:4c:b3:e3:a8:
                    cc:f4:3a:77:d5:14:82:04:64:3e:a4:52:47:db:c6:
                    a1:71:f7:f6:a4:a6:b6:24:e6:1d:90:b8:57:e4:fc:
                    b1:16:4c:4a:4a:d5:ac:9e:04:c3:f1:c9:a1:17:15:
                    0d:c7:67:12:33:cd:1a:e7:4e:38:f9:5e:03:50:f0:
                    5d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:60:30:94:27:FC:B8:28:B1:01:AF:16:92:B3:CA:00:48:71:5A:E3
            X509v3 Authority Key Identifier:
                keyid:E5:AE:7B:FB:85:29:47:BC:25:24:20:99:53:A0:00:E8:5E:F4:36:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/E5AE7BFB852947BC2524209953A000E85EF4362B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5AE7BFB852947BC2524209953A000E85EF4362B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/935133284B71DF4329FE412C565283F065D55FA6723524FEB38923B3C4DE532F/0/323830333a323634303a3a2f33322d3332203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2640::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:ad:96:27:eb:2a:8a:ef:71:73:dc:3c:26:66:d1:e3:29:79:
         16:92:3e:ff:a1:b2:ad:62:ca:a6:8f:38:95:39:86:47:93:23:
         e7:5b:44:3c:2a:af:93:6b:95:d0:a4:ee:79:38:7a:28:4e:7d:
         18:90:1f:28:32:4a:31:5d:83:41:b8:da:d6:e4:cf:72:26:9b:
         d4:30:4f:ec:3d:92:53:f2:a3:69:9f:5d:8c:ad:69:cd:46:5e:
         e8:12:32:42:78:b0:3f:ed:98:fa:bf:06:97:98:cd:71:b0:cc:
         08:35:a2:ab:57:fd:02:2b:82:bd:33:75:6d:6d:17:0f:17:d5:
         6f:e2:38:91:81:bd:c0:a3:f8:1c:dd:96:8b:0a:f5:75:d5:e1:
         77:e8:6a:e4:38:d6:8a:f1:dc:7c:93:04:08:d3:d2:3e:df:a6:
         49:ef:b1:6d:64:23:c1:a5:c2:a7:56:73:ca:b0:94:10:2c:81:
         bd:7d:d7:cf:ea:69:b9:5d:ee:75:29:b8:8e:2a:49:bd:82:94:
         3c:c1:49:56:7b:7b:f5:ff:77:97:ea:4b:8f:26:fd:d8:ba:1b:
         b7:e0:f5:f1:c2:3f:fe:27:72:79:ee:77:05:9a:7c:a1:0a:27:
         22:19:ae:9c:da:c5:23:37:b0:38:ff:32:1c:ee:67:cb:44:d9:
         08:d7:de:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org