Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/323830333a666338303a3a2f33322d3332203d3e2030.roa
File:                     323830333a666338303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier:          l0bjeKAGx9ZG6MQzzwmaQAg02oXjWfwj+xVi94LtFDc=
Subject key identifier:   5C:0C:88:46:90:E7:9E:28:02:D3:BC:62:EB:F2:66:CF:CD:F0:65:35
Certificate issuer:       /CN=53B392C71D73A953C0321875651DEFD6AC96AE92
Certificate serial:       4AA44BE46D0F9EACE50EF4DDF513A909FE770FC3
Authority key identifier: 53:B3:92:C7:1D:73:A9:53:C0:32:18:75:65:1D:EF:D6:AC:96:AE:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B392C71D73A953C0321875651DEFD6AC96AE92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/323830333a666338303a3a2f33322d3332203d3e2030.roa
Signing time:             Thu 05 Dec 2024 16:00:00 +0000
ROA not before:           Thu 05 Dec 2024 15:55:00 +0000
ROA not after:            Thu 04 Dec 2025 16:00:00 +0000
asID:                     0
IP address blocks:        2803:fc80::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 05 Dec 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a4:4b:e4:6d:0f:9e:ac:e5:0e:f4:dd:f5:13:a9:09:fe:77:0f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B392C71D73A953C0321875651DEFD6AC96AE92
        Validity
            Not Before: Dec  5 15:55:00 2024 GMT
            Not After : Dec  4 16:00:00 2025 GMT
        Subject: CN=5C0C884690E79E2802D3BC62EBF266CFCDF06535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ce:89:95:2f:f7:9b:1a:e4:4e:93:3e:0a:fb:
                    7a:74:ed:a1:bc:b1:2b:fa:92:e6:e2:8d:6f:b4:3a:
                    8b:72:0e:a2:b1:51:5b:98:fd:5e:3e:8e:cc:a1:b5:
                    1b:3d:91:03:76:71:9d:97:43:21:5c:7c:67:8e:f4:
                    19:51:26:ca:9e:4e:02:1b:b0:01:44:72:68:e9:0f:
                    fd:ff:b4:3a:34:39:ed:8c:c0:78:12:4b:32:51:61:
                    31:2f:76:3c:ea:77:cb:4b:bb:69:f8:b0:1f:ec:4b:
                    d9:c1:2f:3d:ee:d2:27:a7:0d:ea:e0:71:a7:b2:03:
                    d3:47:1c:70:36:6a:3c:44:07:8e:4f:c3:01:32:6d:
                    33:8f:c9:4d:4c:66:60:d0:18:c8:d7:78:4b:2f:9b:
                    72:e9:b2:c6:a6:9d:72:2d:71:ce:ce:6b:4b:67:54:
                    09:f2:f8:97:00:ea:45:0d:df:e8:99:f8:cc:da:bc:
                    95:1b:73:7c:51:39:6b:37:4e:78:a5:b6:c3:f4:44:
                    29:71:0a:26:29:4e:52:47:6f:22:11:3b:e8:60:c8:
                    6f:90:e9:65:f7:85:a4:ab:b1:95:bc:ac:97:0e:61:
                    26:b8:a2:15:b5:6c:dd:92:3d:81:38:22:2f:20:3b:
                    ab:27:d8:62:13:27:d9:f5:5f:29:2c:32:bc:c2:88:
                    4d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0C:88:46:90:E7:9E:28:02:D3:BC:62:EB:F2:66:CF:CD:F0:65:35
            X509v3 Authority Key Identifier:
                keyid:53:B3:92:C7:1D:73:A9:53:C0:32:18:75:65:1D:EF:D6:AC:96:AE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/53B392C71D73A953C0321875651DEFD6AC96AE92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B392C71D73A953C0321875651DEFD6AC96AE92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4F49EA5D743B9725E819DBB7672A985D91E7338525FDC41210BD02ABC351422/0/323830333a666338303a3a2f33322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fc80::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:bc:93:3c:9f:09:32:f0:ce:54:44:c3:82:90:4e:6f:7e:2f:
         6e:9e:d8:33:df:67:b8:12:eb:30:52:61:ec:bb:c0:54:25:06:
         a1:a6:d7:9d:aa:f8:fa:34:6d:1e:6b:55:1a:4b:68:25:7b:a6:
         49:fa:4f:e2:d8:b3:3a:bb:3e:3e:bb:94:83:73:36:5e:c4:fd:
         ec:b8:98:eb:37:57:8b:6c:7e:65:af:1e:45:38:88:3f:dd:cb:
         e5:95:45:f3:91:c7:d5:ba:5c:66:16:90:44:a7:e3:3a:2a:08:
         a2:55:01:05:19:9c:50:d1:b7:f4:59:69:a4:9f:83:c3:aa:52:
         40:31:91:c2:7e:3a:0b:95:38:f0:9c:01:e5:1b:1b:0e:28:6b:
         99:a7:a7:35:43:cf:c0:6b:a9:96:99:e2:a9:cb:7c:ec:6d:26:
         d5:6b:6a:2e:02:d3:52:e2:ca:07:c1:37:c1:36:0f:b3:85:cb:
         7a:40:a8:4c:f6:ab:c7:d5:a4:29:c0:99:7b:f9:0d:70:a1:02:
         50:8a:01:6a:4f:0e:70:d8:b3:14:cc:bb:e5:ef:15:42:06:06:
         ca:99:fd:4a:49:31:a8:f9:bd:f5:ac:2c:07:08:61:a9:e8:8b:
         c7:24:68:1f:b1:2c:37:b5:fc:0b:84:d9:ee:3b:26:e2:92:d2:
         1f:82:18:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 6 00:39:39 2024 by rpki-client on console-ams.rpki-client.org