Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323630303a3a2f33392d3433203d3e20323632323130.roa
File:                     323830333a663038303a323630303a3a2f33392d3433203d3e20323632323130.roa (raw, json)
Hash identifier:          vZz0YkLpIpWQZGxLjP/m7x+/OObVYGuNYNOat/LU1is=
Subject key identifier:   90:24:DB:91:23:1E:B9:4F:8E:9E:83:93:12:27:E8:EB:D6:6F:D7:D4
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       2CD950648655100ADA94D22206296FDDE08320C2
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323630303a3a2f33392d3433203d3e20323632323130.roa
Signing time:             Tue 09 Apr 2024 04:40:00 +0000
ROA not before:           Tue 09 Apr 2024 04:35:00 +0000
ROA not after:            Tue 08 Apr 2025 04:40:00 +0000
asID:                     262210
IP address blocks:        2803:f080:2600::/39 maxlen: 43

Validation:               Failed, certificate revoked on Tue 28 May 2024 02:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d9:50:64:86:55:10:0a:da:94:d2:22:06:29:6f:dd:e0:83:20:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Apr  9 04:35:00 2024 GMT
            Not After : Apr  8 04:40:00 2025 GMT
        Subject: CN=9024DB91231EB94F8E9E83931227E8EBD66FD7D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:12:84:c4:11:fb:4c:b5:6c:47:06:fd:67:01:
                    27:a0:cf:de:bc:fd:a8:1b:ff:eb:dd:3c:18:8a:47:
                    02:2c:b7:39:81:30:92:2b:1c:a8:ca:a4:9d:26:2c:
                    98:e0:cc:73:61:7b:60:5c:3a:0f:00:de:f4:de:64:
                    d9:b0:87:1d:b0:67:3c:29:24:29:81:57:88:94:fe:
                    65:1c:dd:72:59:b4:55:85:bf:f0:c1:62:3f:d7:c9:
                    6a:a2:a1:c4:9c:a8:d7:c4:9a:eb:11:df:a1:7e:e7:
                    06:c2:64:64:2a:16:c6:32:31:58:1a:bc:0a:b1:93:
                    6e:e4:7f:d6:78:4d:d9:90:62:31:96:ca:13:62:11:
                    1d:0e:0a:a7:bf:ec:6a:8f:59:c1:90:b3:d7:a3:cc:
                    82:8f:c3:d3:48:98:21:89:72:e0:4f:8a:89:cf:89:
                    9b:da:bd:16:48:ce:5d:31:4c:80:35:82:7b:8a:f0:
                    1a:d1:c1:97:a4:10:f4:6e:3a:70:95:eb:8f:a5:dc:
                    d4:96:59:a0:51:64:d7:97:dd:b3:38:b7:b1:48:8d:
                    94:ec:b7:a9:0b:d9:7b:f7:ac:c7:6b:ea:69:5e:ed:
                    32:eb:a9:a1:a6:36:57:29:37:99:cb:fa:8a:a6:14:
                    58:5a:e4:7b:5d:99:fe:e3:73:fe:71:6d:58:31:76:
                    99:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:24:DB:91:23:1E:B9:4F:8E:9E:83:93:12:27:E8:EB:D6:6F:D7:D4
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323630303a3a2f33392d3433203d3e20323632323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2600::/39

    Signature Algorithm: sha256WithRSAEncryption
         3f:e4:20:f4:03:94:47:66:aa:15:7a:d2:fd:66:c4:db:dc:ee:
         e6:cb:35:e3:ac:70:ed:92:99:57:c9:1b:da:6e:00:3a:68:42:
         e3:d8:53:99:58:24:36:cb:fd:20:2e:6b:51:8f:05:41:ca:28:
         52:a5:ca:c9:1c:f6:55:f0:c4:e4:5c:88:cd:6b:2b:4a:6e:f9:
         7b:4e:6a:68:03:0e:fe:2c:3d:08:9a:fd:76:69:f0:4b:92:a4:
         d1:6d:65:45:69:ff:4f:78:dd:85:fa:84:3e:1a:5b:15:af:61:
         38:e9:ab:b7:54:d3:4a:a4:c8:21:25:ca:c6:12:4e:55:e4:c1:
         58:2a:c4:90:57:9e:a4:a9:6f:13:d7:a2:d9:e5:50:76:cf:93:
         dc:f9:57:3c:38:98:76:83:bc:d3:64:3a:83:37:cc:29:e7:15:
         e9:14:b6:12:2d:66:7e:15:ad:e4:14:1d:80:64:78:cf:d0:a3:
         1c:6f:3a:41:e1:5f:36:37:fc:e6:14:d8:4c:a5:65:6f:27:57:
         18:c1:35:80:e8:0b:55:97:ef:ae:26:d3:9e:36:fa:ae:1b:72:
         d7:4a:4e:05:ce:30:e2:c5:e3:3f:a0:59:b4:dc:f4:ec:6a:2f:
         cc:c6:1c:1f:aa:2c:f8:9e:f9:b8:fa:ef:56:f6:d8:f1:88:1f:
         be:a4:2a:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org