Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323830303a3a2f33392d3433203d3e203232343131.roa
File:                     323830333a663038303a323830303a3a2f33392d3433203d3e203232343131.roa (raw, json)
Hash identifier:          dgYrHwj7MhwRXYmrkFY6gD1KJIsIbtYIAVOZgvtiqEI=
Subject key identifier:   46:CE:94:A9:A1:37:A8:B9:BC:C0:64:09:62:7E:BF:1E:59:AA:71:02
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       4836B01600592F88A30245B87FE00FC6048785CD
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323830303a3a2f33392d3433203d3e203232343131.roa
Signing time:             Tue 09 Apr 2024 04:30:00 +0000
ROA not before:           Tue 09 Apr 2024 04:25:00 +0000
ROA not after:            Tue 08 Apr 2025 04:30:00 +0000
asID:                     22411
IP address blocks:        2803:f080:2800::/39 maxlen: 43

Validation:               Failed, certificate revoked on Tue 28 May 2024 02:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:36:b0:16:00:59:2f:88:a3:02:45:b8:7f:e0:0f:c6:04:87:85:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Apr  9 04:25:00 2024 GMT
            Not After : Apr  8 04:30:00 2025 GMT
        Subject: CN=46CE94A9A137A8B9BCC06409627EBF1E59AA7102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9f:80:00:ec:06:8c:78:eb:58:ba:10:61:44:
                    6b:27:c4:67:f0:19:3c:3c:7e:ca:d3:fe:71:c3:aa:
                    aa:89:c6:df:17:3d:d1:3f:26:5e:93:00:c2:2f:99:
                    9a:dd:f0:48:ed:2f:38:2d:75:03:23:e7:52:8a:da:
                    f8:2f:f8:3b:fc:c0:0b:09:cc:2d:78:37:b4:96:5c:
                    ba:05:75:88:c4:c2:0f:c4:01:b2:65:f1:36:27:7a:
                    3f:4c:da:20:8a:ce:e2:55:3f:97:be:bd:43:78:12:
                    89:2a:e3:54:c6:66:c7:1e:c0:63:8d:4a:89:41:f1:
                    b8:75:20:72:af:91:91:9d:d6:52:99:d4:50:1b:16:
                    74:6d:40:6e:60:4b:fb:71:a5:1b:6f:45:6e:8e:30:
                    de:72:91:ca:b6:83:66:88:49:b2:40:9a:95:d8:f3:
                    0f:44:88:d3:8a:17:16:1c:0f:b3:00:81:b5:ac:74:
                    b9:9d:ec:53:fc:0d:da:5b:1f:5f:d3:df:d1:44:a3:
                    d8:4e:0d:52:c2:71:fd:43:64:be:0a:24:ee:ad:69:
                    8b:13:fe:7c:04:37:5d:41:a8:91:7b:29:a2:9a:01:
                    0d:0c:e1:ef:4b:cd:93:98:14:20:92:e3:ad:ee:70:
                    f9:02:4b:be:06:01:bb:c3:a2:d7:8b:d0:87:fa:72:
                    ad:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CE:94:A9:A1:37:A8:B9:BC:C0:64:09:62:7E:BF:1E:59:AA:71:02
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323830303a3a2f33392d3433203d3e203232343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2800::/39

    Signature Algorithm: sha256WithRSAEncryption
         82:07:0f:da:b0:a1:45:44:7a:3c:3a:06:be:57:10:2e:2d:b2:
         5c:42:1b:d3:60:b7:5f:55:00:46:17:e1:60:94:41:60:11:a4:
         0d:52:42:01:a7:bd:39:a5:bb:09:2e:83:55:28:08:1a:3d:28:
         be:21:53:b2:08:86:3a:fa:37:5d:9f:1e:09:b8:95:2f:27:eb:
         27:a3:7a:b6:61:0c:78:1e:a3:cd:df:95:12:1f:22:4a:fd:ce:
         4a:0f:cd:71:d8:82:28:c3:c6:2d:65:c0:08:f5:67:62:cd:cc:
         40:71:dc:ca:68:82:8c:7e:91:dd:43:a2:e0:9d:7f:cb:0c:04:
         ac:e4:46:bb:90:3b:72:ca:54:03:25:50:cb:2b:86:c3:05:24:
         40:e0:81:e6:cc:5e:8b:28:87:76:1e:04:ac:4f:14:7b:54:fa:
         91:d0:c4:d6:3b:72:cf:23:12:12:55:de:2f:55:35:d8:74:97:
         d3:40:72:86:46:f7:a8:89:10:27:e2:b9:0e:61:af:c1:fc:c9:
         bf:7d:6b:65:00:e5:e2:db:93:68:35:a4:14:50:04:37:93:b6:
         67:1d:d8:ac:4c:2e:12:71:5f:cc:e4:6d:14:33:b7:6f:38:61:
         ea:85:e7:55:3d:b8:52:19:4a:bc:d9:4e:fe:7a:cd:5c:78:4c:
         b8:bc:eb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org