Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326130303a3a2f33392d3433203d3e20323635363931.roa
File:                     323830333a663038303a326130303a3a2f33392d3433203d3e20323635363931.roa (raw, json)
Hash identifier:          63yomzFwWyAJqQWZkHVyNdlGqvlc3Csz2KifiuOvEvk=
Subject key identifier:   74:2A:E8:E1:1A:E4:88:26:11:06:F4:A7:81:FA:04:5E:A1:1B:22:5E
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       7B26F7D30AF9AA5201A88E9A0249040E2691FA48
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326130303a3a2f33392d3433203d3e20323635363931.roa
Signing time:             Tue 09 Apr 2024 04:30:00 +0000
ROA not before:           Tue 09 Apr 2024 04:25:00 +0000
ROA not after:            Tue 08 Apr 2025 04:30:00 +0000
asID:                     265691
IP address blocks:        2803:f080:2a00::/39 maxlen: 43

Validation:               Failed, certificate revoked on Fri 19 Apr 2024 04:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:26:f7:d3:0a:f9:aa:52:01:a8:8e:9a:02:49:04:0e:26:91:fa:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Apr  9 04:25:00 2024 GMT
            Not After : Apr  8 04:30:00 2025 GMT
        Subject: CN=742AE8E11AE488261106F4A781FA045EA11B225E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:60:d0:00:60:43:09:1b:66:95:3f:b9:fd:
                    66:be:eb:00:fd:4d:6c:6a:39:1a:d9:26:a0:c5:6b:
                    0e:71:1a:7c:94:12:28:5e:45:8e:d0:2b:e0:d0:d8:
                    6d:69:a3:18:b4:3f:ca:e2:98:35:fe:fd:bc:7c:f7:
                    47:9e:00:cd:9c:e2:c7:3f:4e:64:7f:94:61:c2:7e:
                    4b:ac:b9:d4:0b:99:ba:27:51:d4:ff:74:dd:e9:63:
                    4b:1e:a6:27:ee:fe:11:e8:96:41:07:1b:01:92:2e:
                    53:ee:c5:45:bb:a6:91:12:4d:5f:85:c0:d4:44:10:
                    79:cb:91:dc:27:b2:57:0e:4a:fa:de:e2:00:ab:68:
                    40:a8:1d:fd:fa:ad:39:3b:3c:91:9f:25:f4:b5:09:
                    b6:a5:e7:37:55:67:bc:08:75:5a:34:19:98:fd:30:
                    11:c2:ba:60:15:93:7a:e8:49:d5:d3:8e:1b:af:64:
                    5c:9c:9f:a8:02:ad:f2:af:15:03:b1:ec:7e:ce:ac:
                    ea:28:ee:15:77:35:63:f9:0a:06:7d:fd:20:94:33:
                    a5:70:f5:a6:1d:fa:26:d1:d6:81:d3:44:d4:03:c3:
                    ef:fe:9b:3a:00:2c:49:ee:68:c7:1f:c6:1f:64:f0:
                    f2:f2:63:7b:e1:32:1e:be:dd:49:75:6f:8b:2e:c1:
                    27:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2A:E8:E1:1A:E4:88:26:11:06:F4:A7:81:FA:04:5E:A1:1B:22:5E
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326130303a3a2f33392d3433203d3e20323635363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2a00::/39

    Signature Algorithm: sha256WithRSAEncryption
         2a:0e:6b:15:91:53:a5:12:bf:cb:31:e4:2d:dd:ec:02:98:38:
         74:ff:ac:2a:7b:70:e5:f3:db:e6:2e:1e:2c:e5:43:6f:4f:f6:
         e5:5c:cf:37:b5:4d:6e:47:40:a8:fa:a9:51:73:e3:1a:6b:4f:
         34:42:26:a6:e5:9d:06:de:9c:11:4f:5a:8b:5d:e0:d1:30:59:
         88:65:8e:c5:4a:45:bb:55:f1:c8:e5:49:1b:14:7f:40:0f:4a:
         97:fc:1a:9d:4f:b4:88:9b:51:81:82:de:6d:5e:ce:e5:63:e1:
         e9:c4:f8:a5:5f:8f:14:1c:98:b6:48:ff:54:aa:cb:3c:ac:f2:
         6c:dc:b8:0d:16:2a:34:0d:0e:60:b1:b0:75:9d:84:4b:e6:86:
         c5:a7:e1:e7:21:31:8c:1f:d0:e4:53:b2:58:8b:ab:dd:f7:1f:
         ac:3d:3e:5b:a7:08:0c:69:dd:6e:de:64:6e:71:cf:13:b3:a1:
         62:c9:52:26:b9:04:c0:2f:9f:88:b4:e1:86:5b:7f:6d:88:9b:
         1a:d1:9c:6f:3c:e4:db:51:b9:34:9f:b3:3e:53:3b:8c:29:bd:
         bd:fc:4f:6c:a3:8c:bc:b7:cc:3e:de:fe:11:c6:e1:18:26:97:
         f3:59:9a:cc:db:04:d7:9d:3a:0d:af:31:09:0d:ce:b7:c2:b6:
         1c:18:be:c1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org