Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/323830333a623835303a3a2f33322d3634203d3e20323733313230.roa
File:                     323830333a623835303a3a2f33322d3634203d3e20323733313230.roa (raw, json)
Hash identifier:          9NSJjau4pH8qycvBChVr1dxZRkorOx94LkuDR8YWedg=
Subject key identifier:   32:C5:C5:5C:A0:E2:0C:D6:05:E2:54:06:0D:EA:EE:15:B0:26:53:C9
Certificate issuer:       /CN=F7E5D35C28040109AAC60DF0410F2FF50CBF37EC
Certificate serial:       71E1988B1171102E8ED563C10F727E035A97CC36
Authority key identifier: F7:E5:D3:5C:28:04:01:09:AA:C6:0D:F0:41:0F:2F:F5:0C:BF:37:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/323830333a623835303a3a2f33322d3634203d3e20323733313230.roa
Signing time:             Tue 05 Mar 2024 18:08:27 +0000
ROA not before:           Tue 05 Mar 2024 18:03:27 +0000
ROA not after:            Tue 04 Mar 2025 18:08:27 +0000
asID:                     273120
IP address blocks:        2803:b850::/32 maxlen: 64

Validation:               Failed, certificate revoked on Fri 03 May 2024 14:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e1:98:8b:11:71:10:2e:8e:d5:63:c1:0f:72:7e:03:5a:97:cc:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7E5D35C28040109AAC60DF0410F2FF50CBF37EC
        Validity
            Not Before: Mar  5 18:03:27 2024 GMT
            Not After : Mar  4 18:08:27 2025 GMT
        Subject: CN=32C5C55CA0E20CD605E254060DEAEE15B02653C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:f0:da:50:44:89:63:07:af:5b:5b:06:8d:
                    79:92:06:14:dd:fd:e0:d0:47:1e:7e:26:15:b9:66:
                    73:bf:10:d1:3c:08:d6:fd:86:ef:93:54:b0:09:31:
                    fe:92:00:d7:31:e1:13:cd:a1:06:47:51:cd:4f:fe:
                    39:2d:c2:7f:6e:24:92:c4:05:52:d4:44:40:db:4d:
                    88:83:bc:e5:f2:a1:17:7a:5c:e0:47:65:1c:f7:de:
                    6a:c3:ff:1f:c5:2a:10:60:f9:c7:5b:4a:b1:10:67:
                    d9:63:d4:d9:d4:1c:e0:3a:f3:b1:4e:14:63:0c:65:
                    d2:78:e8:a5:3e:75:4a:d2:39:24:c1:a2:f3:58:c5:
                    da:bc:8d:a8:cd:7d:71:08:75:62:ff:6f:fe:05:38:
                    c7:a3:c0:71:92:d7:0c:11:4e:63:e3:2e:ef:bf:2e:
                    f6:59:37:b7:5b:29:01:45:c6:57:ed:72:a9:fd:49:
                    c7:ca:86:3c:99:23:03:36:81:d2:a1:c4:80:b3:37:
                    86:27:33:93:0b:c2:a4:a7:fa:30:c1:76:33:ea:16:
                    94:b1:00:1a:46:f9:4f:f5:8f:ec:84:19:8c:90:a5:
                    b9:41:ed:4e:8d:9f:31:da:12:d9:bb:1e:3f:71:a5:
                    b2:ed:ea:c9:5b:d7:2f:3a:78:8b:39:ae:c3:16:39:
                    f4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C5:C5:5C:A0:E2:0C:D6:05:E2:54:06:0D:EA:EE:15:B0:26:53:C9
            X509v3 Authority Key Identifier:
                keyid:F7:E5:D3:5C:28:04:01:09:AA:C6:0D:F0:41:0F:2F:F5:0C:BF:37:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7E5D35C28040109AAC60DF0410F2FF50CBF37EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC849B5308C778291D4F6228570D83165E44FBCCC91C5897ADD81197CCF7B2D/0/323830333a623835303a3a2f33322d3634203d3e20323733313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b850::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:fb:36:ee:d1:5d:a3:f5:80:f7:fb:42:28:f0:d7:da:3d:5c:
         37:c8:73:9a:17:be:0f:36:04:70:be:29:21:fe:56:24:56:bc:
         4a:09:c7:ac:b4:59:16:c6:44:02:80:84:02:e0:09:ab:b7:5c:
         1a:bb:35:7e:f9:e6:54:de:c6:06:15:98:64:13:ea:ab:49:c4:
         b3:a2:0e:30:82:4e:71:9f:13:8b:11:8c:bf:1f:60:00:73:82:
         a9:aa:28:1e:eb:c0:df:9d:cb:ac:09:cc:97:bf:26:ea:ca:4f:
         61:bb:53:1a:d7:08:f8:10:dc:66:e4:5d:6f:1b:db:81:84:34:
         91:60:d1:29:22:fb:7b:f9:7d:87:de:c8:46:85:51:ba:fe:6c:
         0c:ff:f5:24:4c:f4:08:15:b4:92:a4:a8:61:46:ee:52:43:cd:
         1a:bd:fe:6c:e3:d5:00:dc:e5:0f:da:9a:c6:2a:1f:3c:ba:76:
         4f:0b:f4:3e:21:d0:14:c7:c7:5a:52:c9:1a:d4:ac:33:88:a3:
         76:2a:4e:8f:d0:61:d7:a7:03:93:4d:dd:d6:5a:9d:43:51:16:
         a7:ff:75:81:29:6c:04:59:7f:b9:87:c5:28:78:6f:3b:40:79:
         11:06:62:af:2d:8b:a1:48:a1:2b:6c:13:2e:25:04:9a:8a:61:
         32:20:12:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org