Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/323830333a363234303a3a2f33322d3438203d3e20323633383036.roa
File:                     323830333a363234303a3a2f33322d3438203d3e20323633383036.roa (raw, json)
Hash identifier:          CxJSXaPktcSaLqoH5XLDVG/6iXs6odFMVMLSADFjBXI=
Subject key identifier:   CD:32:E6:31:C7:BD:18:16:43:2B:DD:51:A1:E6:04:28:4F:30:AF:7B
Certificate issuer:       /CN=875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66
Certificate serial:       35CA43DAF03A3B5B6DC46D3962C87B48ED056E89
Authority key identifier: 87:59:40:C4:F9:B5:CD:3C:1E:15:58:5A:4B:9B:1F:F4:BD:E9:BD:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/323830333a363234303a3a2f33322d3438203d3e20323633383036.roa
Signing time:             Tue 05 Mar 2024 17:58:41 +0000
ROA not before:           Tue 05 Mar 2024 17:53:41 +0000
ROA not after:            Tue 04 Mar 2025 17:58:41 +0000
asID:                     263806
IP address blocks:        2803:6240::/32 maxlen: 48

Validation:               Failed, certificate revoked on Thu 09 May 2024 14:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ca:43:da:f0:3a:3b:5b:6d:c4:6d:39:62:c8:7b:48:ed:05:6e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66
        Validity
            Not Before: Mar  5 17:53:41 2024 GMT
            Not After : Mar  4 17:58:41 2025 GMT
        Subject: CN=CD32E631C7BD1816432BDD51A1E604284F30AF7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a9:eb:fb:31:5c:e1:d5:19:c6:af:ab:89:45:
                    27:36:05:4e:01:a7:fa:42:da:62:40:ef:13:28:65:
                    c8:54:13:43:e1:61:2d:ef:be:d8:92:96:15:88:64:
                    6d:b0:11:1d:28:86:41:d2:61:8e:bd:f5:f8:8c:8b:
                    9b:e8:6f:f8:b5:02:30:a0:be:68:53:30:22:8e:ab:
                    d6:92:96:01:77:ec:19:61:54:0a:b4:54:60:01:1d:
                    60:95:40:6d:79:6f:55:fa:46:8b:e3:15:9b:56:77:
                    10:fd:2b:a5:a8:18:5e:7f:4f:e7:f3:c6:19:35:2d:
                    fd:17:ad:2d:69:b3:f4:a5:97:94:b5:9c:f5:e2:4d:
                    8b:9b:f5:7d:67:fc:9f:52:21:46:17:d4:51:4b:b0:
                    0f:f0:6c:57:39:9e:d3:4c:67:74:38:e4:e9:8d:2b:
                    30:65:9c:73:61:57:a0:ee:77:a4:f6:e5:6e:e6:0b:
                    20:83:b4:ef:f7:82:0d:d5:1b:98:3a:0b:a7:f1:db:
                    e9:13:d4:4b:b1:55:a8:a3:12:a6:04:4b:fe:40:d9:
                    e1:d6:70:a6:4f:23:77:87:11:85:79:67:92:3b:23:
                    fc:7d:32:67:4a:fb:7e:77:8d:c7:20:d9:17:0e:54:
                    44:1f:e4:a8:bc:43:ca:f1:07:bd:ea:46:3c:27:f0:
                    2d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:32:E6:31:C7:BD:18:16:43:2B:DD:51:A1:E6:04:28:4F:30:AF:7B
            X509v3 Authority Key Identifier:
                keyid:87:59:40:C4:F9:B5:CD:3C:1E:15:58:5A:4B:9B:1F:F4:BD:E9:BD:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/323830333a363234303a3a2f33322d3438203d3e20323633383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6240::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:6f:8e:b2:19:5c:ed:c1:d1:fa:3f:b1:c8:4d:dc:0b:d8:02:
         56:5c:cb:51:54:7c:59:bf:f6:ff:09:2d:32:d9:60:18:9c:86:
         4d:e7:02:cb:ef:7d:b9:ed:91:36:61:bc:da:97:6d:fe:2f:36:
         12:49:c7:f6:1b:2f:db:d2:a2:e2:34:78:dc:53:4a:de:f4:86:
         71:e7:66:78:90:c1:11:a4:69:7b:de:b9:f6:92:a1:72:d8:b8:
         72:7d:ba:e7:1e:ac:13:b7:39:e4:9d:2c:86:97:76:b4:49:74:
         60:19:a5:cf:e2:df:51:d4:c2:76:bf:b4:d0:ce:90:75:73:0d:
         e7:3e:3c:67:61:61:60:40:9f:da:53:3b:2c:51:65:ee:42:6c:
         ab:b1:b7:a9:3c:1f:e7:84:3a:25:b7:08:9a:dc:a8:7d:26:2f:
         d6:f8:a3:b4:f0:16:c4:34:2d:cc:b4:c5:17:9c:70:db:2b:e8:
         08:e3:aa:07:e3:c9:44:e4:a2:2c:9d:37:fe:c8:67:ee:72:d9:
         72:3a:77:23:e8:67:21:0a:42:06:ab:6e:a6:43:bd:19:5f:8f:
         af:95:2d:44:fa:94:2b:9d:27:1d:ce:af:b6:5a:f0:85:ba:3a:
         6e:d7:2c:7b:3e:2b:f8:1a:d0:37:2e:5c:1d:c4:81:2b:e4:a9:
         0f:92:ac:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org