Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/323830333a616638303a3a2f33332d3634203d3e20323633373332.roa
File:                     323830333a616638303a3a2f33332d3634203d3e20323633373332.roa (raw, json)
Hash identifier:          m344GYnJXlz7chQjsu8FguXq86Ak3bHA3x0Jp8OI7mY=
Subject key identifier:   2A:E6:82:C8:BD:3A:68:18:3B:9B:96:14:EC:AB:94:DA:31:5A:0F:62
Certificate issuer:       /CN=D65CF4F69AC888255A41BFC6B6F0E71DA81E954B
Certificate serial:       1D6F1A5BB30E4AB551839D7FEF8B3962BE4D635F
Authority key identifier: D6:5C:F4:F6:9A:C8:88:25:5A:41:BF:C6:B6:F0:E7:1D:A8:1E:95:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/323830333a616638303a3a2f33332d3634203d3e20323633373332.roa
Signing time:             Tue 05 Mar 2024 18:11:30 +0000
ROA not before:           Tue 05 Mar 2024 18:06:30 +0000
ROA not after:            Tue 04 Mar 2025 18:11:30 +0000
asID:                     263732
IP address blocks:        2803:af80::/33 maxlen: 64

Validation:               Failed, certificate revoked on Fri 25 Oct 2024 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6f:1a:5b:b3:0e:4a:b5:51:83:9d:7f:ef:8b:39:62:be:4d:63:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D65CF4F69AC888255A41BFC6B6F0E71DA81E954B
        Validity
            Not Before: Mar  5 18:06:30 2024 GMT
            Not After : Mar  4 18:11:30 2025 GMT
        Subject: CN=2AE682C8BD3A68183B9B9614ECAB94DA315A0F62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:21:17:1b:19:74:ac:98:b4:93:3f:c7:99:3f:
                    50:1b:3a:80:54:c4:33:4e:1c:8b:c7:a4:eb:e4:b3:
                    a4:45:e8:19:76:cc:06:2e:6b:27:55:9e:67:63:b9:
                    63:8d:5d:fa:7d:43:84:81:e6:51:08:b7:83:68:6c:
                    21:72:5c:51:5c:4c:7b:03:01:ff:42:a6:25:3b:6e:
                    0f:80:8d:c2:e9:24:6b:5e:71:ba:bb:c6:e3:98:19:
                    26:37:65:dc:e7:bc:5e:6e:6e:eb:41:de:84:3d:91:
                    9a:3e:46:bb:38:27:a7:48:be:f0:7f:2d:47:28:6a:
                    92:fb:0a:72:13:7b:bb:ad:88:c9:60:a2:db:3b:c7:
                    bc:3c:b1:58:10:27:f5:03:da:4f:e4:aa:47:d5:e7:
                    de:15:39:6c:83:95:11:92:c5:b0:5a:05:1c:93:be:
                    a5:41:66:46:1d:5c:66:be:14:51:f0:ca:68:1f:9b:
                    8f:e4:d5:85:5d:11:d0:e2:85:71:58:ee:2f:cf:43:
                    ca:62:d9:86:94:ef:07:5e:1c:1d:a9:a0:5a:c2:5a:
                    e1:29:2e:b4:ba:6e:de:0d:d5:cf:e9:1e:72:2e:94:
                    2a:95:1e:fe:af:08:14:f1:6d:f2:36:3a:a8:0d:3e:
                    cb:97:ed:5a:d7:1f:18:8a:3d:e6:70:9a:78:03:70:
                    73:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E6:82:C8:BD:3A:68:18:3B:9B:96:14:EC:AB:94:DA:31:5A:0F:62
            X509v3 Authority Key Identifier:
                keyid:D6:5C:F4:F6:9A:C8:88:25:5A:41:BF:C6:B6:F0:E7:1D:A8:1E:95:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/323830333a616638303a3a2f33332d3634203d3e20323633373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af80::/33

    Signature Algorithm: sha256WithRSAEncryption
         71:1e:ce:08:6c:a6:af:f6:76:fb:70:64:ee:5b:ad:a6:d6:6c:
         81:3e:98:bd:a7:d0:9c:df:1c:f6:06:7b:52:ae:1b:4d:3d:c7:
         08:c1:5d:d0:c8:a4:05:ac:21:f7:55:b4:10:01:36:df:c1:52:
         9c:d4:e7:e7:6b:bb:40:f5:60:f9:df:bb:56:2c:a8:bd:5d:94:
         3f:66:25:18:1e:03:25:5b:bd:10:c6:82:aa:e3:7d:11:40:d4:
         eb:1f:69:85:ef:dc:c4:bc:7e:4c:ad:a4:92:01:85:56:d0:c7:
         79:74:a2:ea:1c:dd:60:b8:b5:79:3b:26:e6:57:a2:10:fd:b5:
         35:2d:95:4b:c1:3e:d9:6f:51:3b:db:cf:a4:54:7b:af:c0:14:
         5a:4a:55:41:bf:a5:0d:39:17:90:32:34:86:6d:26:fa:3c:1c:
         5e:60:ef:16:f6:1f:20:5b:57:f9:02:64:5f:e1:c9:53:bf:eb:
         0d:f5:2c:3d:c9:91:68:3f:c9:85:14:d2:f0:2d:55:b1:80:60:
         9d:ac:7b:e3:b0:56:dd:65:6e:dc:e5:cf:9f:8d:c9:c0:9a:d5:
         b1:b3:14:78:1d:04:25:a0:da:6f:76:a1:f9:8d:58:8a:21:f7:
         3f:07:ab:bd:d8:ae:89:d4:3e:ee:0d:ec:93:65:1c:49:ec:09:
         97:88:a6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 22:39:16 2024 by rpki-client on console-ams.rpki-client.org