Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/323830333a616638303a3a2f34382d3438203d3e20323633373332.roa
File:                     323830333a616638303a3a2f34382d3438203d3e20323633373332.roa (raw, json)
Hash identifier:          QR92EYMmgYH9ZXsuR+0aNaZYw6MdBkgsaGJ1JlCpIik=
Subject key identifier:   9D:C7:91:A3:08:FB:25:00:4F:2A:19:D0:02:A6:2B:20:A7:1E:DC:D7
Certificate issuer:       /CN=D65CF4F69AC888255A41BFC6B6F0E71DA81E954B
Certificate serial:       117EA7973B3D18E36BB565B681C999FF67418E7E
Authority key identifier: D6:5C:F4:F6:9A:C8:88:25:5A:41:BF:C6:B6:F0:E7:1D:A8:1E:95:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/323830333a616638303a3a2f34382d3438203d3e20323633373332.roa
Signing time:             Tue 05 Mar 2024 18:11:29 +0000
ROA not before:           Tue 05 Mar 2024 18:06:29 +0000
ROA not after:            Tue 04 Mar 2025 18:11:29 +0000
asID:                     263732
IP address blocks:        2803:af80::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 25 Oct 2024 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7e:a7:97:3b:3d:18:e3:6b:b5:65:b6:81:c9:99:ff:67:41:8e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D65CF4F69AC888255A41BFC6B6F0E71DA81E954B
        Validity
            Not Before: Mar  5 18:06:29 2024 GMT
            Not After : Mar  4 18:11:29 2025 GMT
        Subject: CN=9DC791A308FB25004F2A19D002A62B20A71EDCD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:90:c9:5c:e8:ab:7b:31:0f:22:f8:cb:84:3e:
                    36:c6:fc:fb:59:99:c1:f7:35:20:62:52:c4:b5:a7:
                    b9:72:8c:d1:4f:e8:9a:2b:b9:15:67:ab:10:71:7e:
                    30:40:9d:db:65:f0:84:b0:6c:33:2c:08:8c:ff:1d:
                    37:8b:bd:4b:da:fa:8d:43:1b:4b:9a:b0:ce:92:71:
                    6a:80:67:53:aa:1d:6a:95:8d:7b:f5:9e:24:76:80:
                    fe:65:03:3c:56:08:95:43:9d:4d:c2:50:aa:72:86:
                    5c:7a:ba:f4:9b:b1:87:69:ef:1d:27:51:70:d9:3c:
                    8b:1b:c5:91:ec:d7:d4:5b:d4:3f:19:10:a0:e4:4e:
                    02:8d:88:bd:0d:ae:36:43:15:5f:de:e0:30:b8:f2:
                    b2:93:4d:36:a4:1e:53:73:52:c7:e9:f2:6b:61:0a:
                    13:a3:6f:2c:c5:eb:b8:ef:e5:88:67:3a:8a:33:2a:
                    a2:b3:fa:2e:a3:db:65:22:7f:0f:ea:41:6e:58:9e:
                    e6:c8:25:80:cb:86:bb:a9:8a:b0:77:2d:2b:63:44:
                    b7:75:1e:1b:32:dd:16:54:c0:46:14:2e:e6:b5:f5:
                    ea:ad:ab:cb:26:92:a4:02:8b:d1:59:54:81:cb:a0:
                    49:fc:58:71:58:37:20:a8:96:c2:9d:de:c3:c2:3f:
                    4a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C7:91:A3:08:FB:25:00:4F:2A:19:D0:02:A6:2B:20:A7:1E:DC:D7
            X509v3 Authority Key Identifier:
                keyid:D6:5C:F4:F6:9A:C8:88:25:5A:41:BF:C6:B6:F0:E7:1D:A8:1E:95:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/323830333a616638303a3a2f34382d3438203d3e20323633373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af80::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:6a:4d:55:d3:36:92:5a:8f:59:3b:1f:5e:83:2f:d4:e5:8c:
         9e:36:b4:35:ff:a1:ee:be:06:8d:a4:4d:03:d9:90:d9:d5:5a:
         8b:f3:41:49:78:9b:de:df:3d:27:bd:09:ae:68:91:33:7e:55:
         f8:1f:8f:23:26:4c:9b:39:e8:4e:31:57:2d:86:4b:96:ff:4a:
         2d:a8:f0:9d:af:b1:b0:4e:d4:10:9b:05:71:ec:46:e3:da:c9:
         f1:28:8e:a8:22:2e:0b:03:0b:f7:b0:92:1f:08:9e:7e:69:2b:
         c0:07:23:99:b5:62:9d:da:a8:e7:1b:5a:d7:ce:44:0e:c1:f3:
         6c:9b:de:5a:f3:8e:86:8d:4d:a0:f6:43:01:45:f7:2c:4c:fa:
         19:a0:ea:b8:c2:30:b2:95:48:95:3b:5c:e2:36:d5:e0:72:f1:
         3c:f8:82:c5:73:19:19:aa:58:00:14:2f:27:d4:ad:4e:a0:c7:
         da:a3:a9:25:73:39:38:8d:2a:5c:7e:bc:72:ca:d6:ba:55:a2:
         a7:c6:bf:ea:a8:3d:58:28:0c:7c:96:18:84:f0:f2:a4:08:ee:
         a3:fe:a3:af:32:fa:fc:9f:9a:1e:02:b4:d4:ce:04:38:40:98:
         5f:7d:77:29:92:c2:57:b3:df:ae:34:c6:3b:f8:ed:9b:fc:f5:
         ef:a1:07:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 22:39:16 2024 by rpki-client on console-ams.rpki-client.org