Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a313030303a3a2f33362d3336203d3e20323637383331.roa
File:                     323830333a383436303a313030303a3a2f33362d3336203d3e20323637383331.roa (raw, json)
Hash identifier:          YBDI3bc31YFovKK7rH/pCYE+pvXAuneQ/wBEBaBNpT8=
Subject key identifier:   1E:91:32:FD:0F:10:85:55:F3:69:02:FD:5A:F8:2B:79:A2:0C:2E:49
Certificate issuer:       /CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
Certificate serial:       4D627D296E1E7F1F888FA888F97FAEF772E2259F
Authority key identifier: 80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a313030303a3a2f33362d3336203d3e20323637383331.roa
Signing time:             Tue 05 Mar 2024 18:18:50 +0000
ROA not before:           Tue 05 Mar 2024 18:13:50 +0000
ROA not after:            Tue 04 Mar 2025 18:18:50 +0000
asID:                     267831
IP address blocks:        2803:8460:1000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 04:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:62:7d:29:6e:1e:7f:1f:88:8f:a8:88:f9:7f:ae:f7:72:e2:25:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
        Validity
            Not Before: Mar  5 18:13:50 2024 GMT
            Not After : Mar  4 18:18:50 2025 GMT
        Subject: CN=1E9132FD0F108555F36902FD5AF82B79A20C2E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:be:82:33:f9:8b:45:46:a2:1c:60:9d:5b:4f:
                    42:6b:d8:68:40:74:a7:13:e8:13:19:b6:f6:96:32:
                    d1:f4:e1:f4:5a:50:c0:b5:52:38:77:63:ec:fc:fa:
                    82:ad:6f:5c:6e:28:fb:ea:f5:55:bd:31:c6:c4:eb:
                    32:80:4f:f8:33:38:32:b1:a6:3e:ef:82:9f:d6:97:
                    aa:d4:1e:71:e8:9e:d0:c3:37:e9:23:4a:35:65:16:
                    c8:5c:5d:cc:c9:8c:8f:2c:e8:98:3a:46:8e:d9:14:
                    22:9f:d2:82:5f:fd:a4:c5:22:50:ba:c2:18:7d:7e:
                    6e:0a:a5:f9:3d:68:ec:5e:b1:c7:62:43:ad:a1:06:
                    ec:1e:83:e6:76:5d:8f:1f:0a:ff:60:5a:d6:ab:d3:
                    80:d5:25:c1:82:6b:82:38:61:cd:b7:14:46:be:b3:
                    a5:ee:40:4f:95:0c:3d:e8:48:63:9b:a3:d1:49:c7:
                    17:25:40:44:15:d7:76:1f:90:07:33:55:05:1a:75:
                    ac:d5:cd:22:18:3c:28:66:51:57:f9:7a:1b:29:3b:
                    ea:bf:11:85:7f:7d:b4:ee:08:00:f0:97:25:71:14:
                    0e:16:d0:72:25:f5:1a:62:52:76:7f:0c:71:27:75:
                    0f:17:a5:83:12:dd:07:4f:de:76:df:b4:15:aa:20:
                    a1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:91:32:FD:0F:10:85:55:F3:69:02:FD:5A:F8:2B:79:A2:0C:2E:49
            X509v3 Authority Key Identifier:
                keyid:80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a313030303a3a2f33362d3336203d3e20323637383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8460:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6c:62:66:f0:f5:96:97:55:a7:e9:cd:fe:35:63:7e:a4:34:9c:
         59:5b:6a:16:86:68:00:2a:68:c1:6f:cc:a8:d4:d5:dd:94:eb:
         39:0a:9a:58:26:f9:02:de:40:3d:35:84:99:ac:b6:01:6b:4c:
         99:f4:75:90:fc:b4:36:a1:83:a1:39:bd:a6:2d:aa:be:74:b4:
         b7:6e:53:6d:cf:1e:9d:75:03:0e:13:17:b5:c5:89:5b:2e:fd:
         51:ea:71:ac:41:e4:e0:f0:d2:6e:22:c6:22:3e:cf:14:a9:32:
         37:0e:09:10:50:4c:73:7c:8a:f0:a2:62:a9:13:0d:2f:e2:88:
         3a:b4:3f:aa:db:24:1e:49:7f:69:6d:3c:d4:a0:a8:f8:85:d2:
         36:46:c3:c8:17:26:9b:2d:20:0c:b3:7b:34:bc:5a:f2:e8:77:
         a4:34:7b:c9:73:be:97:36:c7:ed:33:88:37:25:07:8c:96:17:
         5b:91:16:c0:49:5d:28:1c:b6:ed:df:69:44:4f:77:64:14:b8:
         73:8d:26:c7:f9:39:e8:7d:ea:c8:09:f7:99:53:4a:f3:07:e5:
         f7:41:b4:d0:1c:75:f4:99:11:09:b2:97:7a:75:9a:e6:de:08:
         d3:e4:5d:42:9c:75:b8:40:4e:0e:78:15:9e:88:65:e4:4a:59:
         f0:b4:fb:6f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Aug 14 05:51:46 2024 by rpki-client on console-fra.rpki-client.org