Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a313130303a3a2f34302d3430203d3e20323732393636.roa
File:                     323830333a383539303a313130303a3a2f34302d3430203d3e20323732393636.roa (raw, json)
Hash identifier:          Y2CZIPuhAUg0XxV+90z+pyXA5VKnIi858zywYKRksGY=
Subject key identifier:   1C:77:29:7B:FE:C2:CF:BF:C3:E3:DF:1D:B0:B7:11:DF:87:01:04:89
Certificate issuer:       /CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
Certificate serial:       3F3F1ACB4AF1568F1D4EBF2CFC41CA554FEAED5F
Authority key identifier: 21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a313130303a3a2f34302d3430203d3e20323732393636.roa
Signing time:             Tue 05 Mar 2024 17:44:07 +0000
ROA not before:           Tue 05 Mar 2024 17:39:07 +0000
ROA not after:            Tue 04 Mar 2025 17:44:07 +0000
asID:                     272966
IP address blocks:        2803:8590:1100::/40 maxlen: 40

Validation:               Failed, certificate revoked on Fri 06 Sep 2024 17:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3f:1a:cb:4a:f1:56:8f:1d:4e:bf:2c:fc:41:ca:55:4f:ea:ed:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
        Validity
            Not Before: Mar  5 17:39:07 2024 GMT
            Not After : Mar  4 17:44:07 2025 GMT
        Subject: CN=1C77297BFEC2CFBFC3E3DF1DB0B711DF87010489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f5:ef:be:ac:9e:6c:bc:bc:51:77:ab:7e:60:
                    27:ae:08:47:32:71:1a:e8:cb:ff:68:be:ba:a3:33:
                    a6:50:1a:29:d8:8b:5a:29:00:85:db:96:7f:73:d2:
                    67:62:31:9a:da:97:f2:fb:60:85:c1:04:de:5b:47:
                    80:c7:52:58:bd:47:58:89:3c:12:41:20:ff:12:57:
                    67:37:08:14:cf:4f:57:23:6e:70:7d:c6:69:90:d4:
                    5d:75:33:97:4f:44:b2:74:32:a0:0f:c5:33:bd:4c:
                    f3:3c:4b:c9:bf:2d:d7:c0:69:2b:46:2b:ea:f5:37:
                    3a:18:6e:01:d6:2f:e7:dc:d2:6e:fd:e3:c2:c1:77:
                    6b:01:8e:a7:7a:c1:9f:1e:b7:49:9f:8f:52:a0:a1:
                    a5:d7:e0:2c:db:a0:ac:5b:7e:00:22:0c:a3:e6:0c:
                    4e:6a:70:a5:6e:3c:20:98:3f:a9:11:50:b9:db:5c:
                    2a:8f:89:1e:a8:51:f7:51:e4:42:2e:f7:ef:17:98:
                    7a:b0:fa:4f:93:88:d7:bf:37:37:a8:56:a8:f0:fb:
                    71:51:de:c9:4d:68:f7:88:aa:2d:06:da:29:21:24:
                    19:33:55:b8:99:87:4b:46:b9:30:4e:8d:06:24:59:
                    82:d1:e8:c0:88:78:b8:9e:d8:e1:57:76:24:fb:9a:
                    f9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:77:29:7B:FE:C2:CF:BF:C3:E3:DF:1D:B0:B7:11:DF:87:01:04:89
            X509v3 Authority Key Identifier:
                keyid:21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a313130303a3a2f34302d3430203d3e20323732393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:e9:b1:c0:54:84:27:96:47:dc:8a:f0:5b:61:81:e0:4b:19:
         a2:fb:b6:35:0b:4d:c2:a8:4a:7f:2b:ac:e0:d5:87:f1:f9:a3:
         9f:24:41:d6:56:fe:5e:f0:3e:01:bb:b3:4a:75:2b:53:1d:d6:
         0d:b5:06:6c:4c:78:f4:2a:6a:52:ea:63:8e:ae:95:a1:6a:d6:
         66:64:73:4d:c7:53:57:b4:52:33:e6:d1:d9:41:ab:c1:21:48:
         e3:17:24:0c:3d:92:0f:a5:8c:07:b8:13:45:c8:d9:b3:a0:ff:
         ff:48:03:79:33:e1:ca:99:89:41:b5:61:44:03:8c:39:c2:0d:
         ae:6c:02:cc:9e:24:e8:e1:63:5a:29:ea:c1:77:f9:f0:5f:60:
         5c:0c:56:c4:c0:1b:b0:7c:96:60:18:8d:14:90:e5:9b:ea:e5:
         a1:fa:85:f7:87:43:0b:0a:36:7c:b9:cc:04:58:b5:69:6a:c5:
         8e:fc:11:13:11:3b:88:11:77:04:dc:ee:ea:42:98:fe:74:4f:
         b5:13:bf:36:2a:25:3b:7f:aa:ad:57:2b:38:b7:34:1e:c0:cb:
         4f:bb:30:66:a7:99:49:fc:14:4e:82:0f:6d:09:c4:1d:46:2a:
         bb:19:b0:8b:0c:cc:04:0d:53:c2:c0:01:6d:eb:7c:93:ae:ea:
         ee:1e:68:a7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 6 18:41:16 2024 by rpki-client on console-fra.rpki-client.org