Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a3630303a3a2f34302d3430203d3e20323732393636.roa
File:                     323830333a383539303a3630303a3a2f34302d3430203d3e20323732393636.roa (raw, json)
Hash identifier:          3/6M2G2JgvYna7aTDID/axrKuTOcF23Eyc8wYwGvA04=
Subject key identifier:   FA:92:59:4C:DA:3C:48:B6:DA:84:01:50:07:0A:20:B3:B5:EE:88:6D
Certificate issuer:       /CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
Certificate serial:       0E173FD6C0B21BBFD3AB700841CA86AF8A45A588
Authority key identifier: 21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a3630303a3a2f34302d3430203d3e20323732393636.roa
Signing time:             Tue 05 Mar 2024 17:44:04 +0000
ROA not before:           Tue 05 Mar 2024 17:39:04 +0000
ROA not after:            Tue 04 Mar 2025 17:44:04 +0000
asID:                     272966
IP address blocks:        2803:8590:600::/40 maxlen: 40

Validation:               Failed, certificate revoked on Fri 06 Sep 2024 17:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:17:3f:d6:c0:b2:1b:bf:d3:ab:70:08:41:ca:86:af:8a:45:a5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
        Validity
            Not Before: Mar  5 17:39:04 2024 GMT
            Not After : Mar  4 17:44:04 2025 GMT
        Subject: CN=FA92594CDA3C48B6DA840150070A20B3B5EE886D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cf:06:31:c2:3f:a3:cd:24:f4:4f:7e:7e:af:
                    6e:3b:34:d2:96:28:e2:9b:e2:90:15:fd:74:f9:ee:
                    d4:cb:ea:de:a4:75:1d:eb:56:a8:c9:f1:41:f1:d2:
                    75:be:76:e9:58:25:87:95:85:bb:fe:13:6d:52:4e:
                    6f:7b:18:39:24:13:95:dc:00:a0:a2:4d:71:e3:0e:
                    7d:95:58:fa:85:96:11:74:b3:c1:fa:a4:ce:a7:74:
                    d4:1a:2f:8d:b6:86:4a:7c:85:78:6e:52:56:5f:bc:
                    a7:fe:4e:33:e3:ed:b5:e3:87:ab:2f:14:eb:2b:8a:
                    b8:38:b7:d7:02:87:4e:ed:0a:cc:69:9a:ba:38:7f:
                    bc:12:e6:0c:d1:17:86:31:da:5d:be:41:58:31:78:
                    19:54:fb:9d:3f:a9:c5:f6:f4:48:20:2e:43:6b:bf:
                    45:de:d8:ce:47:fa:87:c5:15:2b:86:da:6d:a5:6f:
                    7c:12:dc:78:da:af:28:bc:12:68:fa:6b:35:22:ad:
                    4b:39:6b:88:50:5f:ed:9d:08:fe:06:c5:f9:e8:01:
                    49:3c:38:f0:d0:25:45:2d:da:94:f4:eb:aa:98:bc:
                    4d:92:35:82:c4:96:ea:b4:ef:28:3b:96:37:87:4a:
                    a0:1f:e6:44:3d:7c:2f:d0:5f:e8:50:46:9c:0a:27:
                    6c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:92:59:4C:DA:3C:48:B6:DA:84:01:50:07:0A:20:B3:B5:EE:88:6D
            X509v3 Authority Key Identifier:
                keyid:21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a3630303a3a2f34302d3430203d3e20323732393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:e6:cf:cf:b0:f5:55:27:32:0a:b9:f0:4e:09:06:87:b6:fa:
         e0:15:ab:6f:cf:d1:2e:3d:14:1d:d0:03:35:66:81:d7:40:9c:
         40:a8:18:28:c8:72:4f:7e:e4:89:b4:2d:e5:e4:7f:cc:2a:01:
         8d:6b:67:92:4f:14:87:e9:8a:7c:b2:8e:a1:0a:f8:f1:97:04:
         38:3b:ca:fa:ec:e2:12:9d:1f:0d:e3:13:42:6a:5c:b3:14:e1:
         1b:eb:63:c3:7d:3f:8b:19:31:b6:ac:e7:2d:bb:f8:a8:56:e5:
         f8:4c:21:58:dc:a3:4c:7b:fa:4e:5e:36:3f:4c:dd:24:a2:b9:
         8c:a3:6a:5d:fa:c1:90:15:d4:19:ac:9e:95:0a:49:21:ff:da:
         a7:c7:fe:fb:33:75:f7:64:d6:db:73:0a:47:38:68:d5:e7:a0:
         46:6a:fe:50:a8:e8:23:a2:79:e7:87:d7:da:18:d3:cc:8e:6f:
         2f:76:0d:ba:e8:e7:2b:72:92:c6:ee:df:13:5d:ef:3f:81:73:
         5e:24:6a:bd:26:78:ba:30:47:9d:a5:fd:f6:18:08:f1:2f:fc:
         1d:1d:dc:8c:71:f2:02:d5:c3:37:0c:4f:d3:80:69:4f:82:d7:
         3c:19:a2:f2:13:d2:a5:b3:e7:06:ba:97:c0:7b:ff:fb:d9:c7:
         c1:f5:42:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 18:41:17 2024 by rpki-client on console-fra.rpki-client.org