Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/323830333a663836303a3a2f33322d3332203d3e20323732393935.roa
File:                     323830333a663836303a3a2f33322d3332203d3e20323732393935.roa (raw, json)
Hash identifier:          joMlXapakOkKaM4XGk0LGjgOKjdC2DEylEav05lJDRo=
Subject key identifier:   F6:78:12:82:3B:63:8B:6B:3C:1B:6D:3F:EB:D4:A4:13:82:02:10:77
Certificate issuer:       /CN=420B44E3D543CA237CB6BC9020FEC4357D75D278
Certificate serial:       0DBF9E303DFD8C259B6C9D9F28B394C9476A8FF0
Authority key identifier: 42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/323830333a663836303a3a2f33322d3332203d3e20323732393935.roa
Signing time:             Tue 05 Mar 2024 17:43:59 +0000
ROA not before:           Tue 05 Mar 2024 17:38:59 +0000
ROA not after:            Tue 04 Mar 2025 17:43:59 +0000
asID:                     272995
IP address blocks:        2803:f860::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 17:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:bf:9e:30:3d:fd:8c:25:9b:6c:9d:9f:28:b3:94:c9:47:6a:8f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420B44E3D543CA237CB6BC9020FEC4357D75D278
        Validity
            Not Before: Mar  5 17:38:59 2024 GMT
            Not After : Mar  4 17:43:59 2025 GMT
        Subject: CN=F67812823B638B6B3C1B6D3FEBD4A41382021077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:91:9d:93:9c:21:42:44:06:0e:89:f9:ac:45:
                    35:bc:72:bc:a6:45:9c:a4:e9:58:35:9c:53:d2:be:
                    6c:42:74:bc:6b:51:68:96:86:ed:85:5f:04:3d:29:
                    fd:35:a1:94:45:6d:e3:d4:a7:77:26:96:d5:1d:aa:
                    51:fc:4f:41:d6:e7:de:b5:ee:42:af:af:c6:bd:33:
                    68:7d:0b:f1:35:76:e8:27:2d:a2:91:7e:d2:86:eb:
                    94:ca:0e:c3:a9:b2:0f:51:28:3f:e3:a4:0f:57:58:
                    0f:a7:50:5c:4f:6f:d9:85:ee:7d:ee:51:78:e8:5b:
                    dd:21:75:58:60:ca:0b:84:49:91:d2:e9:c7:82:ed:
                    63:f4:3b:f1:df:35:68:0e:af:bf:fc:1e:9b:67:3d:
                    41:1e:58:92:b1:41:55:b2:71:5b:78:c5:b9:e1:ea:
                    57:61:4e:8e:91:38:cb:e1:ce:42:da:35:99:9d:50:
                    d1:d1:56:02:c5:66:2f:c6:f9:4b:8d:9f:e2:df:94:
                    1e:e4:00:ff:98:1c:21:32:8d:34:d1:6d:34:18:b5:
                    d2:78:fa:48:a2:2f:c4:0a:d6:63:c3:fe:07:bb:e6:
                    ab:d1:6d:39:ae:c6:af:38:06:85:09:fb:f8:39:92:
                    1f:e2:ea:96:8c:af:59:b6:8a:8f:2c:4d:2a:0f:f6:
                    40:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:78:12:82:3B:63:8B:6B:3C:1B:6D:3F:EB:D4:A4:13:82:02:10:77
            X509v3 Authority Key Identifier:
                keyid:42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/323830333a663836303a3a2f33322d3332203d3e20323732393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f860::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:14:32:8a:cf:2e:a5:ae:c7:63:ff:e2:f3:7d:ec:ff:30:d1:
         f3:a1:3d:64:6f:87:e7:7a:2e:ee:3c:0c:0a:73:0b:06:50:d7:
         ac:61:47:90:e9:34:77:9e:64:47:69:83:70:a0:fd:7c:86:f0:
         72:48:89:eb:64:0a:64:2f:74:dd:b5:f6:36:9b:9d:24:67:0a:
         c9:1a:e5:ec:9f:84:47:45:04:c6:52:f4:e4:29:ea:e8:e9:f8:
         0b:20:4b:d2:c7:a5:30:83:8c:30:c6:c9:6b:ce:7b:29:43:96:
         84:63:f6:a4:ad:6b:be:af:22:3b:ce:0a:8b:d8:84:a1:e6:46:
         40:53:c3:8e:fb:05:f8:ff:ab:70:51:f8:23:a1:60:c3:7f:e0:
         94:b9:c8:39:37:d7:1c:0b:71:5e:07:db:85:72:53:58:52:e5:
         a7:38:d5:c3:db:cc:51:95:09:6e:3e:71:ae:b5:45:9b:6b:03:
         05:55:12:63:e2:ea:a5:19:da:1d:6c:29:c7:bf:14:83:dd:60:
         53:34:6b:0f:11:61:81:71:b2:bc:4f:5f:88:db:1b:da:8c:77:
         bf:1a:cf:e1:e2:ba:83:ab:82:c5:91:08:5e:d7:76:78:71:31:
         13:e1:a4:0a:3e:02:9b:91:3e:8e:31:03:36:4c:9e:cf:d4:0b:
         ed:5b:09:0c
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUDb+eMD39jCWbbJ2fKLOUyUdqj/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwQjQ0RTNENTQzQ0EyMzdDQjZCQzkwMjBGRUM0MzU3
RDc1RDI3ODAeFw0yNDAzMDUxNzM4NTlaFw0yNTAzMDQxNzQzNTlaMDMxMTAvBgNV
BAMTKEY2NzgxMjgyM0I2MzhCNkIzQzFCNkQzRkVCRDRBNDEzODIwMjEwNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtkZ2TnCFCRAYOifmsRTW8crym
RZyk6Vg1nFPSvmxCdLxrUWiWhu2FXwQ9Kf01oZRFbePUp3cmltUdqlH8T0HW5961
7kKvr8a9M2h9C/E1dugnLaKRftKG65TKDsOpsg9RKD/jpA9XWA+nUFxPb9mF7n3u
UXjoW90hdVhgyguESZHS6ceC7WP0O/HfNWgOr7/8HptnPUEeWJKxQVWycVt4xbnh
6ldhTo6ROMvhzkLaNZmdUNHRVgLFZi/G+UuNn+LflB7kAP+YHCEyjTTRbTQYtdJ4
+kiiL8QK1mPD/ge75qvRbTmuxq84BoUJ+/g5kh/i6paMr1m2io8sTSoP9kAtAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQU9ngSgjtji2s8G20/69SkE4ICEHcwHwYDVR0j
BBgwFoAUQgtE49VDyiN8tryQIP7ENX110ngwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GN0I5NUYxRERCOUUzQzQyNDJFRTM2QkUwRTNCMUNFM0ND
RkVCMDBGODk1MDhDMUQ3RTc1NTk2RDNEMTEyRURFLzAvNDIwQjQ0RTNENTQzQ0Ey
MzdDQjZCQzkwMjBGRUM0MzU3RDc1RDI3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MjBCNDRFM0Q1NDNDQTIzN0NC
NkJDOTAyMEZFQzQzNTdENzVEMjc4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjdCOTVGMUREQjlFM0M0MjQyRUUzNkJFMEUzQjFDRTNDQ0ZFQjAwRjg5
NTA4QzFEN0U3NTU5NkQzRDExMkVERS8wLzMyMzgzMDMzM2E2NjM4MzYzMDNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMjM5MzkzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgD+GAw
DQYJKoZIhvcNAQELBQADggEBAJkUMorPLqWux2P/4vN97P8w0fOhPWRvh+d6Lu48
DApzCwZQ16xhR5DpNHeeZEdpg3Cg/XyG8HJIietkCmQvdN219jabnSRnCska5eyf
hEdFBMZS9OQp6ujp+AsgS9LHpTCDjDDGyWvOeylDloRj9qSta76vIjvOCovYhKHm
RkBTw477Bfj/q3BR+COhYMN/4JS5yDk31xwLcV4H24VyU1hS5ac41cPbzFGVCW4+
ca61RZtrAwVVEmPi6qUZ2h1sKce/FIPdYFM0aw8RYYFxsrxPX4jbG9qMd78az+Hi
uoOrgsWRCF7XdnhxMRPhpAo+ApuRPo4xAzZMns/UC+1bCQw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org