Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a313a3a2f34382d3438203d3e203230343733.roa
File:                     323830363a3431393a313a3a2f34382d3438203d3e203230343733.roa (raw, json)
Hash identifier:          ikarPVRtVJCgo5nq7mCmNVyf+IbF5BOmzM3zXw9QCYo=
Subject key identifier:   4F:CA:50:51:DD:C4:8C:E6:A2:32:93:59:02:01:21:09:92:95:E8:0C
Certificate issuer:       /CN=7B20BC301183746CAE82E0BCAE353B6BC9A24568
Certificate serial:       09D2A6E9C85F5E943C4E866663052292DEF0D642
Authority key identifier: 7B:20:BC:30:11:83:74:6C:AE:82:E0:BC:AE:35:3B:6B:C9:A2:45:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a313a3a2f34382d3438203d3e203230343733.roa
Signing time:             Tue 05 Mar 2024 17:40:39 +0000
ROA not before:           Tue 05 Mar 2024 17:35:39 +0000
ROA not after:            Tue 04 Mar 2025 17:40:39 +0000
asID:                     20473
IP address blocks:        2806:419:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 01:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d2:a6:e9:c8:5f:5e:94:3c:4e:86:66:63:05:22:92:de:f0:d6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B20BC301183746CAE82E0BCAE353B6BC9A24568
        Validity
            Not Before: Mar  5 17:35:39 2024 GMT
            Not After : Mar  4 17:40:39 2025 GMT
        Subject: CN=4FCA5051DDC48CE6A2329359020121099295E80C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:84:fb:48:0d:b5:94:2a:73:62:b0:78:41:24:
                    8a:ca:c1:d8:93:5b:0d:94:3e:37:e1:b8:58:e4:71:
                    27:fb:85:57:d6:77:74:7d:c7:3b:b7:a3:f8:70:b3:
                    63:32:28:10:b1:1d:ed:ec:5e:1f:55:a1:14:c2:84:
                    f0:fb:8b:6e:6e:da:62:71:30:d8:5d:e3:0f:f2:62:
                    bd:6f:8e:0e:54:91:3f:50:2f:5c:b3:8d:35:71:5b:
                    5c:d3:c4:90:28:b7:ff:0f:d9:c4:7b:cb:14:74:f1:
                    aa:60:63:a5:a7:99:09:f6:9e:a2:bc:04:85:27:21:
                    7e:81:08:08:7e:a9:f7:0d:32:b5:5d:8c:2a:53:29:
                    1c:7f:f2:aa:14:3a:76:0c:f7:5f:3e:4c:57:64:08:
                    5f:9c:ce:89:33:4b:a8:91:85:5d:ab:a7:32:0a:b9:
                    18:82:b3:06:63:f1:1b:18:f2:5a:ef:5a:0f:70:7a:
                    7f:c0:c6:fa:b0:a6:3e:f5:82:28:e3:94:7a:80:6d:
                    4b:4f:2f:4b:fb:06:01:30:5b:23:15:f7:10:13:56:
                    6b:60:3f:53:12:3e:bc:4c:1a:09:31:e5:c4:da:17:
                    36:ae:44:d4:67:05:4e:36:44:dd:ba:50:76:32:36:
                    e2:b7:f3:a2:cb:19:12:3b:1e:bc:61:4b:df:99:2a:
                    7c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CA:50:51:DD:C4:8C:E6:A2:32:93:59:02:01:21:09:92:95:E8:0C
            X509v3 Authority Key Identifier:
                keyid:7B:20:BC:30:11:83:74:6C:AE:82:E0:BC:AE:35:3B:6B:C9:A2:45:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B20BC301183746CAE82E0BCAE353B6BC9A24568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD6D64CAE757E297C097F7B7981BD664A19D2904241DCAAC13574F2564EBB93F/0/323830363a3431393a313a3a2f34382d3438203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:419:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:2b:d7:9d:8d:cc:c6:6b:bd:82:8f:e8:f2:35:3c:ce:26:6d:
         55:cc:8a:b4:57:50:a2:ba:a4:05:d1:63:7b:95:af:5b:d7:72:
         a1:68:81:75:5e:85:19:10:64:5d:7c:87:f0:cb:45:ff:85:f0:
         f9:59:95:c8:7d:30:cd:ad:35:04:08:29:a1:8e:ee:f0:19:68:
         fc:86:af:33:5c:54:f2:48:7f:66:4e:51:20:ba:e2:bb:99:21:
         0e:fe:af:21:fb:75:a8:a8:12:13:a5:ac:f4:d5:97:25:25:35:
         b2:58:23:5b:9e:aa:9a:51:70:8a:60:fa:c3:e5:1c:f3:d2:21:
         c7:5f:b1:18:86:81:3c:23:78:be:50:9e:e1:82:f9:0a:f6:1e:
         47:aa:8e:5d:cb:41:85:99:8a:18:0c:00:3e:05:1d:aa:03:52:
         dd:86:01:a9:5d:52:cd:65:6a:eb:36:0c:6a:37:c7:bc:6c:da:
         07:58:83:f9:5a:ab:8e:d0:22:9e:24:f6:4d:0f:c2:ae:fc:c3:
         6e:6d:b2:b2:82:78:0f:40:7a:36:15:a7:5d:20:36:c5:ad:e6:
         91:c2:27:8c:57:70:12:88:f4:bb:9b:d4:47:9e:6e:45:ae:88:
         bb:ae:13:a8:a9:4d:16:18:92:80:93:42:59:fa:be:f6:09:64:
         e1:bd:37:3f
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgIUCdKm6chfXpQ8ToZmYwUikt7w1kIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IyMEJDMzAxMTgzNzQ2Q0FFODJFMEJDQUUzNTNCNkJD
OUEyNDU2ODAeFw0yNDAzMDUxNzM1MzlaFw0yNTAzMDQxNzQwMzlaMDMxMTAvBgNV
BAMTKDRGQ0E1MDUxRERDNDhDRTZBMjMyOTM1OTAyMDEyMTA5OTI5NUU4MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hPtIDbWUKnNisHhBJIrKwdiT
Ww2UPjfhuFjkcSf7hVfWd3R9xzu3o/hws2MyKBCxHe3sXh9VoRTChPD7i25u2mJx
MNhd4w/yYr1vjg5UkT9QL1yzjTVxW1zTxJAot/8P2cR7yxR08apgY6WnmQn2nqK8
BIUnIX6BCAh+qfcNMrVdjCpTKRx/8qoUOnYM918+TFdkCF+czokzS6iRhV2rpzIK
uRiCswZj8RsY8lrvWg9wen/Axvqwpj71gijjlHqAbUtPL0v7BgEwWyMV9xATVmtg
P1MSPrxMGgkx5cTaFzauRNRnBU42RN26UHYyNuK386LLGRI7HrxhS9+ZKny3AgMB
AAGjggLLMIICxzAdBgNVHQ4EFgQUT8pQUd3EjOaiMpNZAgEhCZKV6AwwHwYDVR0j
BBgwFoAUeyC8MBGDdGyuguC8rjU7a8miRWgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRDZENjRDQUU3NTdFMjk3QzA5N0Y3Qjc5ODFCRDY2NEEx
OUQyOTA0MjQxRENBQUMxMzU3NEYyNTY0RUJCOTNGLzAvN0IyMEJDMzAxMTgzNzQ2
Q0FFODJFMEJDQUUzNTNCNkJDOUEyNDU2OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QjIwQkMzMDExODM3NDZDQUU4
MkUwQkNBRTM1M0I2QkM5QTI0NTY4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkQ2RDY0Q0FFNzU3RTI5N0MwOTdGN0I3OTgxQkQ2NjRBMTlEMjkwNDI0
MURDQUFDMTM1NzRGMjU2NEVCQjkzRi8wLzMyMzgzMDM2M2EzNDMxMzkzYTMxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDM0MzczMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgGBBkA
ATANBgkqhkiG9w0BAQsFAAOCAQEAECvXnY3Mxmu9go/o8jU8ziZtVcyKtFdQorqk
BdFje5WvW9dyoWiBdV6FGRBkXXyH8MtF/4Xw+VmVyH0wza01BAgpoY7u8Blo/Iav
M1xU8kh/Zk5RILriu5khDv6vIft1qKgSE6Ws9NWXJSU1slgjW56qmlFwimD6w+Uc
89Ihx1+xGIaBPCN4vlCe4YL5CvYeR6qOXctBhZmKGAwAPgUdqgNS3YYBqV1SzWVq
6zYMajfHvGzaB1iD+VqrjtAiniT2TQ/CrvzDbm2ysoJ4D0B6NhWnXSA2xa3mkcIn
jFdwEoj0u5vUR55uRa6Iu64TqKlNFhiSgJNCWfq+9glk4b03Pw==
-----END CERTIFICATE-----