Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/323830333a383161303a3a2f33322d3332203d3e203531333936.roa
File:                     323830333a383161303a3a2f33322d3332203d3e203531333936.roa (raw, json)
Hash identifier:          LwUb95ydPzDp7pjQAbmR1U3zQyvJbP2/CAbtTm2uE1k=
Subject key identifier:   15:8C:AB:33:3F:E3:65:78:FB:41:5E:9B:E9:14:05:6F:94:39:1D:0D
Certificate issuer:       /CN=5806F9DC062DA88DF39329EB68D1552E70F91A7A
Certificate serial:       470D4E9AAA1C83893746B97311F1096BE49BB511
Authority key identifier: 58:06:F9:DC:06:2D:A8:8D:F3:93:29:EB:68:D1:55:2E:70:F9:1A:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/323830333a383161303a3a2f33322d3332203d3e203531333936.roa
Signing time:             Tue 22 Apr 2025 14:20:00 +0000
ROA not before:           Tue 22 Apr 2025 14:15:00 +0000
ROA not after:            Tue 21 Apr 2026 14:20:00 +0000
asID:                     51396
IP address blocks:        2803:81a0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 23 Apr 2025 15:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0d:4e:9a:aa:1c:83:89:37:46:b9:73:11:f1:09:6b:e4:9b:b5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806F9DC062DA88DF39329EB68D1552E70F91A7A
        Validity
            Not Before: Apr 22 14:15:00 2025 GMT
            Not After : Apr 21 14:20:00 2026 GMT
        Subject: CN=158CAB333FE36578FB415E9BE914056F94391D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:56:3d:f0:12:04:35:6a:8a:65:97:d9:95:dc:
                    3e:e3:a2:17:23:61:1e:c0:1e:3f:bf:7d:7e:ac:55:
                    6a:01:07:63:7d:29:53:fc:57:66:6c:19:bf:81:e5:
                    88:ef:26:97:0c:ac:24:e7:fa:58:66:da:e4:9e:50:
                    02:c4:0f:a3:86:50:9b:1a:cf:a9:19:cb:1e:c4:54:
                    67:e4:1a:e4:45:4e:01:27:fa:07:13:59:09:d5:ab:
                    f7:0a:85:81:48:b9:63:6d:de:ff:c3:4a:f0:dc:23:
                    23:7c:05:60:01:a2:de:5e:21:87:1c:0c:3b:3e:f1:
                    85:55:03:45:04:ba:93:8c:b8:05:e8:d4:99:d9:8f:
                    b4:f1:7a:80:83:73:51:5b:67:ba:7c:f9:7a:0b:d7:
                    00:53:4d:04:6b:f3:1a:92:df:b2:68:96:81:1d:82:
                    34:3d:05:b8:61:32:ad:3c:d3:2b:50:ea:da:17:26:
                    e4:bb:22:e2:58:73:e8:29:82:39:0c:29:85:7e:1d:
                    fb:fe:f8:3c:59:a4:d1:d6:7d:d4:f0:52:8d:d1:4f:
                    e1:56:5a:46:ab:51:4a:88:5a:83:54:0b:18:42:e2:
                    53:82:02:6f:54:3b:82:41:d0:44:c4:de:8b:0d:63:
                    6f:58:f9:a8:63:eb:01:86:83:d3:ac:12:7c:46:e5:
                    24:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8C:AB:33:3F:E3:65:78:FB:41:5E:9B:E9:14:05:6F:94:39:1D:0D
            X509v3 Authority Key Identifier:
                keyid:58:06:F9:DC:06:2D:A8:8D:F3:93:29:EB:68:D1:55:2E:70:F9:1A:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/323830333a383161303a3a2f33322d3332203d3e203531333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:81a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:fd:7a:81:bd:85:12:64:ed:49:fc:72:bf:06:39:4b:38:a5:
         e9:c5:0a:c0:81:f0:7e:f1:26:e6:c6:12:08:ff:10:b2:02:78:
         56:a7:eb:75:eb:b8:65:19:3a:17:53:7e:25:32:92:6b:7c:a9:
         3f:16:77:b8:22:b9:72:c8:47:5c:da:44:75:52:04:4c:48:68:
         70:ec:6a:c6:81:ba:5c:d1:54:d0:08:36:7c:e8:50:74:70:67:
         54:b4:09:5d:c2:3e:0c:cb:19:27:6f:f9:86:e3:e3:b7:da:dd:
         3b:a1:36:90:01:75:8f:b0:cc:d4:10:2c:bd:85:1c:48:3f:2d:
         0e:82:c9:8b:20:3a:6f:66:57:03:1b:57:69:b5:b6:23:a4:2d:
         82:0d:fa:e5:20:79:cd:aa:08:82:14:bd:7e:41:bc:07:0c:a4:
         07:e6:1d:0a:0f:e6:5f:d9:ab:ad:d1:82:60:5f:ca:fd:f1:16:
         7c:25:ec:30:01:e7:50:da:a0:8c:54:9a:18:a2:55:03:45:38:
         b2:65:9c:ac:47:08:46:86:ba:98:ce:7e:61:c8:4a:01:a4:45:
         69:b1:a9:82:f5:f0:f6:a5:11:cf:d0:5d:1e:9c:d2:0a:78:76:
         54:f2:6c:3a:e5:94:51:ed:80:88:fb:76:e3:06:b1:e2:b8:76:
         6a:0c:7d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----