Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/323830333a3663303a3a2f33322d3438203d3e203532343039.roa
File:                     323830333a3663303a3a2f33322d3438203d3e203532343039.roa (raw, json)
Hash identifier:          T2woorQCiQrse0lzPVdPoMf9BG1bJ5mvsqv1zrq6UvM=
Subject key identifier:   6C:37:B6:A0:30:C6:46:B8:DC:FE:0F:04:88:13:C4:8B:B1:B0:87:C4
Certificate issuer:       /CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
Certificate serial:       2457D9C22E7DDA775A803231A80515121B48C2A5
Authority key identifier: 97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/323830333a3663303a3a2f33322d3438203d3e203532343039.roa
Signing time:             Thu 26 Dec 2024 16:25:00 +0000
ROA not before:           Thu 26 Dec 2024 16:20:00 +0000
ROA not after:            Thu 25 Dec 2025 16:25:00 +0000
asID:                     52409
IP address blocks:        2803:6c0::/32 maxlen: 48

Validation:               Failed, certificate revoked on Thu 26 Dec 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:57:d9:c2:2e:7d:da:77:5a:80:32:31:a8:05:15:12:1b:48:c2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
        Validity
            Not Before: Dec 26 16:20:00 2024 GMT
            Not After : Dec 25 16:25:00 2025 GMT
        Subject: CN=6C37B6A030C646B8DCFE0F048813C48BB1B087C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5e:c8:ec:7b:cc:24:ef:5b:fc:6c:d1:ab:47:
                    15:65:1f:00:76:a7:ae:71:e9:b8:27:19:25:9a:13:
                    e0:a1:0b:58:c7:da:eb:0e:ac:f3:78:2e:58:97:f3:
                    90:52:1c:2a:d0:4f:1c:46:c3:f3:c5:43:fe:09:4b:
                    e4:9c:91:b6:fc:39:e5:c2:5f:88:20:1a:fb:23:e0:
                    cc:b1:50:ed:b0:65:9b:5d:3d:6f:0d:94:7b:d5:56:
                    99:53:c3:d4:ab:35:07:58:35:07:78:41:9e:67:26:
                    db:48:0f:1a:dd:14:d9:1b:d5:17:03:7d:bf:c7:16:
                    31:a3:bf:67:50:95:4f:e6:7a:be:1e:dd:e1:a6:11:
                    23:44:7a:6d:3a:5f:83:37:85:80:a3:e9:51:68:a3:
                    64:69:cd:60:bd:64:48:78:10:b8:1c:54:6c:47:52:
                    47:df:43:6d:d7:11:d7:5c:fe:2e:bc:34:2c:c2:72:
                    61:95:15:a8:58:8a:40:44:71:09:6f:0a:22:da:91:
                    ca:6b:30:6c:bd:5e:24:d0:9e:8b:9a:c3:fc:d7:49:
                    45:5a:67:cf:53:99:88:a2:87:62:5d:c7:c4:62:a9:
                    1f:7f:d7:79:47:7e:c6:da:a2:74:68:4f:21:0f:86:
                    62:2d:2b:a8:1f:99:0d:57:1f:4c:5b:00:43:b1:fc:
                    f1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:37:B6:A0:30:C6:46:B8:DC:FE:0F:04:88:13:C4:8B:B1:B0:87:C4
            X509v3 Authority Key Identifier:
                keyid:97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/323830333a3663303a3a2f33322d3438203d3e203532343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:23:2d:dd:92:6d:12:a9:b5:b3:80:bc:a9:33:7e:80:9f:89:
         46:48:dd:9d:2c:ac:fd:22:92:69:5d:76:f1:27:b8:2d:ea:2e:
         97:f0:e0:99:73:30:c5:1c:38:29:61:15:ea:bd:18:98:22:8b:
         4b:80:a9:3c:31:6e:67:18:3a:59:51:02:a4:3f:b2:19:7f:3b:
         9d:25:c8:71:2f:c9:83:d2:11:d5:27:6e:43:ec:c4:26:36:af:
         2e:f5:b8:b5:99:d0:94:14:e7:02:b6:2b:f5:fc:d1:53:a3:22:
         6b:e5:e0:88:af:c9:58:42:5f:65:cd:12:d6:e0:69:10:5e:01:
         00:a9:1c:e6:5d:00:2f:d5:56:9c:7f:bf:c2:40:48:8c:7f:b7:
         0d:26:80:b8:ab:f8:63:70:1f:84:80:21:70:2b:f2:53:85:45:
         1d:95:81:98:0f:0c:39:2f:0e:b7:98:e3:ed:9d:ea:ce:c6:2f:
         21:37:59:c7:eb:66:2a:90:e0:82:0d:4f:ea:1d:83:38:95:38:
         cd:90:03:47:e2:4c:b2:91:79:e3:fe:e7:8b:60:bc:99:0d:27:
         88:7a:fe:56:4c:d3:9e:64:73:ec:e0:2f:8e:98:56:1a:0a:61:
         71:1b:4b:c4:eb:a1:06:e2:b1:b9:91:e9:4b:cf:8f:73:11:70:
         8c:65:0a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 20:19:51 2024 by rpki-client on console.sobornost.net