Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/041bd34e-7e91-4026-9f6c-9c7a7ed4f7b7/a3361cdb4294d8ddcc5ff78fb227a5c7b7bf156b.roa
File:                     a3361cdb4294d8ddcc5ff78fb227a5c7b7bf156b.roa (raw, json)
Hash identifier:          z/faboKn4NciDMWsbutip9Sp0AP4TTM4q6vAvfL13hY=
Subject key identifier:   BD:C9:2A:D3:D7:71:F7:E4:20:30:C2:A8:9C:67:7D:4F:A3:44:06:B0
Certificate issuer:       /CN=c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19
Certificate serial:       097FD7
Authority key identifier: 40:72:A6:1E:FA:C1:4C:06:80:7A:C9:1F:93:B0:F9:66:35:B4:65:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/041bd34e-7e91-4026-9f6c-9c7a7ed4f7b7/a3361cdb4294d8ddcc5ff78fb227a5c7b7bf156b.roa
Signing time:             Wed 29 Mar 2023 21:56:52 +0000
ROA not before:           Tue 08 Mar 2022 03:00:00 +0000
ROA not after:            Sun 10 Mar 2024 03:00:00 +0000
asID:                     271936
IP address blocks:        2803:fa10::/32 maxlen: 48

Validation:               Failed, certificate revoked on Sat 09 Mar 2024 08:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622551 (0x97fd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19
        Validity
            Not Before: Mar  8 03:00:00 2022 GMT
            Not After : Mar 10 03:00:00 2024 GMT
        Subject: CN=a3361cdb4294d8ddcc5ff78fb227a5c7b7bf156b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:6e:c8:bb:32:46:ee:52:ec:b2:91:30:92:
                    62:c2:b4:5f:ee:d3:b4:17:fb:b3:4d:9d:e3:89:99:
                    ea:99:de:39:3b:4b:0d:98:d0:ce:6b:dc:3f:91:7b:
                    a1:a6:29:ee:8a:ce:4b:ca:16:8f:6b:fd:0e:99:5a:
                    06:7f:2f:89:82:7f:07:53:9d:91:ba:e7:4c:60:d1:
                    d6:c7:ac:8d:ef:cf:be:54:3d:7d:be:7a:3b:55:05:
                    a5:40:22:b5:cb:87:f8:cc:82:89:4f:06:c0:98:d9:
                    6e:b1:c5:cf:2f:07:61:f4:e6:af:5d:d7:1d:9e:e2:
                    8c:3d:ae:1b:53:eb:76:d0:2b:19:71:28:df:b3:49:
                    7b:b8:02:f8:05:14:73:43:04:5d:87:64:7c:52:ce:
                    4a:69:9b:51:1a:67:91:e3:72:56:91:c1:a3:74:9b:
                    3c:63:27:e3:3e:25:ac:bb:b8:80:7b:82:17:62:e6:
                    02:d7:6d:91:85:b2:eb:c3:11:3e:04:2b:a5:6c:aa:
                    23:79:ce:a1:4a:14:bd:d2:ea:67:d1:23:41:48:a4:
                    60:8c:2c:89:75:71:cf:29:b5:0e:4d:06:1f:35:cb:
                    cb:2e:97:8e:51:ec:8d:67:ff:6f:4a:98:4f:e1:13:
                    4a:ee:2f:2c:7a:86:43:97:0d:4f:f3:00:0c:63:3c:
                    2c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C9:2A:D3:D7:71:F7:E4:20:30:C2:A8:9C:67:7D:4F:A3:44:06:B0
            X509v3 Authority Key Identifier:
                keyid:40:72:A6:1E:FA:C1:4C:06:80:7A:C9:1F:93:B0:F9:66:35:B4:65:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/041bd34e-7e91-4026-9f6c-9c7a7ed4f7b7/a3361cdb4294d8ddcc5ff78fb227a5c7b7bf156b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/041bd34e-7e91-4026-9f6c-9c7a7ed4f7b7/c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fa10::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:92:b5:f6:58:52:71:b6:ec:de:ff:a7:62:ec:f8:c3:5c:bd:
         dc:1c:3d:30:43:26:a9:6b:58:55:45:dd:28:31:13:c1:b7:db:
         04:53:6b:c1:03:aa:9c:36:c5:b8:4d:a6:7c:0a:58:8d:ff:a0:
         6f:57:75:04:56:9c:c6:cd:08:13:f6:cc:7e:72:06:cd:dc:99:
         1f:74:81:fb:17:91:6b:d3:ab:11:b1:22:2c:01:82:62:94:e8:
         b2:34:e5:19:c6:a1:7c:da:44:68:f3:e8:3d:be:89:7d:b8:2a:
         63:da:84:2c:e6:54:d5:6e:6a:54:88:8b:f8:0b:02:cc:f4:78:
         f6:0c:73:8c:9f:38:9f:67:90:00:47:48:5d:dc:75:ca:5d:6d:
         94:c0:78:d1:d6:8c:7e:47:80:31:84:e7:32:b7:8a:59:44:2c:
         2f:a5:87:4c:63:78:ca:7b:1a:d6:bd:4d:83:59:e1:79:85:11:
         40:8e:bd:cc:0a:83:59:d5:96:59:f4:47:25:37:ca:45:08:39:
         40:c6:89:0b:d3:67:18:8a:f1:bf:73:16:e8:2c:bf:00:43:9b:
         fe:2c:24:6d:12:c3:4a:9e:f6:f9:29:10:65:9f:b4:ff:4a:ad:
         b8:92:88:2c:ed:7a:a3:fd:90:b5:c2:54:f9:48:e2:11:58:dd:
         96:7e:23:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 9 10:20:25 2024 by rpki-client on console-fra.rpki-client.org