Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/ea996f222466cd992d2d731becd303078b34cf48.roa
File:                     ea996f222466cd992d2d731becd303078b34cf48.roa (raw, json)
Hash identifier:          4k9S6PKGog6nm1hbAhz0u5mCicdbRvEc1hW8Nuk8jaM=
Subject key identifier:   BD:03:85:82:41:94:20:BB:6E:9F:35:F1:68:97:D3:E7:ED:E5:AF:DD
Certificate issuer:       /CN=eaec8ce2b33df137eb80bce3bc979b817d27173e
Certificate serial:       0D105F
Authority key identifier: 84:4E:A5:DB:49:5C:3F:9E:F0:26:D5:3E:0D:0A:38:0E:99:AE:3F:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eaec8ce2b33df137eb80bce3bc979b817d27173e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/ea996f222466cd992d2d731becd303078b34cf48.roa
Signing time:             Wed 24 Mar 2021 22:51:48 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     263732
IP address blocks:        2803:af80::/33 maxlen: 64
                          2803:af80::/48 maxlen: 48
                          2803:af80:caf3::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856159 (0xd105f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaec8ce2b33df137eb80bce3bc979b817d27173e
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=ea996f222466cd992d2d731becd303078b34cf48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e4:da:7f:38:9c:0b:be:0a:46:09:f1:ff:00:
                    b4:1e:3e:7f:7d:07:0d:2c:4f:31:71:7d:4c:73:86:
                    66:15:5e:ff:82:b7:cd:55:c2:91:03:0a:76:d8:97:
                    02:3f:43:46:55:a4:6e:fa:4c:08:6a:98:61:55:24:
                    e6:90:83:6a:96:1d:4e:e7:33:a6:87:25:a1:44:2a:
                    15:bf:43:c0:eb:c6:a7:67:76:1d:7a:77:d0:21:5c:
                    02:09:70:81:56:e2:31:51:2e:7d:ec:8d:16:03:c9:
                    6b:f8:b8:ec:ac:5d:d1:19:bd:04:e9:de:7d:b1:14:
                    a6:eb:e8:85:1e:7a:6a:8d:6c:08:20:5a:b4:72:66:
                    66:f4:22:06:f9:e7:29:e2:ae:83:f6:4c:49:e8:cd:
                    72:c7:c8:78:44:f5:00:a7:09:55:b3:f9:e2:d7:d4:
                    37:2b:91:9e:31:15:47:8a:88:ef:84:0d:85:16:a5:
                    52:7a:4f:c4:ab:09:89:c4:b2:ff:dc:04:2b:af:8a:
                    dd:ff:86:77:b1:89:89:47:86:bd:41:97:f0:82:2f:
                    d0:5d:52:97:be:72:b8:51:22:ce:27:af:5c:72:cd:
                    c5:d3:2d:d6:eb:f4:47:cf:e3:ec:d1:23:7f:4a:34:
                    1d:c0:85:6c:94:cf:4a:b9:1a:28:76:05:83:71:da:
                    4b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:03:85:82:41:94:20:BB:6E:9F:35:F1:68:97:D3:E7:ED:E5:AF:DD
            X509v3 Authority Key Identifier:
                keyid:84:4E:A5:DB:49:5C:3F:9E:F0:26:D5:3E:0D:0A:38:0E:99:AE:3F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eaec8ce2b33df137eb80bce3bc979b817d27173e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/ea996f222466cd992d2d731becd303078b34cf48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/eaec8ce2b33df137eb80bce3bc979b817d27173e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af80::/33
                  2803:af80:caf3::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:19:88:fc:6d:04:f0:81:7f:9c:aa:94:88:87:0f:fc:0f:7e:
         0d:96:bb:3b:09:bc:28:02:7d:5f:b2:30:92:9b:40:15:98:61:
         a3:3c:f8:63:4f:3a:19:89:9b:ee:42:eb:49:4b:15:ca:ad:56:
         22:0e:0b:f5:13:6e:a6:2d:1c:7b:c0:58:97:7f:03:ce:e3:f0:
         d7:bf:27:c5:06:40:d3:31:0b:fb:f2:b3:33:d2:e9:bf:a3:92:
         39:db:39:60:e6:0a:c0:23:ed:03:07:b4:2a:cc:45:fe:04:fd:
         71:5a:47:21:94:63:92:7c:1f:b2:42:0b:5b:f8:43:ed:2e:17:
         6b:e8:74:ea:4e:cd:3c:4e:f7:ce:34:c4:ba:21:7f:0e:aa:28:
         5f:74:02:65:87:52:d4:2d:8e:16:51:fd:71:11:4a:24:36:30:
         c8:83:6c:38:3c:a5:64:aa:b2:b2:ac:d5:98:76:4c:33:58:83:
         15:09:cd:86:6a:05:34:b3:62:26:0e:93:55:47:e4:4f:d3:1a:
         3e:92:d5:fb:b2:ff:94:71:49:3d:11:68:e2:13:d9:9b:2b:b4:
         db:f0:00:32:e0:ac:04:4b:af:f7:9a:01:38:29:60:8c:87:aa:
         f6:94:d3:69:4d:0f:af:c4:0a:2d:f6:fb:bd:5e:15:60:50:84:
         6d:79:89:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org