Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/469cb5e35477c09f80a4008e77aea9384cc81815.roa
File:                     469cb5e35477c09f80a4008e77aea9384cc81815.roa (raw, json)
Hash identifier:          tjem8dX+rmEg9KeZnHpSnOJceyphZAWLpYstXZ0/zIM=
Subject key identifier:   4C:3A:76:D4:5B:55:7F:B4:AE:99:7B:CF:44:D9:BC:99:F8:AD:C8:DC
Certificate issuer:       /CN=6f35480750f171363a97d0fff033a3b0d1b09a18
Certificate serial:       075A
Authority key identifier: 79:B5:73:A5:95:E7:DA:B5:A9:63:FB:06:73:22:F3:6E:58:9F:07:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f35480750f171363a97d0fff033a3b0d1b09a18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/469cb5e35477c09f80a4008e77aea9384cc81815.roa
Signing time:             Thu 10 Nov 2022 20:47:35 +0000
ROA not before:           Wed 09 Nov 2022 20:46:30 +0000
ROA not after:            Sun 10 Nov 2024 20:46:30 +0000
asID:                     272883
IP address blocks:        2803:5a90:6000::/35 maxlen: 35

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 13:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1882 (0x75a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f35480750f171363a97d0fff033a3b0d1b09a18
        Validity
            Not Before: Nov  9 20:46:30 2022 GMT
            Not After : Nov 10 20:46:30 2024 GMT
        Subject: CN=469cb5e35477c09f80a4008e77aea9384cc81815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c2:e1:c5:59:cf:8f:32:76:b4:50:91:5a:55:
                    aa:5b:ab:00:53:f0:d0:23:9f:ad:2f:7a:0f:ad:a1:
                    99:f9:97:bd:e0:1f:b3:ac:b7:ab:95:02:9b:51:fd:
                    4f:f9:a2:c3:3d:18:71:14:84:13:b3:19:4c:67:5d:
                    bc:fd:b1:b8:44:e0:7a:7a:0a:ea:5e:9a:3a:ac:a5:
                    1b:e7:b9:4b:40:e5:ce:c9:bb:f9:df:63:c6:e5:87:
                    01:0a:d4:bb:b9:26:0e:0a:c6:54:94:0e:39:51:29:
                    97:6a:ec:4e:95:29:20:92:7d:56:fa:7d:93:89:7d:
                    d6:fa:27:86:8c:71:be:72:d3:00:1e:75:8f:43:d7:
                    7b:d0:4c:8d:b3:99:6d:34:f1:d7:0f:fb:af:c4:35:
                    0e:ac:c6:70:9f:32:27:62:61:07:83:92:f3:39:d6:
                    77:94:41:f2:1a:8c:b3:4d:66:d0:6e:be:d7:91:41:
                    0f:f9:59:fe:7b:fd:d3:26:91:9d:fa:61:92:1c:4d:
                    86:00:4b:81:a5:45:35:65:e7:28:21:51:7c:d0:84:
                    78:98:eb:47:c0:4a:53:ce:ee:05:f1:69:bc:aa:67:
                    3d:1f:08:f9:2e:62:7c:25:65:f8:f9:25:17:3a:b4:
                    08:fe:0e:7b:f0:d1:1b:dd:c8:87:c7:40:7c:ae:0d:
                    ac:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3A:76:D4:5B:55:7F:B4:AE:99:7B:CF:44:D9:BC:99:F8:AD:C8:DC
            X509v3 Authority Key Identifier:
                keyid:79:B5:73:A5:95:E7:DA:B5:A9:63:FB:06:73:22:F3:6E:58:9F:07:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f35480750f171363a97d0fff033a3b0d1b09a18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/469cb5e35477c09f80a4008e77aea9384cc81815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1d386949-502b-4261-8e0f-681a283924e9/6f35480750f171363a97d0fff033a3b0d1b09a18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5a90:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         34:5d:05:8e:1b:34:3d:b7:d6:ab:d3:21:e7:bb:b4:ec:88:22:
         89:66:49:2b:6c:bf:64:24:8d:11:cb:8a:d7:d2:77:05:5a:38:
         e7:c9:a8:91:9d:0f:be:6e:46:1e:06:f9:b8:75:d0:2a:36:e8:
         6c:10:57:98:b3:ba:12:4a:aa:bd:45:3b:18:e7:b3:9e:17:32:
         85:cd:5a:0d:5c:25:93:0d:32:92:71:d0:99:56:9f:b1:44:2e:
         48:4e:d0:ad:8d:29:df:80:08:6d:eb:7e:cd:93:f7:13:06:58:
         c5:4b:17:66:51:0c:e2:68:92:49:b9:8e:5f:5c:bb:fa:dc:d2:
         f7:72:80:3a:fb:72:ce:27:8a:08:20:67:2e:1f:31:a1:72:8c:
         e2:b0:ad:7d:39:8b:fe:9d:89:6f:8c:4b:b6:af:64:e2:4f:06:
         0b:1d:4a:d5:48:f6:4c:af:7b:a5:b3:34:c0:36:3d:a5:66:37:
         b5:89:e8:90:13:d9:1e:39:bf:23:af:1f:34:07:b5:25:ec:ef:
         b3:5e:89:34:c7:e9:bf:d7:b5:0d:18:bf:56:fb:95:fc:ae:7d:
         c9:dd:bd:ef:76:f4:d3:c6:20:48:d9:1e:b2:fa:a3:e2:8b:cc:
         64:d2:7c:c8:7a:48:e7:4e:8b:4f:d9:1c:70:53:17:ba:29:8a:
         de:ac:ef:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 17:42:49 2024 by rpki-client on console-fra.rpki-client.org