Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/4192cc210d73cd9dbd8767e6156ab2db2a6e201d.roa
File:                     4192cc210d73cd9dbd8767e6156ab2db2a6e201d.roa (raw, json)
Hash identifier:          OwLD/uNLVRgMEFGR5+/Gv4pHGJi8lro7xli9wXRQEDA=
Subject key identifier:   C7:96:E7:57:74:72:3E:3B:6A:C2:1D:1E:C1:1A:EE:3C:47:AF:FD:01
Certificate issuer:       /CN=6b5d884a539dc194148028738ffe2577e3a345c2
Certificate serial:       09F4
Authority key identifier: FD:7E:40:C9:CB:F3:AD:08:C5:E6:2F:80:E8:AC:7B:32:B7:F3:7E:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b5d884a539dc194148028738ffe2577e3a345c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/4192cc210d73cd9dbd8767e6156ab2db2a6e201d.roa
Signing time:             Mon 19 Apr 2021 14:19:45 +0000
ROA not before:           Mon 19 Apr 2021 03:00:00 +0000
ROA not after:            Wed 19 Apr 2023 03:00:00 +0000
asID:                     271901
IP address blocks:        2801:1de::/46 maxlen: 46

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2548 (0x9f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5d884a539dc194148028738ffe2577e3a345c2
        Validity
            Not Before: Apr 19 03:00:00 2021 GMT
            Not After : Apr 19 03:00:00 2023 GMT
        Subject: CN=4192cc210d73cd9dbd8767e6156ab2db2a6e201d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:da:4b:99:2a:12:87:4d:7d:35:f3:9f:de:
                    6c:02:ef:f5:e9:c5:5d:01:13:e1:e6:79:00:0d:ef:
                    58:3c:c4:e3:3a:26:68:cb:e2:bd:13:26:0b:a3:73:
                    7d:75:f4:e9:38:81:f2:2c:7b:06:1a:e9:79:8e:06:
                    63:13:b7:94:1b:44:f0:87:19:2c:59:d5:71:ce:ee:
                    79:5b:8f:e9:9c:60:a7:eb:86:b2:bc:f2:99:38:95:
                    b3:8d:ed:1a:76:aa:1e:1a:cd:48:29:48:6b:59:28:
                    14:68:08:44:77:9a:14:3a:67:f9:98:72:51:0d:16:
                    4c:33:74:99:41:07:d7:68:54:3e:c4:53:d7:86:47:
                    9f:7f:3f:ff:aa:65:30:59:12:55:b9:ba:bf:c1:42:
                    88:8a:89:35:67:6f:45:76:ee:d1:62:a4:a9:24:9f:
                    49:2f:ed:0c:42:98:b4:13:7f:c8:8d:6c:f6:fa:43:
                    03:e5:c6:0d:0e:a6:44:c9:9c:7f:34:fa:8c:8a:93:
                    46:1a:94:c9:7c:2c:6a:38:3f:a3:14:e6:66:86:32:
                    4e:51:bd:e5:6b:90:a3:b7:ec:20:41:a0:84:37:ae:
                    b9:1e:45:b3:62:3a:92:93:fb:66:e6:85:7f:7e:0b:
                    ac:d0:68:90:85:08:7c:ea:84:b5:f0:8e:36:90:43:
                    27:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:96:E7:57:74:72:3E:3B:6A:C2:1D:1E:C1:1A:EE:3C:47:AF:FD:01
            X509v3 Authority Key Identifier:
                keyid:FD:7E:40:C9:CB:F3:AD:08:C5:E6:2F:80:E8:AC:7B:32:B7:F3:7E:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b5d884a539dc194148028738ffe2577e3a345c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/4192cc210d73cd9dbd8767e6156ab2db2a6e201d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3dd161a7-6dca-445c-bdcf-55fb64e474f3/6b5d884a539dc194148028738ffe2577e3a345c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1de::/46

    Signature Algorithm: sha256WithRSAEncryption
         6b:96:34:f5:0e:c4:3c:83:ce:77:08:db:0b:fb:50:4d:a3:36:
         e1:7f:ec:c1:f6:f8:09:7b:c2:3a:5b:ed:d6:d3:cb:d7:92:8a:
         96:0e:4a:77:48:99:c2:75:c8:c6:39:43:66:5b:2d:ca:1c:c0:
         b7:16:2d:3c:90:a9:5b:ec:0f:da:5f:4e:c3:b2:80:27:05:9d:
         70:90:71:24:d0:ab:91:ea:5d:9b:fd:e8:6a:70:38:54:4b:e3:
         56:ac:7d:16:85:5b:1e:97:cf:b6:a2:79:ab:21:1d:5e:dc:4a:
         8d:43:db:5f:8d:3b:65:5f:17:20:4f:74:0a:d0:9f:eb:f4:e0:
         cf:aa:84:48:95:f2:4b:6b:0d:50:12:69:17:94:54:86:3f:c8:
         85:62:00:07:de:d9:4b:bc:14:81:de:04:05:23:22:0c:02:ca:
         1f:89:30:80:a0:fa:78:81:44:78:13:5f:75:78:79:87:08:99:
         83:b1:92:3b:73:37:f8:8c:ca:a8:b5:8e:f2:1e:e3:b8:8f:20:
         f6:c3:fb:07:8f:d9:fa:d2:b8:00:f7:43:79:04:15:f0:04:ad:
         6a:e8:54:57:2e:9c:66:4f:cc:08:2f:ee:cf:20:15:4d:16:5a:
         cd:db:c9:6e:fa:69:da:88:86:26:06:f8:db:3b:e5:a3:f4:d6:
         ff:a7:33:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:30 2023 by rpki-client on console-ams.rpki-client.org