Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f382b92-f970-4d47-8d80-7b4255bd2a92/d3ff7fbb6e4420ca2b1bbf3f0c69c4e084159341.roa
File:                     d3ff7fbb6e4420ca2b1bbf3f0c69c4e084159341.roa (raw, json)
Hash identifier:          PDJbtO5t+splrMvmJdqs3qYFLz/p6aEmzoxyDjIe8Kw=
Subject key identifier:   D4:DF:A1:06:4D:82:FB:64:1A:6F:BE:FF:05:8C:B2:64:72:AE:08:3C
Certificate issuer:       /CN=83224a116c610d8fbb400355d82709d9c5e1946b
Certificate serial:       16DF6E
Authority key identifier: EC:05:27:23:42:39:9D:9B:DE:0A:53:2D:0D:6E:1A:64:2C:1B:B1:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83224a116c610d8fbb400355d82709d9c5e1946b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3f382b92-f970-4d47-8d80-7b4255bd2a92/d3ff7fbb6e4420ca2b1bbf3f0c69c4e084159341.roa
Signing time:             Fri 05 Aug 2022 21:30:03 +0000
ROA not before:           Fri 05 Aug 2022 21:28:15 +0000
ROA not after:            Mon 05 Aug 2024 21:28:15 +0000
asID:                     264668
IP address blocks:        2803:1f60::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1498990 (0x16df6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83224a116c610d8fbb400355d82709d9c5e1946b
        Validity
            Not Before: Aug  5 21:28:15 2022 GMT
            Not After : Aug  5 21:28:15 2024 GMT
        Subject: CN=d3ff7fbb6e4420ca2b1bbf3f0c69c4e084159341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3b:d1:59:08:ff:53:ac:a6:9b:ce:30:bf:83:
                    f2:53:82:1a:b8:e5:f6:37:67:dd:0d:c5:91:08:e9:
                    81:21:88:a9:b0:aa:06:ea:7e:9b:ec:84:9f:c8:0a:
                    58:08:f7:c7:ce:26:49:7c:db:01:0c:9a:5c:8c:7a:
                    8f:7b:17:1e:b5:08:48:31:f5:02:3b:fa:d4:da:4c:
                    e2:e5:c4:f2:b7:12:42:ab:b3:0a:bd:18:66:47:8c:
                    18:09:c0:c8:c3:28:dc:12:d6:73:42:21:ce:6c:1e:
                    92:d5:8b:2b:f2:47:bf:12:68:24:97:58:a3:16:7c:
                    34:d3:eb:75:5e:48:eb:5c:9f:32:e0:c2:e7:85:8a:
                    e3:c3:82:87:35:13:03:7e:d5:eb:4e:e9:21:14:67:
                    a5:14:60:c3:40:c5:99:b6:f8:0d:cc:0b:09:fe:74:
                    9f:96:81:72:ab:6a:31:f3:b3:e7:7f:46:ab:37:48:
                    0d:39:2d:f9:da:16:f9:13:40:8a:1c:15:da:df:bb:
                    11:08:4f:85:9a:cb:92:f0:62:39:de:ea:29:0c:a2:
                    d6:87:68:c6:e9:ff:1d:eb:f6:33:12:6c:c5:93:2c:
                    72:86:fb:ad:1b:0a:31:6e:5b:fd:75:a9:da:dd:f1:
                    23:db:ee:58:1f:5f:bb:75:b5:8a:04:e6:8c:b9:55:
                    6b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DF:A1:06:4D:82:FB:64:1A:6F:BE:FF:05:8C:B2:64:72:AE:08:3C
            X509v3 Authority Key Identifier:
                keyid:EC:05:27:23:42:39:9D:9B:DE:0A:53:2D:0D:6E:1A:64:2C:1B:B1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83224a116c610d8fbb400355d82709d9c5e1946b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f382b92-f970-4d47-8d80-7b4255bd2a92/d3ff7fbb6e4420ca2b1bbf3f0c69c4e084159341.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3f382b92-f970-4d47-8d80-7b4255bd2a92/83224a116c610d8fbb400355d82709d9c5e1946b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:50:32:4d:84:41:5f:b3:de:4b:3d:6f:b9:33:59:91:f4:57:
         76:a9:1a:3d:9d:be:00:1e:dc:f8:26:02:a0:8d:4d:9e:04:7f:
         4f:83:2e:55:40:5e:45:15:c7:8a:e1:6d:b2:01:89:39:0b:38:
         49:75:4c:98:09:55:9b:ca:48:44:c0:63:26:40:8b:62:73:c5:
         59:63:44:69:d6:0e:41:3e:96:a3:7d:79:4b:a1:46:05:cd:81:
         36:ce:b6:d4:db:57:ba:13:60:f0:59:ba:c7:72:05:8d:78:31:
         49:7f:00:6f:ff:96:a3:e6:65:b6:60:58:4d:13:9e:47:2f:67:
         24:ae:95:bd:a9:84:36:d2:ab:72:29:b8:38:6e:45:cd:ed:d3:
         bc:97:4f:22:8b:5e:49:35:eb:67:1b:a1:e2:a5:c5:ba:59:2d:
         6a:20:ae:69:c2:71:d0:c7:f9:62:6d:f2:c5:af:7b:9c:93:ec:
         ae:70:ba:ea:23:39:56:3a:88:e7:f1:87:42:56:de:d2:15:03:
         fa:a7:99:7c:4f:b1:2d:68:17:98:91:a8:53:e9:46:f6:a1:6d:
         40:91:69:27:df:f4:de:ba:ce:c5:bf:69:bb:68:6d:54:89:5f:
         eb:aa:58:51:e4:66:f9:f1:bb:55:12:63:c8:11:7c:8e:02:4a:
         d5:6b:be:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:15 2023 by rpki-client on console-fra.rpki-client.org