Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/0a5dbd403c61ede5a4270289f0aedaeaa656a1e4.roa
File:                     0a5dbd403c61ede5a4270289f0aedaeaa656a1e4.roa (raw, json)
Hash identifier:          IPXsWhkbSSAjLNYdslgTmsmQrL7rgQko0t362V8FKHw=
Subject key identifier:   BB:4C:D0:30:D2:13:39:8E:E3:3C:CA:A4:FC:AA:A0:BD:14:A9:2A:89
Certificate issuer:       /CN=bd8889eb5168a4d99330c533c75e35a55c7dbde8
Certificate serial:       06A9
Authority key identifier: D6:1A:34:51:50:78:5F:1D:FB:A3:DE:8D:BC:60:8D:3B:DF:78:1C:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd8889eb5168a4d99330c533c75e35a55c7dbde8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/0a5dbd403c61ede5a4270289f0aedaeaa656a1e4.roa
Signing time:             Mon 25 Jul 2022 18:01:57 +0000
ROA not before:           Mon 25 Jul 2022 03:00:00 +0000
ROA not after:            Thu 25 Jul 2024 03:00:00 +0000
asID:                     272030
IP address blocks:        2803:5510::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1705 (0x6a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd8889eb5168a4d99330c533c75e35a55c7dbde8
        Validity
            Not Before: Jul 25 03:00:00 2022 GMT
            Not After : Jul 25 03:00:00 2024 GMT
        Subject: CN=0a5dbd403c61ede5a4270289f0aedaeaa656a1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:db:f5:a5:ad:3f:cf:dd:6e:dd:27:91:a0:
                    aa:73:5a:2d:3b:50:0a:56:ff:8b:a6:cd:c6:79:13:
                    47:2e:4a:0a:c8:37:f0:8d:ca:98:64:da:c4:ff:5b:
                    68:c2:b8:2b:83:1a:07:85:54:8a:d1:23:7f:de:14:
                    6f:2a:ad:c7:7b:31:ed:bc:f7:38:9a:af:d3:81:2d:
                    2b:d9:2d:54:ca:fd:61:40:f1:0b:b6:00:d9:c2:64:
                    9c:c1:32:bc:8c:3b:d4:de:95:9c:e7:b7:4b:bf:f7:
                    0f:52:af:52:e4:90:33:42:1f:3f:6d:ce:80:32:e4:
                    90:ed:46:da:cc:75:e3:50:29:21:a0:12:5d:4e:d1:
                    ce:30:4a:07:cc:d8:95:ad:c1:19:0c:8f:5c:3e:a9:
                    57:fc:3b:bd:a0:58:80:7e:1a:7d:de:df:83:f2:b9:
                    f1:23:64:52:79:6c:11:cb:57:26:db:0b:84:a2:d1:
                    3e:d4:f3:72:ec:59:d8:4b:13:1b:4d:e4:c7:ca:44:
                    1d:73:54:da:f8:33:86:89:0f:c0:f6:6b:02:92:b4:
                    7f:23:5e:b2:a2:08:40:14:de:4f:29:de:df:7f:b4:
                    72:7b:2f:c1:dc:44:1e:c1:64:63:e7:f7:7a:21:d1:
                    bf:13:c7:ef:ef:66:5c:90:5a:b6:60:3c:fe:1e:6a:
                    60:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4C:D0:30:D2:13:39:8E:E3:3C:CA:A4:FC:AA:A0:BD:14:A9:2A:89
            X509v3 Authority Key Identifier:
                keyid:D6:1A:34:51:50:78:5F:1D:FB:A3:DE:8D:BC:60:8D:3B:DF:78:1C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd8889eb5168a4d99330c533c75e35a55c7dbde8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/0a5dbd403c61ede5a4270289f0aedaeaa656a1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5510::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:61:1c:12:13:2d:a2:64:43:41:a5:5e:41:f4:0c:1b:5f:a5:
         54:59:69:82:d7:d4:9c:ca:04:ba:c2:d8:32:f9:00:4d:af:4b:
         6f:02:60:b7:52:7b:9a:85:14:e3:72:f4:3c:0f:15:58:28:78:
         b0:89:f3:b3:9b:19:83:5e:2f:17:30:30:c6:3b:d8:8b:fc:90:
         c5:d8:9f:2a:b3:9c:af:78:2f:4c:f0:27:93:ce:ac:26:5f:40:
         cf:6f:0c:42:b0:54:35:f3:22:06:e5:84:bd:20:2f:8c:9f:95:
         de:ec:99:11:50:35:03:dc:be:5b:9a:45:1f:0b:40:8f:fd:ca:
         3e:83:cb:5b:0b:7a:cb:c2:02:c0:92:3c:90:95:8f:b8:cb:29:
         27:72:cf:17:77:bc:f5:02:3a:0f:29:33:0b:30:7c:b6:3d:6a:
         b2:48:35:cb:57:7f:0f:ac:37:e0:97:9b:86:5f:12:c3:7e:6e:
         e6:af:87:c4:03:f4:1d:8b:f5:5f:18:ef:45:0f:4d:d1:7b:cc:
         99:37:03:0e:68:e7:d5:d4:2f:69:e1:ab:4e:36:de:34:98:45:
         a0:d7:85:a4:74:fe:ac:8f:03:dd:59:04:6d:f8:27:1a:82:e2:
         b7:4a:cd:9c:25:ec:e8:ae:e2:b2:ff:95:02:b4:f2:91:03:30:
         a0:da:ce:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:15 2023 by rpki-client on console-fra.rpki-client.org