Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e4d9cc451043a90505f82ac7cf933f36e12997b3.roa
File:                     e4d9cc451043a90505f82ac7cf933f36e12997b3.roa (raw, json)
Hash identifier:          1el/+UJLOPN/qTBsdb2Hi88bsnoTUTOOq+vSKfJU01c=
Subject key identifier:   5D:B7:72:DA:20:18:41:DF:B6:CA:4D:97:26:AE:B0:42:83:45:31:5A
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       08297B
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e4d9cc451043a90505f82ac7cf933f36e12997b3.roa
Signing time:             Wed 07 Sep 2022 22:16:17 +0000
ROA not before:           Wed 20 Jul 2022 03:00:00 +0000
ROA not after:            Wed 30 Apr 2025 03:00:00 +0000
asID:                     271891
IP address blocks:        2801:151:11::/48 maxlen: 48
                          2801:151:57::/48 maxlen: 48
                          2801:151:58::/48 maxlen: 48
                          2801:151:59::/48 maxlen: 48
                          2801:151:a3::/48 maxlen: 48
                          2801:151:a4::/48 maxlen: 48
                          2801:151:a2::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534907 (0x8297b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Jul 20 03:00:00 2022 GMT
            Not After : Apr 30 03:00:00 2025 GMT
        Subject: CN=e4d9cc451043a90505f82ac7cf933f36e12997b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:60:10:d3:9f:2b:84:10:8b:60:17:8c:ec:4e:
                    f1:b0:42:4b:9d:14:ba:9a:74:ee:06:5c:88:7d:a3:
                    b8:6c:6a:92:1f:c1:ba:bd:3d:17:f9:07:13:b7:8d:
                    fb:00:bc:e5:a2:6d:23:c4:ce:87:21:89:53:55:66:
                    10:ac:15:5c:5b:95:d2:15:31:80:b0:fe:b4:0a:b8:
                    f6:f9:1e:a1:b7:f2:1f:8d:47:50:21:cc:69:8d:90:
                    68:bb:8f:63:8f:9c:32:79:32:a7:40:98:e2:b8:24:
                    10:bc:f4:49:a2:b4:33:72:9b:51:90:a2:11:9e:8f:
                    1e:13:8d:10:e7:9d:fb:32:c1:c7:00:94:75:ac:1e:
                    ef:99:bc:23:0d:cb:06:fe:61:61:51:8d:11:36:74:
                    4c:87:88:5c:15:92:3a:d9:ff:ff:c8:4f:e3:11:d6:
                    65:69:30:3b:a2:d7:11:d9:db:04:af:c7:4f:a5:b3:
                    ac:b4:32:09:7b:c9:fe:67:85:f8:c6:a2:bd:5c:2f:
                    2e:63:9f:e7:1f:22:d4:d6:0c:dd:0e:7a:fc:0b:b1:
                    17:11:6d:b7:37:2c:eb:25:5a:df:cd:74:4c:9d:4d:
                    89:c0:99:c0:41:44:ca:64:8c:88:8c:d2:d8:dd:dc:
                    13:3b:c2:87:78:1a:dd:70:2a:fb:f7:cf:f3:c0:a9:
                    c7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B7:72:DA:20:18:41:DF:B6:CA:4D:97:26:AE:B0:42:83:45:31:5A
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e4d9cc451043a90505f82ac7cf933f36e12997b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:11::/48
                  2801:151:57::-2801:151:59:ffff:ffff:ffff:ffff:ffff
                  2801:151:a2::-2801:151:a4:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         04:46:00:0c:40:63:b9:4a:cf:73:56:e7:c9:77:06:2c:19:2f:
         da:0c:68:93:66:10:fd:b2:85:f4:6b:9d:e0:16:4b:50:b6:45:
         e4:80:ce:b6:dc:fa:03:c0:69:1c:05:22:b1:b1:dd:ba:2c:20:
         58:ab:43:11:2b:ee:62:29:5a:92:b5:4e:0c:f4:05:4e:5a:2b:
         d0:6f:fb:97:ca:55:ca:06:00:20:73:37:9e:c7:fe:62:03:8c:
         95:37:e3:2b:b8:89:5e:e1:1a:01:d4:57:19:0c:79:de:50:d6:
         97:93:4d:de:d4:9b:72:3a:27:58:53:07:54:d1:bc:fe:40:b9:
         ea:36:a3:e7:70:72:30:bd:f4:fa:d7:ac:e0:91:e8:b5:f3:c8:
         7d:e4:79:59:a7:55:d7:03:6d:8b:df:5d:3e:27:a5:70:ed:16:
         79:22:60:ec:d5:1d:b6:3b:73:ec:39:55:df:9a:c5:25:31:77:
         4c:1e:3e:e0:2e:12:e7:e0:f1:13:d0:bf:3b:0a:12:08:43:71:
         0e:b0:6c:ae:e2:86:f4:61:77:b9:e3:e7:27:55:9d:91:1c:a7:
         14:32:98:51:74:0c:62:68:0b:30:23:d3:38:31:99:4c:88:03:
         3c:9e:06:d2:5f:f2:ec:7d:ef:50:6d:07:ad:f0:b7:26:46:a0:
         e4:1c:c8:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:31 2023 by rpki-client on console-ams.rpki-client.org