Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/07133debf5feb4792d575cbbfa028b4b2787fd30.roa
File:                     07133debf5feb4792d575cbbfa028b4b2787fd30.roa (raw, json)
Hash identifier:          ShufH2iTt4ZK22yw/uHlZIGW74KBjOyYqW7Fik/2LZ8=
Subject key identifier:   11:10:23:20:AC:20:26:AF:33:26:E8:87:3A:7F:D3:E5:7C:F9:58:B1
Certificate issuer:       /CN=4b7263ae996022ab55e14b7db69a858557a1bac5
Certificate serial:       AACC
Authority key identifier: 95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/07133debf5feb4792d575cbbfa028b4b2787fd30.roa
Signing time:             Sun 18 Jul 2021 23:17:49 +0000
ROA not before:           Tue 13 Jul 2021 03:00:00 +0000
ROA not after:            Thu 13 Jul 2023 03:00:00 +0000
asID:                     271927
IP address blocks:        2803:ea10:3::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43724 (0xaacc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7263ae996022ab55e14b7db69a858557a1bac5
        Validity
            Not Before: Jul 13 03:00:00 2021 GMT
            Not After : Jul 13 03:00:00 2023 GMT
        Subject: CN=07133debf5feb4792d575cbbfa028b4b2787fd30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3f:8e:1b:f1:28:12:8b:79:5c:b6:fb:c6:07:
                    ea:f6:34:0c:26:d4:91:ed:4a:0c:dd:62:58:51:07:
                    c5:a7:c9:c0:0e:78:a8:54:37:0e:74:88:8a:f9:bb:
                    fc:8f:05:7c:0e:ed:0a:20:12:6a:63:9c:c1:1f:31:
                    5f:cd:cb:de:8f:54:93:83:6d:72:1b:4f:93:fe:11:
                    1c:00:cf:c8:a8:dd:9a:39:43:e9:87:5d:ae:8b:b3:
                    20:d4:da:3c:9a:d6:2c:39:af:55:0b:44:33:b7:f2:
                    af:34:c8:b0:ce:81:e7:5b:d5:cb:6a:b9:54:7c:f3:
                    07:c0:e8:f1:37:a9:a1:2f:84:f3:17:48:9c:a6:4c:
                    33:6d:52:8b:59:2f:90:41:8e:15:95:2e:2b:26:3d:
                    a9:a0:7c:96:a8:09:f5:5e:1a:78:e7:c7:94:d3:1a:
                    7c:52:35:a0:4a:2a:c4:f3:b4:5e:dd:7b:b1:f1:d0:
                    b0:99:94:ba:53:94:df:e5:b9:e9:c7:4b:d3:33:80:
                    a8:c9:7a:af:d4:33:4c:cc:a1:4a:00:d2:e2:20:23:
                    17:66:e7:40:3b:9d:68:07:05:e2:da:d2:ef:99:d3:
                    da:af:47:6a:58:ce:1e:8b:80:d7:ad:3d:8d:b0:57:
                    1d:c7:6f:f1:5c:37:50:a9:94:87:cc:e9:69:0d:d3:
                    21:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:10:23:20:AC:20:26:AF:33:26:E8:87:3A:7F:D3:E5:7C:F9:58:B1
            X509v3 Authority Key Identifier:
                keyid:95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/07133debf5feb4792d575cbbfa028b4b2787fd30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/4b7263ae996022ab55e14b7db69a858557a1bac5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:5d:58:d1:0e:57:48:38:26:cc:ff:e0:7c:40:0d:31:f9:ef:
         68:87:57:23:b0:e3:60:f2:86:71:dd:0b:46:03:b9:d3:55:f3:
         99:61:bc:69:58:f8:30:c7:e1:88:57:b1:c6:a3:9a:b6:c9:d1:
         02:6e:7b:0e:30:c3:e4:93:9f:b0:2a:24:09:ed:9e:a8:62:c2:
         96:b6:a1:c3:ed:70:32:ea:ba:97:17:48:1a:ec:9f:a9:32:bd:
         47:0b:52:fe:99:c8:e9:c0:fc:bb:73:59:07:9c:65:79:2c:39:
         38:58:3e:f9:ac:0b:79:cb:25:6c:fd:38:b5:67:9e:be:6b:2b:
         fd:f6:c6:eb:cd:e3:6f:ad:0d:05:e9:e1:a5:85:65:84:07:9b:
         7f:47:ab:44:40:5c:0c:c1:0d:25:64:60:f0:6e:30:48:10:0c:
         c1:cc:10:c4:95:79:4f:b9:40:18:e6:48:ec:eb:cf:b3:44:6a:
         58:2a:57:34:fd:98:25:69:99:a6:24:03:70:00:03:3e:0e:61:
         d5:67:6f:1b:5c:0a:ca:f6:70:33:52:e7:ce:e7:fa:02:98:a5:
         8e:76:e0:2d:de:29:f7:1f:9e:23:38:f9:a0:38:24:51:e2:2b:
         4f:66:cf:f5:15:b9:a8:f2:4f:7e:d4:cf:7e:32:e3:fa:51:74:
         d2:b6:f1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:18 2023 by rpki-client on console-fra.rpki-client.org