Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/a2845d4070006943aa41c1f5c262cb7d2d9012c4.roa
File:                     a2845d4070006943aa41c1f5c262cb7d2d9012c4.roa (raw, json)
Hash identifier:          /0JOUn6OBDWNvR3IDx5bvKvJt4Bwe4ZImEcQsHuUbKI=
Subject key identifier:   92:8F:69:46:F4:35:25:9D:E3:6B:3F:42:88:23:9D:DB:F4:5C:15:6B
Certificate issuer:       /CN=32e6dcae35b8f87e22b7eff4597472f5c82bbab9
Certificate serial:       1ACA
Authority key identifier: EC:76:B5:9B:D4:DB:03:C6:34:89:AB:24:93:08:6E:C5:B4:F2:E0:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32e6dcae35b8f87e22b7eff4597472f5c82bbab9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/a2845d4070006943aa41c1f5c262cb7d2d9012c4.roa
Signing time:             Wed 25 May 2022 18:20:01 +0000
ROA not before:           Wed 25 May 2022 03:00:00 +0000
ROA not after:            Sat 25 May 2024 03:00:00 +0000
asID:                     272136
IP address blocks:        2801:109::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6858 (0x1aca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e6dcae35b8f87e22b7eff4597472f5c82bbab9
        Validity
            Not Before: May 25 03:00:00 2022 GMT
            Not After : May 25 03:00:00 2024 GMT
        Subject: CN=a2845d4070006943aa41c1f5c262cb7d2d9012c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:78:d5:1e:75:ec:5c:dd:63:24:42:96:54:ef:
                    f3:67:cb:e2:09:c4:a8:4a:1c:b3:fd:2f:05:1a:cc:
                    ba:56:ea:5b:3a:f5:e4:ff:ae:6e:eb:8d:e7:5f:03:
                    4e:0f:3d:e8:1a:55:11:6e:cc:0c:47:de:4f:33:fd:
                    22:0c:cb:78:fa:fe:c9:ca:ff:d2:f5:6a:8b:d3:f3:
                    3d:2f:7f:cd:f2:5e:e9:8a:45:98:a2:6c:b2:23:9b:
                    d7:6a:c9:01:98:5e:ec:6d:63:30:42:8d:40:66:46:
                    fb:18:79:ff:a6:4d:6b:d7:c4:98:88:16:a7:25:4e:
                    97:d3:05:27:c3:81:fe:5c:ec:97:81:2a:bf:e9:92:
                    ca:f2:8b:e3:00:f7:1e:3f:8c:92:7a:59:19:6c:be:
                    bf:53:b2:0c:00:39:82:b7:0f:1a:30:f7:2c:88:89:
                    2a:7a:44:2e:be:4f:9c:16:31:6e:99:b7:f9:76:b4:
                    81:c5:4d:67:41:36:b9:1a:ac:7e:4b:9e:1f:27:1e:
                    cf:af:64:c0:2a:09:9a:10:77:7e:2d:9a:ac:16:6a:
                    bd:d8:98:8b:94:22:ca:50:9b:61:af:8c:99:f2:0e:
                    5d:b6:be:11:35:4a:0f:73:77:4b:d3:0e:51:bb:ef:
                    55:1e:4d:f0:d0:8d:ca:0c:26:01:d3:45:d0:1b:34:
                    a9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8F:69:46:F4:35:25:9D:E3:6B:3F:42:88:23:9D:DB:F4:5C:15:6B
            X509v3 Authority Key Identifier:
                keyid:EC:76:B5:9B:D4:DB:03:C6:34:89:AB:24:93:08:6E:C5:B4:F2:E0:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32e6dcae35b8f87e22b7eff4597472f5c82bbab9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/a2845d4070006943aa41c1f5c262cb7d2d9012c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562daf3e-2479-4f22-a325-f6965bad757d/32e6dcae35b8f87e22b7eff4597472f5c82bbab9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:109::/44

    Signature Algorithm: sha256WithRSAEncryption
         61:22:7e:72:e5:f5:7e:10:ac:e0:aa:47:67:7e:b9:b2:5c:13:
         7b:70:6e:82:b3:e7:65:dc:be:12:99:e8:5a:55:68:a0:fe:67:
         78:de:75:cd:59:1b:da:5e:ae:33:98:a8:26:fa:dc:ee:4d:22:
         cd:f0:bf:ee:29:5d:91:c2:66:84:f7:6f:60:44:1d:b0:e6:f5:
         cb:20:9c:7d:d6:ac:70:b0:49:91:85:89:1d:44:16:a1:ce:8d:
         ec:65:35:77:8b:a5:ba:32:2c:f9:a1:f2:c1:8a:44:4f:62:32:
         b2:c3:c3:9d:90:49:33:6c:61:24:35:d8:63:e0:c3:9a:18:e8:
         6c:74:6c:a1:f9:92:94:95:80:8e:1f:4a:63:33:f9:76:8a:c6:
         12:17:1e:3f:9c:f3:d9:af:77:1d:c1:44:24:07:08:9d:f5:49:
         4b:2b:77:81:38:b7:6f:1a:17:21:0c:6c:56:1d:cc:6c:9e:df:
         e8:dd:30:a0:13:37:2c:b7:44:0b:84:d0:2b:f2:4f:05:4d:7a:
         d5:b8:04:7d:0d:2c:6f:06:93:47:d4:2a:44:05:f6:90:4a:6b:
         4a:e2:3a:49:a2:d6:2d:fa:23:a1:11:11:7c:5b:d9:aa:2e:c3:
         d7:93:ff:a2:0f:67:28:07:8a:e1:23:9c:92:e2:09:31:10:74:
         c6:fd:9f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org