Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/80eb535672d6d865f170b2c9e249f4327c9d2cfa.roa
File:                     80eb535672d6d865f170b2c9e249f4327c9d2cfa.roa (raw, json)
Hash identifier:          XC+i6t9uCe2QYvPpoqMx09aarN0THAVtJH2lA4NFoSc=
Subject key identifier:   08:94:64:C0:0E:0C:BE:C8:7A:3A:4D:FA:0B:72:F6:84:55:E1:6A:78
Certificate issuer:       /CN=b0aa757766600ae92f780498bacfcff9762981a2
Certificate serial:       0D89F3
Authority key identifier: 11:B2:C6:EC:B1:C2:E0:CA:EE:F2:27:05:A1:35:3B:85:FF:B0:E9:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0aa757766600ae92f780498bacfcff9762981a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/80eb535672d6d865f170b2c9e249f4327c9d2cfa.roa
Signing time:             Wed 24 Mar 2021 14:33:05 +0000
ROA not before:           Wed 24 Mar 2021 14:33:05 +0000
ROA not after:            Tue 24 Mar 2026 14:33:05 +0000
asID:                     262239
IP address blocks:        2803:9a00:17e::/48 maxlen: 64

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 16:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887283 (0xd89f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0aa757766600ae92f780498bacfcff9762981a2
        Validity
            Not Before: Mar 24 14:33:05 2021 GMT
            Not After : Mar 24 14:33:05 2026 GMT
        Subject: CN=80eb535672d6d865f170b2c9e249f4327c9d2cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e1:05:50:8c:87:fd:25:b7:91:22:68:23:aa:
                    de:4a:94:58:43:1a:74:d9:d5:0d:05:05:6d:38:21:
                    98:25:e5:39:46:9b:9b:78:8c:ae:b6:28:92:a6:4e:
                    e9:f9:93:8d:d2:c7:66:85:77:47:9b:59:e5:88:66:
                    23:27:1e:95:0f:a5:fd:61:42:3b:97:76:ce:7c:8f:
                    22:5a:e1:07:8f:e8:e2:0d:29:37:0f:be:a2:c3:9a:
                    31:db:6a:84:08:8d:cb:b2:41:c8:37:ac:30:73:18:
                    2e:21:c0:b6:c9:23:8e:8c:06:14:4d:47:ab:74:2a:
                    46:4b:c1:25:a7:41:97:44:45:e1:cb:7b:93:03:1c:
                    57:af:da:ea:12:86:0d:39:24:ba:ab:86:96:14:1e:
                    ee:bf:32:ee:65:c9:a0:be:fc:33:9d:b7:03:d4:43:
                    35:e5:07:17:34:9c:f9:4c:33:d5:05:fd:ad:d6:da:
                    ef:c9:dd:15:0a:ff:07:3e:15:d2:db:6a:85:b9:33:
                    b2:cd:c2:6d:c4:4c:bf:bb:94:18:9c:62:fa:73:90:
                    21:c6:3d:32:76:95:3c:cf:a9:de:09:2a:b7:af:e5:
                    ba:96:00:06:41:ed:ac:08:af:06:4a:6a:2b:4e:ec:
                    00:1e:9e:38:fb:dd:0d:fc:d0:be:2b:53:23:09:8b:
                    e3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:94:64:C0:0E:0C:BE:C8:7A:3A:4D:FA:0B:72:F6:84:55:E1:6A:78
            X509v3 Authority Key Identifier:
                keyid:11:B2:C6:EC:B1:C2:E0:CA:EE:F2:27:05:A1:35:3B:85:FF:B0:E9:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0aa757766600ae92f780498bacfcff9762981a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/80eb535672d6d865f170b2c9e249f4327c9d2cfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/b0aa757766600ae92f780498bacfcff9762981a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9a00:17e::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:3e:8b:f7:0d:f1:66:2a:89:fe:db:06:f9:a1:c0:80:6b:cf:
         cd:8d:25:75:7c:a1:d6:b0:75:64:34:d8:53:bd:f8:04:61:0b:
         98:e7:ea:97:2d:96:27:25:87:22:f9:68:13:82:4b:95:32:fe:
         f6:2f:fe:5a:eb:d5:2a:75:be:14:59:12:1f:10:11:72:f1:97:
         41:98:eb:3e:08:38:34:99:ee:35:e5:c9:c0:4c:bb:dd:fd:9e:
         c4:e3:c7:b1:9d:95:bb:2a:f2:26:18:ab:f7:e6:a5:be:f4:fb:
         89:91:d2:a8:4f:43:d0:6b:5d:46:b6:de:fc:b3:ea:12:72:4f:
         85:9a:4b:b1:64:21:cc:74:b6:31:b4:be:4b:bc:59:14:ff:3e:
         e1:63:12:38:37:9c:38:ea:c1:1f:00:64:d4:1b:91:9e:2b:57:
         5f:f0:c4:dd:e8:ea:74:c4:e6:36:07:65:1c:b5:38:89:90:12:
         55:87:a2:28:7b:84:c7:66:21:c7:59:fa:a4:59:fb:9f:f1:3d:
         d3:d6:9c:e0:66:89:d7:e1:0a:29:f3:05:15:72:2b:05:42:a4:
         d6:8b:ca:f4:a5:0d:d8:a3:d9:89:25:e6:f1:d1:cc:91:b1:07:
         b2:7f:73:43:82:ed:d1:d8:e0:1b:af:87:71:55:5b:81:7f:02:
         81:e2:46:c4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDYnzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
YWE3NTc3NjY2MDBhZTkyZjc4MDQ5OGJhY2ZjZmY5NzYyOTgxYTIwHhcNMjEwMzI0
MTQzMzA1WhcNMjYwMzI0MTQzMzA1WjAzMTEwLwYDVQQDEyg4MGViNTM1NjcyZDZk
ODY1ZjE3MGIyYzllMjQ5ZjQzMjdjOWQyY2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhuEFUIyH/SW3kSJoI6reSpRYQxp02dUNBQVtOCGYJeU5Rpub
eIyutiiSpk7p+ZON0sdmhXdHm1nliGYjJx6VD6X9YUI7l3bOfI8iWuEHj+jiDSk3
D76iw5ox22qECI3LskHIN6wwcxguIcC2ySOOjAYUTUerdCpGS8Elp0GXREXhy3uT
AxxXr9rqEoYNOSS6q4aWFB7uvzLuZcmgvvwznbcD1EM15QcXNJz5TDPVBf2t1trv
yd0VCv8HPhXS22qFuTOyzcJtxEy/u5QYnGL6c5Ahxj0ydpU8z6neCSq3r+W6lgAG
Qe2sCK8GSmorTuwAHp44+90N/NC+K1MjCYvjaQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFAiUZMAODL7IejpN+gty9oRV4Wp4MB8GA1UdIwQYMBaAFBGyxuyxwuDK7vIn
BaE1O4X/sOkjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjBhYTc1
Nzc2NjYwMGFlOTJmNzgwNDk4YmFjZmNmZjk3NjI5ODFhMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTY3ZGY4YzItZmNkNi00MTU4LWEwNmMtYWQyMDk2
MGVhMjA3LzgwZWI1MzU2NzJkNmQ4NjVmMTcwYjJjOWUyNDlmNDMyN2M5ZDJjZmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NjdkZjhjMi1mY2Q2LTQxNTgtYTA2Yy1hZDIw
OTYwZWEyMDcvYjBhYTc1Nzc2NjYwMGFlOTJmNzgwNDk4YmFjZmNmZjk3NjI5ODFh
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDmgABfjANBgkqhkiG9w0BAQsFAAOCAQEAfj6L9w3xZiqJ
/tsG+aHAgGvPzY0ldXyh1rB1ZDTYU734BGELmOfqly2WJyWHIvloE4JLlTL+9i/+
WuvVKnW+FFkSHxARcvGXQZjrPgg4NJnuNeXJwEy73f2exOPHsZ2VuyryJhir9+al
vvT7iZHSqE9D0GtdRrbe/LPqEnJPhZpLsWQhzHS2MbS+S7xZFP8+4WMSODecOOrB
HwBk1BuRnitXX/DE3ejqdMTmNgdlHLU4iZASVYeiKHuEx2Yhx1n6pFn7n/E909ac
4GaJ1+EKKfMFFXIrBUKk1ovK9KUN2KPZiSXm8dHMkbEHsn9zQ4Lt0djgG6+HcVVb
gX8CgeJGxA==
-----END CERTIFICATE-----
Generated at Wed Jan 31 20:20:24 2024 by rpki-client on console-fra.rpki-client.org