Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/48732ecc1ad8d862c2c3418d32818d4a60be73ab.roa
File:                     48732ecc1ad8d862c2c3418d32818d4a60be73ab.roa (raw, json)
Hash identifier:          NqlFTibMr/l3G8erjhyv8RPOweuLgaD0E17DKdPK7NA=
Subject key identifier:   41:AC:6F:30:D4:11:4F:59:FD:24:D0:5C:D8:9D:8C:F0:30:7A:67:16
Certificate issuer:       /CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
Certificate serial:       105306
Authority key identifier: A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/48732ecc1ad8d862c2c3418d32818d4a60be73ab.roa
Signing time:             Tue 20 Jul 2021 22:07:43 +0000
ROA not before:           Tue 20 Jul 2021 03:00:00 +0000
ROA not after:            Thu 20 Jul 2023 03:00:00 +0000
asID:                     23243
IP address blocks:        2803:c800::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1069830 (0x105306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
        Validity
            Not Before: Jul 20 03:00:00 2021 GMT
            Not After : Jul 20 03:00:00 2023 GMT
        Subject: CN=48732ecc1ad8d862c2c3418d32818d4a60be73ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:4f:42:22:40:ca:1e:b6:e3:61:c4:5b:cb:
                    66:68:8e:15:cd:f4:13:8d:4d:4c:1a:b2:7a:0a:a3:
                    7e:a8:36:c6:95:16:b8:2b:d0:20:ed:de:4a:5f:42:
                    80:ce:6d:ec:a5:fb:0b:11:5d:86:87:8c:48:a3:d5:
                    ca:9a:dc:ec:be:e3:91:d1:03:76:2f:62:92:7d:ef:
                    a0:d5:02:29:64:be:35:b3:80:3c:2a:14:2f:84:4c:
                    68:3b:17:bc:1e:a2:da:c0:b1:11:ae:fb:ea:a8:9e:
                    b4:4e:dd:4d:8b:38:6e:e3:55:ce:73:78:36:9e:d8:
                    b2:3e:ad:df:8d:c9:f8:ce:06:63:03:74:88:04:40:
                    b6:29:95:c4:60:8e:8f:94:d8:51:9a:0e:53:1b:94:
                    e1:43:31:1c:81:83:93:82:25:6b:d3:54:30:8d:d5:
                    57:db:41:d7:7a:b6:36:d3:70:2f:95:fa:41:c8:e2:
                    b4:85:e4:f2:d6:8b:6f:33:7f:7a:44:cc:e0:af:e6:
                    f9:38:7b:de:e2:34:cb:e4:2d:d2:3f:a7:b2:c7:b1:
                    a9:58:e6:48:a5:64:4a:34:f6:64:db:2c:50:d2:15:
                    7e:42:ca:7d:18:ad:93:35:27:27:f7:6a:52:a4:fd:
                    97:09:78:54:8b:d9:d9:61:50:50:45:a1:1b:37:73:
                    60:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AC:6F:30:D4:11:4F:59:FD:24:D0:5C:D8:9D:8C:F0:30:7A:67:16
            X509v3 Authority Key Identifier:
                keyid:A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/48732ecc1ad8d862c2c3418d32818d4a60be73ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b12012502b7ca3b0da125f250315dfe19bfb18d5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c800::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:a1:e6:52:35:9e:a8:2a:16:3c:09:04:a1:12:71:4b:c4:08:
         92:16:a8:d5:ef:31:8a:b0:e4:7c:3f:97:14:b0:e6:df:87:e4:
         dc:e0:cc:6c:4f:0e:4e:ee:00:19:30:74:b6:22:6f:ea:2b:68:
         bb:2e:61:bf:60:e5:5a:3e:4e:54:17:21:e5:52:37:3b:a2:ba:
         ca:3b:dd:a7:66:99:85:d1:88:dd:3d:a1:e6:2a:f4:fe:e0:f1:
         a4:3e:8c:57:8e:df:ff:be:7c:3b:86:f4:06:cf:98:47:12:be:
         d8:e2:62:0c:16:13:60:9a:50:c1:f2:6f:8e:56:ba:e5:d9:99:
         f4:b1:26:dd:37:70:3e:77:f9:23:4e:43:70:d2:08:3b:64:5c:
         c4:47:7d:e0:ca:c0:19:15:8f:7a:fd:0a:0e:6c:33:39:12:44:
         b3:88:2d:e7:94:c3:60:a7:ef:37:5f:2d:fe:49:a8:7a:4d:f9:
         a6:71:ea:ee:e9:c6:87:e4:48:c8:c4:ca:67:db:15:f5:a4:87:
         16:9f:01:5f:f8:24:7e:30:22:64:2d:15:89:20:9c:b2:e9:16:
         0f:9f:df:1b:db:e8:66:30:5c:2c:06:34:fe:fe:34:15:85:3c:
         4a:cb:90:89:d2:ac:84:19:f8:65:51:5a:3c:fd:49:82:9e:62:
         c2:7f:fe:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-ams.rpki-client.org