Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/efcd74147b1fc4481c06cecee95d8cb2f94161fe.roa
File:                     efcd74147b1fc4481c06cecee95d8cb2f94161fe.roa (raw, json)
Hash identifier:          kgBB/m0dIsaxmbjElnXmqlmXOSoUOOQz6XxaqBjwD+w=
Subject key identifier:   26:FC:AA:2F:53:11:35:48:2F:46:FD:0E:C4:1E:1D:6A:E0:AF:BB:F5
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       190A21
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/efcd74147b1fc4481c06cecee95d8cb2f94161fe.roa
Signing time:             Mon 06 Jun 2022 02:04:13 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     28001
IP address blocks:        2801:1b8::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1640993 (0x190a21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=efcd74147b1fc4481c06cecee95d8cb2f94161fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:4a:9e:7f:71:bb:b5:ee:69:3a:ea:2d:78:
                    73:28:c9:0a:a2:da:5f:cc:a4:3c:f3:82:17:0b:cd:
                    bc:80:7b:02:07:ef:bf:3b:7e:b0:ec:1e:47:4f:3a:
                    03:74:cc:98:3e:54:30:e0:80:7d:c8:ef:64:6e:7c:
                    62:8c:83:f8:8a:1f:1e:f3:a3:a0:c0:f2:43:f5:32:
                    b5:1b:19:42:8b:84:38:f6:ed:bd:a8:72:84:d2:bc:
                    ff:9e:1d:c7:b1:b0:b4:ff:06:58:4c:a9:28:28:ed:
                    72:c2:62:74:d6:1d:5b:51:ca:bc:73:bb:7e:8d:0a:
                    ea:e7:b6:52:a5:e4:f0:32:ba:83:60:8f:32:1a:b6:
                    39:1e:51:4d:ff:78:79:73:0a:8d:05:c9:30:d6:b5:
                    22:85:b8:35:41:66:d9:54:ea:56:b3:d6:9b:4d:39:
                    81:e0:0e:62:47:e1:28:be:d3:b2:89:e4:af:5c:c9:
                    d6:ff:26:ce:ec:f4:b6:4e:67:97:65:19:50:01:12:
                    62:52:e0:cf:95:57:55:10:a9:41:ba:be:10:20:97:
                    19:7f:77:0a:a3:15:b4:40:95:67:a5:69:b2:81:64:
                    ae:dd:6c:14:ab:6a:12:64:e5:0f:74:a0:76:8e:44:
                    d4:48:1b:a2:de:83:62:0e:2c:d0:54:41:65:90:cf:
                    aa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FC:AA:2F:53:11:35:48:2F:46:FD:0E:C4:1E:1D:6A:E0:AF:BB:F5
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/efcd74147b1fc4481c06cecee95d8cb2f94161fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b8::/44

    Signature Algorithm: sha256WithRSAEncryption
         37:09:22:0f:d7:68:89:4e:c1:9d:55:a3:0a:d8:fd:8a:97:cd:
         41:fe:e1:45:58:27:35:89:1d:4a:13:40:10:10:1b:de:46:96:
         d8:80:6d:d5:1a:24:3c:d5:12:51:cb:61:b1:1a:15:a4:5d:be:
         31:f8:04:22:9d:cf:44:e3:85:47:05:a5:b4:1b:59:ce:40:0b:
         35:f0:e4:fd:f8:94:84:94:a8:c7:63:d5:9a:b3:b6:32:f2:6e:
         e2:be:d3:a3:5e:e8:2a:47:fe:d9:e6:b8:46:a4:b2:86:36:06:
         92:25:96:03:ed:8c:a1:bf:03:a4:21:3f:f2:d0:58:c3:13:5d:
         bc:af:00:e8:17:72:1b:fc:1d:bf:18:c2:49:61:04:c2:63:09:
         88:c1:6d:61:32:1e:ff:bd:0b:11:ee:9e:b7:7c:26:90:c9:14:
         db:4d:09:76:51:b2:81:a7:55:a8:05:80:63:c2:98:8e:27:7b:
         73:56:6b:98:bc:3b:55:81:d5:ec:0f:f8:d2:8e:29:6b:10:2b:
         a4:db:0d:19:79:b1:51:a3:b6:7a:b0:fd:26:60:b9:be:1a:45:
         04:6b:a9:4a:a2:71:00:eb:a8:0b:4e:46:a2:60:45:89:17:6a:
         f3:c7:b4:dd:f7:1e:15:88:d1:bb:5e:c5:e9:46:5d:34:cc:a9:
         e0:d1:df:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org