Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/3aeb7ccd6b401e20b7e794f307cca5b6f35860f2.roa
File:                     3aeb7ccd6b401e20b7e794f307cca5b6f35860f2.roa (raw, json)
Hash identifier:          KmuFrnhRHcWPLR3cIT3GBqzkU4OgZSZyYoTKCRJwV08=
Subject key identifier:   56:7B:5D:74:72:9D:65:E9:6D:91:F3:28:E6:FE:AF:45:A1:63:88:B7
Certificate issuer:       /CN=61678bdd44acebd11355abc32f79a39e0ab6e968
Certificate serial:       0D18C7
Authority key identifier: 53:0E:FD:DD:FD:ED:EC:BC:CC:76:B3:41:B4:AF:50:A5:DA:0F:08:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61678bdd44acebd11355abc32f79a39e0ab6e968.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/3aeb7ccd6b401e20b7e794f307cca5b6f35860f2.roa
Signing time:             Wed 24 Mar 2021 14:33:03 +0000
ROA not before:           Wed 24 Mar 2021 14:33:02 +0000
ROA not after:            Tue 24 Mar 2026 14:33:02 +0000
asID:                     263824
IP address blocks:        2803:9a40::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858311 (0xd18c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61678bdd44acebd11355abc32f79a39e0ab6e968
        Validity
            Not Before: Mar 24 14:33:02 2021 GMT
            Not After : Mar 24 14:33:02 2026 GMT
        Subject: CN=3aeb7ccd6b401e20b7e794f307cca5b6f35860f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a8:be:02:a0:7c:bb:96:f5:89:ea:6c:9e:13:
                    ce:0a:c9:53:cd:b2:a8:8e:fa:5d:65:46:b8:b9:b1:
                    0f:d4:6b:de:61:cb:e1:b4:4f:3f:87:12:68:b0:57:
                    37:d8:f8:cd:08:51:5d:a3:bc:5b:a5:a0:56:d0:ae:
                    41:14:32:9c:8a:83:4d:a2:1f:c3:be:ca:18:d1:11:
                    31:19:36:67:97:43:7b:16:d7:9c:9e:ef:54:d9:ec:
                    ec:3e:e7:7b:fd:59:3d:c9:48:25:99:38:d3:19:d7:
                    73:73:61:d5:fb:ac:fc:49:2c:a3:db:ee:c8:38:3b:
                    b3:bb:d5:dc:57:69:ed:2c:81:34:a3:31:09:5c:f5:
                    c6:c7:44:ee:34:fa:a6:62:24:af:03:8b:32:82:a9:
                    b5:02:a7:b6:25:3d:05:89:b5:98:6a:8c:64:4f:08:
                    0a:fb:b4:dd:40:63:8c:e7:92:a4:fb:b1:d9:94:05:
                    db:70:41:0b:be:70:4c:4c:9b:8e:f6:52:dc:39:1c:
                    5c:0b:32:06:1e:88:23:95:1c:88:61:3a:4c:53:7b:
                    08:b3:6d:f2:34:07:c2:9d:cb:eb:7b:d5:76:01:1a:
                    22:2e:c2:18:7f:ef:49:0b:dd:7a:1a:6c:7c:66:27:
                    c1:11:d1:12:66:af:7e:21:73:31:a0:0b:28:42:bb:
                    37:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7B:5D:74:72:9D:65:E9:6D:91:F3:28:E6:FE:AF:45:A1:63:88:B7
            X509v3 Authority Key Identifier:
                keyid:53:0E:FD:DD:FD:ED:EC:BC:CC:76:B3:41:B4:AF:50:A5:DA:0F:08:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61678bdd44acebd11355abc32f79a39e0ab6e968.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/3aeb7ccd6b401e20b7e794f307cca5b6f35860f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64361348-2cfd-476c-9ee2-d9c959ddd082/61678bdd44acebd11355abc32f79a39e0ab6e968.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:11:5c:b6:cd:9a:66:b8:4c:03:a3:47:12:95:ad:48:90:a7:
         49:0f:22:65:d1:54:6e:c9:fd:87:52:62:e3:2e:bb:c6:85:53:
         fb:90:4b:6a:bf:03:1a:59:5b:d1:49:31:c9:bd:f5:71:f4:57:
         b1:ff:69:f9:e4:2f:67:b2:82:96:cd:b8:e6:90:3c:73:ce:fd:
         7d:57:d8:b1:42:53:a4:f9:43:7f:ed:82:8d:cb:ff:b6:fb:2a:
         06:db:d7:a5:d1:db:0d:ca:d6:7d:a8:7e:66:17:e6:c6:d9:8f:
         d9:d9:68:38:8f:da:bd:77:02:f2:8f:7b:21:f0:df:62:e2:7d:
         84:dc:d8:69:7b:f2:31:da:24:23:77:8a:e5:56:b2:fd:7a:06:
         32:2c:16:20:ab:cb:1c:31:cf:5f:7e:12:30:b8:e7:a1:56:52:
         a5:82:5b:4b:ca:53:7c:dd:52:1b:94:38:25:8e:39:3a:81:df:
         1f:29:45:c0:5c:87:fb:c3:69:7f:96:44:f4:0e:9f:56:67:69:
         90:39:ff:cc:73:06:3d:fb:c8:53:64:1c:33:9e:c5:58:eb:61:
         1e:e5:cc:3b:33:79:ae:d7:20:50:f2:4a:97:3d:71:d6:cc:3d:
         a1:4e:e0:aa:e5:b0:3a:ec:38:e6:ec:ed:5d:95:ce:6b:c2:63:
         91:5e:53:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org