Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65e06ebd-4c80-42ce-83ae-53761211bc60/105a4f14d7236011b91f5511f9d95af0a0cf09ca.roa
File:                     105a4f14d7236011b91f5511f9d95af0a0cf09ca.roa (raw, json)
Hash identifier:          2bH3yqPw/xQji4dgGKgiv8QuzpNnHBz4o3l0OLPGDHY=
Subject key identifier:   A1:F6:66:85:E4:F6:04:7C:74:AF:40:DC:09:86:04:05:5D:D5:C7:47
Certificate issuer:       /CN=7f35138d8dd348d89c8ccedd52cb67b9a3a64bd4
Certificate serial:       0810
Authority key identifier: BF:CD:6D:19:40:1F:D1:D9:B8:E9:C7:45:A0:CD:D9:F2:8C:68:43:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f35138d8dd348d89c8ccedd52cb67b9a3a64bd4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65e06ebd-4c80-42ce-83ae-53761211bc60/105a4f14d7236011b91f5511f9d95af0a0cf09ca.roa
Signing time:             Sat 30 Sep 2023 22:39:02 +0000
ROA not before:           Fri 29 Sep 2023 22:39:02 +0000
ROA not after:            Tue 30 Sep 2025 22:39:02 +0000
asID:                     273093
IP address blocks:        2803:2050::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2064 (0x810)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f35138d8dd348d89c8ccedd52cb67b9a3a64bd4
        Validity
            Not Before: Sep 29 22:39:02 2023 GMT
            Not After : Sep 30 22:39:02 2025 GMT
        Subject: CN=105a4f14d7236011b91f5511f9d95af0a0cf09ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:03:dc:e9:7d:38:44:ff:0c:9c:4d:b8:4c:2e:
                    1f:a5:43:c5:f3:07:4a:4b:29:0b:10:c7:ab:20:75:
                    d3:17:1f:e8:86:04:5d:f8:70:a6:8b:dc:ab:92:90:
                    aa:80:4c:5d:2f:9e:4b:85:3c:d0:20:86:ff:64:2e:
                    e0:b0:4f:06:50:03:76:13:28:72:67:13:65:6a:22:
                    fd:c4:c7:c6:0f:cf:04:e1:83:de:22:fd:a8:b6:30:
                    00:b6:e8:88:cf:d2:92:5f:e9:25:a0:5f:ed:b5:28:
                    11:d3:08:f5:4b:e8:df:5c:d5:52:8c:90:71:38:97:
                    77:97:29:bf:e2:f7:10:f1:5f:9d:9f:77:ca:57:2f:
                    31:ed:5d:ac:8f:85:d1:3f:70:6b:97:d6:37:9d:f8:
                    19:06:ee:83:85:e4:bf:7a:40:21:23:6d:0b:80:5c:
                    23:7a:6d:fb:34:64:d6:ad:02:71:2f:a0:b5:64:53:
                    2a:a5:b5:1e:16:6c:39:ca:ad:b3:27:38:1e:ae:21:
                    d0:df:ff:d8:b7:0e:02:8e:0c:62:1a:99:c0:f8:1b:
                    32:11:2f:b1:52:35:e9:ca:69:e9:69:b9:64:4c:bb:
                    6c:cf:b0:6e:2c:c6:cf:6b:d0:2f:96:f0:01:0f:10:
                    66:5c:ef:b6:96:5d:3a:37:1d:dd:a4:e1:8b:01:96:
                    64:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F6:66:85:E4:F6:04:7C:74:AF:40:DC:09:86:04:05:5D:D5:C7:47
            X509v3 Authority Key Identifier:
                keyid:BF:CD:6D:19:40:1F:D1:D9:B8:E9:C7:45:A0:CD:D9:F2:8C:68:43:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f35138d8dd348d89c8ccedd52cb67b9a3a64bd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65e06ebd-4c80-42ce-83ae-53761211bc60/105a4f14d7236011b91f5511f9d95af0a0cf09ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65e06ebd-4c80-42ce-83ae-53761211bc60/7f35138d8dd348d89c8ccedd52cb67b9a3a64bd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2050::/32

    Signature Algorithm: sha256WithRSAEncryption
         e6:82:2b:c0:7f:3f:88:43:af:45:c4:8d:ec:08:ed:43:7a:e9:
         38:39:5c:9d:cd:98:07:17:91:a5:1a:1e:37:1c:ce:72:4a:ec:
         aa:ae:e3:30:18:94:43:28:f3:d9:e3:08:08:bc:bc:b5:dc:7a:
         18:be:63:3f:40:3f:32:01:46:69:8e:f3:72:64:91:ae:9b:b0:
         51:40:be:cf:29:5a:1c:95:8f:c8:b1:0f:05:3d:03:69:dd:51:
         e3:94:a6:51:31:2e:9a:21:72:50:14:50:e1:09:08:3a:e9:2b:
         35:90:d0:c5:ec:f0:1f:1d:fe:d7:4c:fe:93:25:cf:3f:c6:00:
         37:b5:cb:7e:f2:7c:c1:65:ab:27:b6:a2:16:40:f4:df:96:22:
         df:44:9f:c8:e2:82:86:94:1b:bb:7f:0c:9e:fe:68:cd:ae:78:
         91:7a:e2:ef:02:43:a3:b3:f9:3a:ca:71:75:f2:23:5f:65:5d:
         e0:f3:a9:8b:87:20:af:2f:12:31:e5:3b:93:d0:f6:67:80:09:
         cb:13:2a:72:d3:d9:74:77:c2:44:d4:71:57:63:39:c4:09:a6:
         e9:1b:50:f1:46:2b:dd:96:df:87:cb:44:93:6e:57:29:e8:73:
         7d:10:e6:b9:af:63:46:f5:12:a2:f8:a9:73:da:41:d6:33:8f:
         a3:6d:a0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 4 00:45:55 2023 by rpki-client on console-ams.rpki-client.org