Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/9595d1f69a3100a65265f4bf0b37c00102c3bd3f.roa
File:                     9595d1f69a3100a65265f4bf0b37c00102c3bd3f.roa (raw, json)
Hash identifier:          dI3Ru0euseFOty9FyK7OYQQ1DrSRkxbOiZwPx+HqTEY=
Subject key identifier:   7C:7C:5D:3A:1D:7E:83:DA:4E:32:B4:06:81:A6:DD:21:85:9A:B5:6A
Certificate issuer:       /CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
Certificate serial:       23F11E
Authority key identifier: AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/9595d1f69a3100a65265f4bf0b37c00102c3bd3f.roa
Signing time:             Wed 04 Oct 2023 00:23:49 +0000
ROA not before:           Tue 03 Oct 2023 00:23:48 +0000
ROA not after:            Sat 04 Oct 2025 01:23:48 +0000
asID:                     0
IP address blocks:        2803:480:19::/64 maxlen: 64
                          2803:480:20::/64 maxlen: 64
                          2803:480:21::/64 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2355486 (0x23f11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
        Validity
            Not Before: Oct  3 00:23:48 2023 GMT
            Not After : Oct  4 01:23:48 2025 GMT
        Subject: CN=9595d1f69a3100a65265f4bf0b37c00102c3bd3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:19:4a:6f:33:19:a6:05:28:66:e7:5b:fc:
                    3e:56:ae:69:62:54:46:97:fb:5c:94:b0:4d:bb:99:
                    9c:32:75:38:78:f9:b7:7b:de:e2:05:fd:31:c2:96:
                    b2:38:f5:8f:1a:c8:74:8c:27:35:b7:b1:94:46:11:
                    88:c7:17:05:8e:5b:76:75:b0:e6:c5:3a:85:82:e9:
                    4c:90:08:8a:60:9f:2c:57:08:e6:fe:75:69:50:55:
                    31:f8:5e:f1:08:30:c4:61:c6:9c:cc:f4:66:7a:41:
                    1a:35:0e:3f:81:24:04:f9:1d:2a:23:3d:c4:25:74:
                    ed:d5:7e:d1:57:c0:69:63:9e:6c:95:92:94:62:7c:
                    2c:e3:d2:20:47:18:2c:07:46:12:9f:a2:8f:27:22:
                    0b:24:25:e2:03:b2:b4:fd:bb:c8:29:2d:f1:2a:7a:
                    bd:c6:ba:98:67:b8:8c:b6:e9:be:17:95:c4:6b:0a:
                    66:7f:d1:51:74:e2:43:75:60:ad:ea:cd:d1:b5:c7:
                    98:5d:a6:01:6c:9b:36:6e:d6:f0:e9:55:52:93:73:
                    eb:54:f3:c4:b1:f0:67:2b:a2:d9:5f:cd:21:3e:b0:
                    f1:bf:b9:90:c3:02:d0:d3:22:35:f2:70:4b:01:41:
                    9d:9a:aa:48:7f:52:aa:7b:73:1a:82:0f:7e:3d:ee:
                    8d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7C:5D:3A:1D:7E:83:DA:4E:32:B4:06:81:A6:DD:21:85:9A:B5:6A
            X509v3 Authority Key Identifier:
                keyid:AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/9595d1f69a3100a65265f4bf0b37c00102c3bd3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/cebcc65db675ffc3185449c18bd433794ea8ca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:19::/64
                  2803:480:20::/64
                  2803:480:21::/64

    Signature Algorithm: sha256WithRSAEncryption
         8d:87:53:82:f6:aa:ab:38:f1:7c:71:74:ff:5f:52:0f:42:24:
         7a:47:2b:a6:c3:31:ee:28:13:cc:10:5b:8d:59:08:af:56:ef:
         58:8c:a4:8a:3c:26:e7:08:4a:bd:41:07:f6:ab:ad:c9:c0:dc:
         a8:86:d8:6f:2c:dc:ab:3a:7f:58:05:56:55:af:98:bf:26:97:
         60:5d:01:eb:fa:e2:05:e3:fd:a7:54:a4:7b:40:d1:84:75:13:
         47:1f:97:9e:45:a1:50:17:53:ef:5b:d1:11:a6:77:47:ed:e4:
         6d:a4:3c:71:cc:c0:fb:ea:e7:a1:6f:99:01:4e:c8:46:74:05:
         68:78:02:38:f2:38:21:e6:c8:60:e3:46:de:e6:ad:32:b9:7a:
         d4:07:73:88:1c:97:91:4d:3d:46:a9:ba:6f:6a:b4:f9:56:ca:
         b3:f2:99:03:da:a5:76:5e:bc:fe:c9:7e:42:dd:3c:b6:e7:fd:
         e6:5a:4b:3f:4d:5f:a1:12:66:e0:7c:17:97:78:87:54:7a:e6:
         2b:42:91:97:4c:6e:62:06:d0:57:a9:94:04:ac:2a:7b:6c:1a:
         e0:cc:c0:32:9d:b6:1c:32:71:d7:94:ec:82:af:b4:9f:0b:54:
         f4:b2:47:3d:4c:ea:73:ec:c5:a3:a6:fc:47:fd:9e:b7:e0:c6:
         d0:3e:92:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 17:21:13 2023 by rpki-client on console-ams.rpki-client.org