Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6848d5a0-04e9-468c-a560-b114cb450392/8b3e4fb3a26d32bd63ecb13d507baa5b944afd17.roa
File:                     8b3e4fb3a26d32bd63ecb13d507baa5b944afd17.roa (raw, json)
Hash identifier:          99PjPGlmuDUeUVPSiweP63Ip2yWTTjFoTF2G3tPvztE=
Subject key identifier:   54:7A:DB:90:CD:DF:70:E7:35:72:03:4F:82:B6:91:C3:F1:03:E8:8A
Certificate issuer:       /CN=3d7e92fe67745c4ed93e7215168d5bb095f17102
Certificate serial:       0525
Authority key identifier: 83:06:15:9A:93:EC:35:FF:9F:A7:18:AC:73:96:0E:B0:1A:68:DB:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d7e92fe67745c4ed93e7215168d5bb095f17102.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6848d5a0-04e9-468c-a560-b114cb450392/8b3e4fb3a26d32bd63ecb13d507baa5b944afd17.roa
Signing time:             Wed 09 Jun 2021 17:58:11 +0000
ROA not before:           Wed 09 Jun 2021 03:00:00 +0000
ROA not after:            Fri 09 Jun 2023 03:00:00 +0000
asID:                     271916
IP address blocks:        2803:4a10::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1317 (0x525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7e92fe67745c4ed93e7215168d5bb095f17102
        Validity
            Not Before: Jun  9 03:00:00 2021 GMT
            Not After : Jun  9 03:00:00 2023 GMT
        Subject: CN=8b3e4fb3a26d32bd63ecb13d507baa5b944afd17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0e:6a:7f:9d:43:a4:dc:27:75:75:d0:0a:16:
                    93:34:a3:a1:1e:47:4d:2a:eb:9b:83:fd:c2:07:80:
                    d8:93:bb:cb:75:ad:ee:c6:60:2e:65:71:23:5d:84:
                    51:53:b7:8c:d5:4f:a0:31:84:d3:a3:cb:43:bb:21:
                    6b:ec:d2:72:15:bd:03:fd:53:4a:d3:e2:94:a0:60:
                    42:98:24:91:15:c5:4c:75:13:f6:ed:c2:44:b8:15:
                    35:cf:73:18:2a:6e:c4:88:73:9b:6b:96:38:4a:9f:
                    79:22:f1:3c:1f:ed:95:b7:bd:f0:e0:b3:5e:33:aa:
                    ef:2f:d4:c9:b9:c8:c1:a2:10:60:86:fb:09:80:43:
                    c2:53:9b:04:17:51:d9:57:e4:6f:b8:d2:a3:70:42:
                    54:e8:31:09:64:fc:1d:73:61:14:00:e0:2f:b9:6e:
                    57:f6:20:ad:b0:d9:f3:99:fc:d9:2c:9b:40:33:ce:
                    da:a6:83:b8:1d:c6:3e:1f:8a:bd:20:1d:20:b2:76:
                    0d:e6:8e:e4:69:e9:b6:20:c8:01:c3:b3:2c:b8:4f:
                    27:14:50:6b:56:42:b9:a7:5e:02:ba:5b:ad:14:45:
                    34:e4:fe:d3:cf:21:c5:95:b9:e2:60:49:d8:e5:c9:
                    00:d5:cc:cb:24:22:c4:99:51:29:f2:4f:c5:85:89:
                    fd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7A:DB:90:CD:DF:70:E7:35:72:03:4F:82:B6:91:C3:F1:03:E8:8A
            X509v3 Authority Key Identifier:
                keyid:83:06:15:9A:93:EC:35:FF:9F:A7:18:AC:73:96:0E:B0:1A:68:DB:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d7e92fe67745c4ed93e7215168d5bb095f17102.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6848d5a0-04e9-468c-a560-b114cb450392/8b3e4fb3a26d32bd63ecb13d507baa5b944afd17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6848d5a0-04e9-468c-a560-b114cb450392/3d7e92fe67745c4ed93e7215168d5bb095f17102.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:45:ab:95:5b:8b:96:81:56:46:fe:73:d2:08:ed:f7:9b:1e:
         40:91:6c:ec:f2:65:1b:e8:2d:bc:ae:05:71:ee:3a:29:77:27:
         96:f6:a6:87:dc:d7:37:d7:54:6c:a4:ad:5a:76:a1:40:9c:ef:
         7a:f0:19:e8:dc:9e:84:4a:72:f9:82:72:7c:d1:84:f1:aa:98:
         d4:d9:fb:08:07:fa:1d:eb:fc:c4:e6:89:ff:af:56:20:93:f1:
         82:2a:e5:9f:4b:1c:14:b7:a7:d8:2a:47:4c:ab:63:5f:29:77:
         6b:8f:4a:58:bd:93:07:42:5b:c5:bb:5f:30:8f:48:df:38:4c:
         bd:70:8e:6c:bf:2c:05:a5:2a:14:59:3c:f3:de:92:72:a0:27:
         5f:68:7d:c8:a7:4a:83:45:66:64:37:d4:06:a0:bc:15:d6:46:
         3b:c1:a7:76:ad:3f:c3:05:bd:78:6e:ec:ec:b3:d5:6a:54:5d:
         9f:c6:9a:f9:a4:76:13:33:53:18:4c:61:23:79:be:2d:68:d8:
         6d:26:a5:fb:2f:64:a4:fb:be:d6:e5:cc:91:8e:91:1a:1f:9b:
         42:65:26:fc:55:b6:a7:4f:84:7a:0c:bd:2d:01:35:5b:6f:fe:
         43:af:82:aa:a6:c8:7b:a6:6a:26:6f:ea:d2:2a:d8:56:1b:51:
         9a:60:42:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org