Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6bbf8508-8d2a-4f10-bf9e-617dad58d162/9c461fd7bb4ce7bf01733c25f66dc725fd8809c9.roa
File:                     9c461fd7bb4ce7bf01733c25f66dc725fd8809c9.roa (raw, json)
Hash identifier:          ks9yVU2+U4CRqJDi3i7OHGMjelK0tt1nR6rFa8uWCpE=
Subject key identifier:   64:B5:ED:85:B6:7E:4C:F7:14:E7:06:9E:B2:CD:61:95:9B:2C:16:E6
Certificate issuer:       /CN=ad988e339348da7ed75d92d210f8584b6870fcc7
Certificate serial:       10EA
Authority key identifier: A5:73:31:A6:B5:21:63:96:82:22:80:70:F3:AA:5F:D5:8D:D8:56:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad988e339348da7ed75d92d210f8584b6870fcc7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6bbf8508-8d2a-4f10-bf9e-617dad58d162/9c461fd7bb4ce7bf01733c25f66dc725fd8809c9.roa
Signing time:             Thu 14 Jul 2022 18:33:04 +0000
ROA not before:           Thu 14 Jul 2022 03:00:00 +0000
ROA not after:            Sun 14 Jul 2024 03:00:00 +0000
asID:                     271967
IP address blocks:        2803:ce10::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4330 (0x10ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad988e339348da7ed75d92d210f8584b6870fcc7
        Validity
            Not Before: Jul 14 03:00:00 2022 GMT
            Not After : Jul 14 03:00:00 2024 GMT
        Subject: CN=9c461fd7bb4ce7bf01733c25f66dc725fd8809c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0d:60:c1:ba:85:7e:7a:80:ba:36:c8:7f:19:
                    1a:ae:7b:15:63:91:b0:b5:a5:dc:0b:77:9b:d8:e1:
                    35:4f:39:6b:80:75:3b:c5:5d:26:30:cf:92:04:8a:
                    9e:19:53:53:d4:73:b3:c1:8f:47:01:66:e0:49:0f:
                    87:77:94:c5:6e:a2:3f:c7:53:64:ce:c9:80:91:26:
                    8f:ee:8c:23:d1:bc:aa:8a:ad:73:ea:6c:38:8c:9e:
                    e1:d4:0e:ee:66:f5:0e:3d:4f:f1:c6:b0:b0:0c:0f:
                    7f:80:28:f1:77:fb:86:9d:62:ec:55:9c:bb:fc:31:
                    74:d5:07:8a:7d:94:3b:7c:86:21:25:9a:8f:b9:e9:
                    e0:f5:6f:e4:6a:8c:a2:2f:37:9e:d4:81:dd:1b:7b:
                    81:72:34:fd:cd:e7:81:f8:e5:d1:f1:58:c7:be:36:
                    3d:f2:c5:72:89:2a:fc:4f:ce:28:8e:a2:d7:f3:bb:
                    20:7b:7a:b1:98:b9:c1:c1:6c:2a:40:f5:bd:1e:08:
                    3c:46:aa:53:76:38:75:65:2c:2e:fa:27:73:5f:86:
                    b4:66:02:f4:59:43:b4:88:86:d2:99:13:39:fa:f3:
                    c4:22:ae:29:dc:23:b9:a2:ab:19:80:28:55:67:d8:
                    4b:74:5b:30:61:e0:1d:aa:02:74:a6:33:86:de:01:
                    d0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B5:ED:85:B6:7E:4C:F7:14:E7:06:9E:B2:CD:61:95:9B:2C:16:E6
            X509v3 Authority Key Identifier:
                keyid:A5:73:31:A6:B5:21:63:96:82:22:80:70:F3:AA:5F:D5:8D:D8:56:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad988e339348da7ed75d92d210f8584b6870fcc7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6bbf8508-8d2a-4f10-bf9e-617dad58d162/9c461fd7bb4ce7bf01733c25f66dc725fd8809c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6bbf8508-8d2a-4f10-bf9e-617dad58d162/ad988e339348da7ed75d92d210f8584b6870fcc7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ce10::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:a8:c4:17:79:22:7e:4a:15:e4:5b:0b:cd:b0:94:c5:20:d1:
         da:25:0c:66:fc:c0:7a:5c:d1:52:13:d0:70:a8:00:56:e7:5a:
         9a:03:47:07:42:3c:8b:76:1c:14:ab:03:8f:5d:34:3a:7c:c3:
         31:98:a9:a3:d5:d3:b0:1b:d9:49:e3:cf:4e:63:f1:e5:e6:73:
         17:6a:e4:ef:40:a7:ed:8a:ea:4c:fb:b8:ea:e4:fb:7f:48:11:
         37:a5:1a:5a:26:f1:80:1e:b1:44:cf:5d:b7:23:ff:14:bd:8b:
         30:52:19:03:0b:5e:ec:b5:ab:bd:41:17:07:b3:a6:ec:41:8a:
         94:ed:09:17:61:a5:2f:5c:42:a0:5b:38:eb:3a:a8:9e:aa:c1:
         f7:12:a3:4c:bb:f1:76:db:d7:46:bb:b3:21:6e:bc:76:4a:96:
         a7:d5:1f:a9:2f:4f:7f:82:ce:1e:53:ed:60:3c:8e:93:91:77:
         6c:ad:27:ad:43:74:b4:9f:7f:b7:92:d8:54:a0:9d:64:db:99:
         27:2e:b7:33:d3:47:ac:72:36:8e:67:d1:22:c1:2a:99:d6:de:
         4b:b3:04:02:b2:03:2d:92:62:87:c0:73:59:60:1a:71:87:ab:
         63:92:4c:12:d3:32:35:b2:be:8e:84:7e:3d:98:0a:20:7b:2a:
         45:be:65:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 17:57:25 2023 by rpki-client on console-ams.rpki-client.org