Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/47057feb25ab4acb279ade527e751ad4d3aefa83.roa
File:                     47057feb25ab4acb279ade527e751ad4d3aefa83.roa (raw, json)
Hash identifier:          r0SHsL967hBlZHmVtn+lM+dcakH+FD6FUQaAn/vzt1k=
Subject key identifier:   4C:11:D9:5D:39:0D:EB:FC:9D:BB:7B:EA:80:7F:AE:1A:1A:91:16:21
Certificate issuer:       /CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
Certificate serial:       12C6FB
Authority key identifier: DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/47057feb25ab4acb279ade527e751ad4d3aefa83.roa
Signing time:             Tue 19 Sep 2023 08:30:03 +0000
ROA not before:           Mon 18 Sep 2023 08:30:03 +0000
ROA not after:            Wed 17 Sep 2025 08:30:03 +0000
asID:                     271956
IP address blocks:        2803:7610:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 08 Mar 2024 18:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1230587 (0x12c6fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
        Validity
            Not Before: Sep 18 08:30:03 2023 GMT
            Not After : Sep 17 08:30:03 2025 GMT
        Subject: CN=47057feb25ab4acb279ade527e751ad4d3aefa83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bd:86:60:35:56:1e:6b:17:57:90:dc:0b:30:
                    c0:99:8c:d6:52:5c:97:7a:49:f3:ca:72:e2:7b:d5:
                    69:ab:9c:23:c9:38:78:e8:88:ef:ef:02:0e:77:69:
                    dc:73:e1:f8:1b:58:33:14:ab:a0:32:05:67:78:f9:
                    b3:3a:b6:74:7a:e7:75:a1:d3:f3:37:f8:09:09:63:
                    5f:3d:d4:b6:52:c3:d0:ee:f8:19:17:cd:0f:96:71:
                    0b:82:cc:e8:12:1c:e0:fc:2d:20:7c:27:91:7d:29:
                    b1:4e:ac:54:9b:68:18:3f:c0:c3:b5:6c:82:24:cd:
                    f2:d9:64:31:08:26:ba:c7:f8:7a:92:bf:56:77:bb:
                    dc:43:48:f8:31:b2:a9:bf:78:8b:b5:7f:5f:f7:33:
                    07:bb:00:85:c5:27:3c:5d:a6:c9:1d:26:94:54:a0:
                    9a:98:6d:5f:c7:29:24:1b:8a:fa:1e:47:bf:98:b9:
                    10:4e:9e:4c:36:aa:1e:d6:3f:d2:92:eb:72:c4:07:
                    ad:f2:54:97:d4:40:5b:54:8d:76:20:70:a4:b5:5c:
                    6e:05:1e:34:a7:04:30:5b:ca:95:56:97:63:8d:26:
                    13:0f:33:82:84:4a:10:10:21:6e:0f:96:55:7c:58:
                    1e:91:df:d9:fb:2f:55:0b:99:09:c4:a0:cc:e6:b2:
                    8c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:11:D9:5D:39:0D:EB:FC:9D:BB:7B:EA:80:7F:AE:1A:1A:91:16:21
            X509v3 Authority Key Identifier:
                keyid:DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/47057feb25ab4acb279ade527e751ad4d3aefa83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7610:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:7b:c5:84:84:76:7e:ae:b9:03:81:6e:c5:57:2b:a9:eb:3f:
         30:96:9c:8b:59:e8:aa:41:55:4e:66:46:00:9c:c7:ea:34:7b:
         41:86:04:a8:7f:a5:08:06:64:c5:53:07:ee:e0:a2:e2:2f:77:
         3c:ed:05:7f:e4:cc:70:f8:f3:f0:1a:a7:89:ba:aa:2a:db:9c:
         ab:88:c9:9c:69:d4:a6:1c:15:cf:26:d8:be:58:d5:75:78:fa:
         33:19:32:2d:b1:7e:fe:82:c0:6b:4e:50:a0:b1:43:20:e3:50:
         2b:0f:72:c1:df:6b:b0:dd:be:8e:e8:c7:24:84:46:8e:fb:50:
         a7:b0:f9:9b:67:05:26:5f:c4:40:f7:ab:16:10:6c:a6:00:32:
         15:de:33:1d:a5:88:28:7c:f0:e3:94:dc:7c:7c:dc:bf:7c:9d:
         8d:51:47:4a:fe:7c:30:58:05:9f:b5:fc:45:7c:c5:0f:df:72:
         99:2c:24:55:ea:be:70:88:90:ef:79:5b:66:03:4f:eb:83:55:
         94:2d:84:07:52:72:4b:d2:db:f2:21:f8:81:8e:c6:af:48:c3:
         d2:07:95:19:33:f8:35:00:86:0b:22:69:1c:21:3b:91:69:d8:
         1f:fe:ac:60:81:79:a6:9e:3c:04:a2:e5:9c:bc:0a:e7:5b:10:
         08:0f:a4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 20:57:55 2024 by rpki-client on console-fra.rpki-client.org