Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/4e3d28962c9ddfae114bdb0f6f81ca95172a22cb.roa
File:                     4e3d28962c9ddfae114bdb0f6f81ca95172a22cb.roa (raw, json)
Hash identifier:          uDwp98nx6e+3doETqzteIGdOPaWAtusn0wYqhtLgA9A=
Subject key identifier:   8D:F7:E7:A1:7B:6E:26:07:DD:42:82:00:3D:01:9E:65:60:FC:A8:85
Certificate issuer:       /CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
Certificate serial:       1717E9
Authority key identifier: DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/4e3d28962c9ddfae114bdb0f6f81ca95172a22cb.roa
Signing time:             Fri 08 Mar 2024 18:57:08 +0000
ROA not before:           Fri 08 Mar 2024 18:57:08 +0000
ROA not after:            Sun 08 Mar 2026 19:57:08 +0000
asID:                     49581
IP address blocks:        2803:7610::/32 maxlen: 48

Validation:               Failed, certificate revoked on Fri 05 Apr 2024 00:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1513449 (0x1717e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0
        Validity
            Not Before: Mar  8 18:57:08 2024 GMT
            Not After : Mar  8 19:57:08 2026 GMT
        Subject: CN=4e3d28962c9ddfae114bdb0f6f81ca95172a22cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:de:49:3d:43:b1:4b:50:96:77:ef:b9:f8:90:
                    18:6f:3e:93:e7:e2:15:a5:97:89:18:44:57:67:9e:
                    a5:ca:f0:9b:21:fa:2d:61:85:72:d7:e9:b2:65:62:
                    86:95:f3:66:10:f3:8b:cb:b2:2a:37:8e:34:f7:ab:
                    a5:b2:aa:e5:ef:ae:c9:f0:10:12:b1:66:71:d2:eb:
                    4a:94:02:4e:6e:1a:ce:c9:11:ba:3b:db:2b:6e:23:
                    ba:e4:e9:0c:86:eb:3b:19:15:9b:e1:bb:87:ab:eb:
                    7e:1a:de:da:39:23:5e:15:ad:26:23:a3:5b:8d:7f:
                    83:fb:50:4a:12:1f:d8:31:06:a4:75:72:9f:50:8e:
                    66:6e:2e:3b:ef:32:21:66:8b:39:39:81:dd:36:9f:
                    fc:b6:d7:f5:6c:45:ad:c6:60:63:cd:c3:a6:6f:54:
                    f6:04:2c:69:1d:b5:38:67:31:3f:0c:49:c2:43:d5:
                    8d:c4:3d:7f:23:a5:4f:8e:6e:61:5f:c3:a8:67:aa:
                    82:aa:7d:55:34:4b:66:6f:5f:bb:e9:61:ab:f6:f8:
                    29:da:48:f3:24:66:ef:cf:c4:d2:15:7f:e6:c1:00:
                    82:d3:8d:6c:6f:0d:52:2d:e3:a4:cc:ce:c2:79:38:
                    39:cc:8e:19:59:23:69:3a:dd:11:cf:bc:e2:c6:46:
                    a5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F7:E7:A1:7B:6E:26:07:DD:42:82:00:3D:01:9E:65:60:FC:A8:85
            X509v3 Authority Key Identifier:
                keyid:DA:2F:47:2E:DD:DE:80:2B:00:12:68:EB:83:E1:BE:D3:1B:25:23:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/4e3d28962c9ddfae114bdb0f6f81ca95172a22cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ee3114c-4e91-4c3f-b7c2-c21ee6a06316/ce7a8b5a0c15824d6e3cd0a1528221a0a7a47ce0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7610::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:dd:e1:63:ac:41:55:ee:c9:c0:18:1a:dd:40:44:7c:19:04:
         9b:83:2b:f8:3d:c2:0e:e1:fa:3c:66:20:40:cc:24:a0:20:42:
         a4:b0:7e:0b:6b:a1:42:dc:b8:1b:35:27:84:26:76:12:16:ef:
         f9:14:05:ff:9e:b7:f1:56:35:de:9a:60:72:79:80:0f:49:d9:
         39:74:58:4a:3b:1e:0e:b5:c7:eb:a1:35:87:88:80:7d:b1:e0:
         d0:d1:b7:79:d8:e7:7f:66:4d:78:67:ce:90:6a:ce:ee:d8:fc:
         5f:af:22:45:cd:e0:e8:c0:0c:b5:9f:94:d1:c3:8d:ac:1e:b7:
         35:e8:41:b1:96:a6:9f:8c:fb:2e:9b:d1:11:69:a8:87:0f:5a:
         1a:24:72:8e:a1:e9:a0:67:a5:fa:08:39:50:00:ef:d9:46:4c:
         a5:04:2e:f5:ff:45:f8:b6:a2:65:b5:db:d3:28:8b:c9:93:bc:
         87:83:6e:ce:c5:e0:b9:6b:81:1f:5a:7c:69:d8:5a:15:61:b0:
         7f:87:5d:6b:15:73:a1:5b:b3:a8:ac:81:f2:e1:7e:1f:f2:0b:
         77:28:9f:17:5e:7a:a1:3a:e2:76:a2:f3:fb:98:48:28:47:18:
         a9:a0:e6:b1:2b:e1:78:46:c8:58:0c:fb:d2:30:1f:dd:8c:38:
         63:64:fb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 04:43:42 2024 by rpki-client on console-ams.rpki-client.org