Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/323830313a31623a313830313a313a3a2f36342d3634203d3e203134303830.roa
File:                     323830313a31623a313830313a313a3a2f36342d3634203d3e203134303830.roa (raw, json)
Hash identifier:          WSn8qBudApK4s6cFsHCX95b3PyWLtbrLKna7cfpehak=
Subject key identifier:   02:C9:0E:E7:8C:E1:37:59:E0:17:D2:58:A1:73:58:3A:46:D5:B6:B9
Certificate issuer:       /CN=E921B16CF4E7DF02798073C6D5771DD71D9BAADD
Certificate serial:       1E4DA5C4CD645DB01212FCD16C92D4655F0570EE
Authority key identifier: E9:21:B1:6C:F4:E7:DF:02:79:80:73:C6:D5:77:1D:D7:1D:9B:AA:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/323830313a31623a313830313a313a3a2f36342d3634203d3e203134303830.roa
Signing time:             Wed 27 Mar 2024 19:20:00 +0000
ROA not before:           Wed 27 Mar 2024 19:15:00 +0000
ROA not after:            Wed 26 Mar 2025 19:20:00 +0000
asID:                     14080
IP address blocks:        2801:1b:1801:1::/64 maxlen: 64

Validation:               Failed, certificate revoked on Mon 15 Apr 2024 19:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4d:a5:c4:cd:64:5d:b0:12:12:fc:d1:6c:92:d4:65:5f:05:70:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E921B16CF4E7DF02798073C6D5771DD71D9BAADD
        Validity
            Not Before: Mar 27 19:15:00 2024 GMT
            Not After : Mar 26 19:20:00 2025 GMT
        Subject: CN=02C90EE78CE13759E017D258A173583A46D5B6B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:6b:7e:24:e8:b6:f0:42:4f:34:e9:57:27:
                    1f:8e:a5:d8:64:b8:8a:56:19:95:31:e0:fc:33:38:
                    50:23:16:33:ca:af:ae:70:bd:b8:88:f4:b4:4d:06:
                    2a:53:8e:61:61:5b:bd:8c:4e:a0:87:8d:97:61:49:
                    51:e9:6e:83:cd:90:94:50:4c:8e:d6:96:cc:e2:4f:
                    e1:dd:13:3d:95:fd:1a:78:c0:9e:87:79:ce:f6:cc:
                    ef:3f:7d:e6:da:31:0b:84:59:45:3e:b3:40:51:44:
                    c7:b3:50:64:2c:05:9b:d1:66:a8:9f:35:7b:ac:c0:
                    67:bd:98:74:4d:23:c4:b3:dc:14:c0:87:2f:32:90:
                    c3:c2:e1:8d:46:0e:00:85:30:f4:9d:11:75:70:e3:
                    e5:bd:a3:ca:0b:fd:39:d8:75:ac:61:3a:57:da:dc:
                    2a:7e:66:4d:f6:b3:16:b5:c3:24:64:d1:ac:5e:e9:
                    a9:8b:ac:80:9d:0a:3b:cc:b2:36:82:7a:67:90:44:
                    09:6e:f3:39:d5:f3:95:67:e8:4e:5a:db:ca:94:0c:
                    6f:37:17:4e:66:ae:ea:bb:ed:87:01:8e:61:a9:37:
                    04:82:98:3a:db:5f:bd:98:30:18:ac:3d:4b:7b:4b:
                    a1:f1:9f:47:a4:f7:5a:e7:1b:a9:9c:e4:ca:5e:19:
                    76:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C9:0E:E7:8C:E1:37:59:E0:17:D2:58:A1:73:58:3A:46:D5:B6:B9
            X509v3 Authority Key Identifier:
                keyid:E9:21:B1:6C:F4:E7:DF:02:79:80:73:C6:D5:77:1D:D7:1D:9B:AA:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E921B16CF4E7DF02798073C6D5771DD71D9BAADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/711FB9230E6F8A1F38488FC7E415191DD765F6E548B45CD2F421F28E9A4CF1CC/0/323830313a31623a313830313a313a3a2f36342d3634203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:1801:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         79:2b:1e:1d:07:1f:df:7b:96:04:9d:38:c8:03:6a:b1:aa:45:
         b4:21:e5:2c:fa:50:6b:61:b1:09:68:14:59:e8:01:77:a0:21:
         2e:8b:a8:82:eb:30:ea:e0:12:03:b0:15:56:ea:ca:bd:24:fd:
         42:81:a5:f8:e1:11:ce:1b:4e:ea:c7:07:0b:e6:ac:7e:68:e4:
         3b:1c:06:f2:ab:81:fa:b8:91:bd:01:87:1c:03:4d:d7:a1:a3:
         ee:ec:2c:4e:d3:a2:17:19:6b:1a:ec:1a:8d:bd:eb:46:9e:d6:
         d8:ea:02:53:11:23:b7:4a:30:de:23:a3:57:02:e4:79:44:db:
         a4:e8:e7:0b:e7:bb:38:07:bd:81:76:04:4a:a3:10:8f:82:c6:
         4d:fa:3d:68:33:9a:17:bf:2a:16:c4:31:37:f4:73:b3:76:fc:
         29:88:8a:56:5b:b1:69:f5:bc:2b:eb:21:2c:e1:a6:49:bb:a1:
         ba:27:73:33:3a:64:cb:c3:89:73:fa:07:27:c2:1c:6f:c0:42:
         a3:44:08:a9:27:53:fe:b3:e8:95:3d:fe:de:1d:28:07:0e:f9:
         ab:63:d8:bd:f3:72:14:76:8d:52:f5:c9:97:11:50:d9:aa:91:
         4b:90:4e:a5:38:6a:ac:cf:be:69:f9:95:b2:43:34:8d:aa:fd:
         8f:37:8d:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org