Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/44436a0954f34c045ddcf2dfdd7a32538ed890f7.roa
File:                     44436a0954f34c045ddcf2dfdd7a32538ed890f7.roa (raw, json)
Hash identifier:          rd+jWiq09I/tYQ1OPxdeQLFkEY/Z22Y26s342C6qADo=
Subject key identifier:   19:54:D3:94:B7:EB:E6:47:50:C7:99:CE:29:70:3F:2E:6A:E3:1C:A6
Certificate issuer:       /CN=89b05c9212d6b33b390c81f3fc8958af7050b896
Certificate serial:       0DB42C
Authority key identifier: C5:61:39:2E:B1:6D:D9:6D:FB:14:BF:C3:26:82:38:A8:E9:81:83:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b05c9212d6b33b390c81f3fc8958af7050b896.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/44436a0954f34c045ddcf2dfdd7a32538ed890f7.roa
Signing time:             Wed 24 Mar 2021 14:37:30 +0000
ROA not before:           Wed 24 Mar 2021 14:37:30 +0000
ROA not after:            Tue 24 Mar 2026 14:37:30 +0000
asID:                     264763
IP address blocks:        2803:50c0:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898092 (0xdb42c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b05c9212d6b33b390c81f3fc8958af7050b896
        Validity
            Not Before: Mar 24 14:37:30 2021 GMT
            Not After : Mar 24 14:37:30 2026 GMT
        Subject: CN=44436a0954f34c045ddcf2dfdd7a32538ed890f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a0:14:3d:7a:f6:fc:f7:4c:6a:0e:96:42:79:
                    c0:16:39:d3:9c:08:c3:6c:6f:d1:c3:e9:1e:bc:cb:
                    bd:dc:9b:6a:bc:29:20:cd:6f:1d:a7:01:6e:1e:0a:
                    f1:3c:66:7b:fe:c6:7a:60:03:0f:cd:d9:3f:91:2a:
                    bf:0c:ff:66:67:0c:18:2f:43:03:c9:3c:d7:f4:8c:
                    ab:87:d9:d8:17:e4:d3:3b:4c:a9:de:ed:21:2c:ff:
                    8f:5e:ff:7e:41:ec:19:65:8c:af:ee:01:b4:bf:6f:
                    a2:d4:49:7b:6d:3a:e3:7b:6a:51:a9:6e:fa:76:01:
                    15:a4:2c:d5:08:f8:cb:0b:ee:1d:0b:7a:23:9b:46:
                    3e:53:47:7c:3a:58:8f:f6:66:d0:a7:36:2f:2c:62:
                    d5:30:da:a1:0a:e5:21:5f:b9:2f:00:09:ee:a8:5c:
                    ff:8b:9c:58:9a:a6:73:de:79:a7:23:21:56:0a:bd:
                    43:fe:a9:22:87:c3:cf:a5:da:99:b1:9b:56:40:c9:
                    a9:dd:48:2d:3a:ac:48:ba:82:b8:e6:ba:c9:93:7a:
                    47:b9:e6:13:41:56:23:ef:70:c7:a2:eb:26:20:a7:
                    cc:7e:64:05:e1:a2:86:c5:25:94:cd:65:8e:58:fb:
                    22:cd:39:73:4d:16:10:12:bc:03:91:2b:18:67:5f:
                    ea:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:54:D3:94:B7:EB:E6:47:50:C7:99:CE:29:70:3F:2E:6A:E3:1C:A6
            X509v3 Authority Key Identifier:
                keyid:C5:61:39:2E:B1:6D:D9:6D:FB:14:BF:C3:26:82:38:A8:E9:81:83:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b05c9212d6b33b390c81f3fc8958af7050b896.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/44436a0954f34c045ddcf2dfdd7a32538ed890f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/89b05c9212d6b33b390c81f3fc8958af7050b896.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:50c0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:f9:e8:a4:2d:43:60:a1:78:41:33:1e:8c:b1:41:a3:0e:ec:
         be:2c:8e:e7:8f:d3:37:00:f2:ac:79:00:0f:25:ea:52:1c:f8:
         f8:f8:fa:e3:76:8e:8d:37:88:41:41:27:bc:c6:cd:e2:05:48:
         e8:c3:6b:cb:2b:f1:a7:18:65:bf:25:eb:6f:68:0b:a1:2b:b1:
         b6:23:21:29:85:99:d4:ae:4c:bd:8d:92:ad:02:3e:56:65:b6:
         34:bf:bc:0f:53:fd:5a:ce:4f:af:0f:67:65:d5:4d:b3:11:92:
         0a:49:39:03:a9:21:40:df:d4:66:a9:95:60:1f:b7:12:db:75:
         63:f5:7b:53:75:5c:d2:ff:1b:21:a6:84:72:53:c2:d5:0a:04:
         78:28:79:4c:81:87:5c:b0:c1:d3:53:68:49:65:d6:b5:cd:77:
         1f:9e:29:35:c7:85:cd:77:39:31:0c:20:ce:69:61:37:6f:bf:
         92:2b:1a:a0:66:f3:fa:56:81:0a:29:6e:30:85:0a:f5:77:7e:
         94:c2:68:1b:d6:e7:4a:65:70:d5:00:2d:4d:12:19:56:47:d7:
         23:f0:d0:bb:41:2a:47:7f:e7:ff:78:a9:b5:62:c6:f7:78:02:
         63:1c:50:2b:67:2a:96:30:9d:a0:04:b9:19:d5:62:5c:95:2b:
         f3:13:df:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 19:55:08 2023 by rpki-client on console-fra.rpki-client.org