Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/bf8db8f65e37b459ebcc8b47ba496bc7936959f5.roa
File:                     bf8db8f65e37b459ebcc8b47ba496bc7936959f5.roa (raw, json)
Hash identifier:          6QVD6tsOh3zaMXtjhXYNoHM/fcAn65unKVvIAlayGfM=
Subject key identifier:   5F:38:3B:B7:F6:11:4E:70:9E:7F:08:9B:DE:12:D5:5F:E5:37:49:CC
Certificate issuer:       /CN=bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6
Certificate serial:       1283F4
Authority key identifier: 03:83:6F:62:CD:84:48:90:75:9C:DD:AE:F4:FF:A7:33:CF:5A:B6:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/bf8db8f65e37b459ebcc8b47ba496bc7936959f5.roa
Signing time:             Fri 15 Oct 2021 05:06:26 +0000
ROA not before:           Fri 15 Oct 2021 03:00:00 +0000
ROA not after:            Sun 15 Oct 2023 03:00:00 +0000
asID:                     28022
IP address blocks:        2800:510:2::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1213428 (0x1283f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6
        Validity
            Not Before: Oct 15 03:00:00 2021 GMT
            Not After : Oct 15 03:00:00 2023 GMT
        Subject: CN=bf8db8f65e37b459ebcc8b47ba496bc7936959f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a8:0f:73:8b:7f:39:c0:bb:34:0e:75:f7:2b:
                    5f:f5:6d:7b:46:ea:d7:06:2f:0b:8b:19:43:17:3e:
                    4f:27:4b:87:63:f4:89:e5:64:5b:91:58:89:f0:93:
                    9c:57:63:eb:c4:bd:b1:12:73:f8:43:34:48:64:25:
                    be:78:68:4f:87:84:1d:05:92:f7:95:40:c7:c0:fb:
                    b3:86:cc:cf:a2:e6:f1:5b:47:60:c0:c2:d9:81:ff:
                    ad:91:6c:a0:d5:61:32:1c:36:36:34:e2:fd:3f:40:
                    57:90:a8:4f:7b:1d:aa:f9:79:76:58:bc:77:d6:0d:
                    39:94:f8:cc:a8:ff:6d:dc:86:93:12:34:43:fd:c6:
                    88:e5:d7:4f:91:79:a8:61:c4:d7:2b:7b:96:b6:b1:
                    68:63:a7:29:a9:1e:3e:2a:c4:e0:1c:83:96:b0:df:
                    2b:ba:c6:82:bd:46:78:d9:60:e0:c9:02:de:d2:50:
                    9a:85:bb:52:ba:2a:8a:ed:4f:08:0e:c7:36:7c:d4:
                    8f:0c:97:d3:1b:88:98:1b:f8:78:d5:9c:93:3e:13:
                    c5:5c:1c:61:40:7c:1c:4b:ea:1f:60:30:f9:10:44:
                    88:82:41:67:41:75:65:9b:08:aa:8c:f5:6e:13:b5:
                    3b:1a:29:d0:6f:37:17:76:01:ad:33:2f:6d:ce:9d:
                    ce:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:38:3B:B7:F6:11:4E:70:9E:7F:08:9B:DE:12:D5:5F:E5:37:49:CC
            X509v3 Authority Key Identifier:
                keyid:03:83:6F:62:CD:84:48:90:75:9C:DD:AE:F4:FF:A7:33:CF:5A:B6:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/bf8db8f65e37b459ebcc8b47ba496bc7936959f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/937724ed-96e0-4f1e-b0f0-c9de0efa0dcd/bc2a1d5042f8cd2a75cfc379fc97a61f911df4b6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:510:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:37:ac:b2:40:25:4c:33:28:c9:e9:93:d1:bb:70:81:de:21:
         a4:01:cc:70:2f:b0:9d:e2:fc:e1:47:24:fe:a5:62:6c:3f:25:
         1c:14:36:27:88:b9:aa:15:f5:d4:72:1a:27:46:c9:a2:f0:2e:
         f1:d9:06:b0:2b:ba:16:ef:cd:10:cd:9b:1e:d8:84:ba:59:6e:
         7d:b1:4e:83:d4:cb:2f:cb:15:3f:cf:76:c3:9e:cd:27:20:b1:
         77:b1:88:a7:ca:d5:c6:c2:70:51:f6:34:30:32:74:e2:a6:9f:
         5b:34:d5:47:67:32:ed:31:9b:43:6e:8f:d4:fc:dc:eb:c0:8f:
         c0:fa:94:75:51:19:b5:70:75:c1:dd:ce:42:ee:de:2d:57:fa:
         7b:68:a2:49:e4:81:c2:e2:ae:88:f9:cf:f8:be:0c:38:64:0b:
         d9:4b:75:b6:da:bd:ae:71:e0:fa:c3:99:89:b2:2a:27:eb:ef:
         85:5b:57:5a:26:89:86:8d:84:b2:75:6d:8f:5f:4f:f3:02:7c:
         84:3b:f9:77:b1:46:67:3a:5a:74:f4:7b:d7:7e:c2:1f:5f:60:
         fa:55:8c:8d:0a:7e:59:47:53:65:6c:0c:19:5c:ad:82:9a:41:
         3c:c1:d5:3b:a0:39:fb:93:69:3f:68:d6:ad:c2:92:7a:46:c7:
         9f:b2:e6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 22:14:42 2023 by rpki-client on console-fra.rpki-client.org