Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/1ff16498d6cf3cda69c886bd92f6034f40cd0d5f.roa
File:                     1ff16498d6cf3cda69c886bd92f6034f40cd0d5f.roa (raw, json)
Hash identifier:          AqjMYsLFFyGSeJVaEdsXk5NtLkBccy9tI5A4XbhBsyQ=
Subject key identifier:   3C:B0:75:23:48:C4:64:A4:06:D2:B6:67:F2:90:A7:6C:8A:07:CD:F9
Certificate issuer:       /CN=8b9a11aeaeba482db300e5c15088db3c41615181
Certificate serial:       0B2939
Authority key identifier: D0:2D:22:55:35:1F:15:DC:12:7B:79:8B:4D:D1:63:7D:FD:20:5D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b9a11aeaeba482db300e5c15088db3c41615181.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/1ff16498d6cf3cda69c886bd92f6034f40cd0d5f.roa
Signing time:             Fri 26 Jan 2024 00:25:35 +0000
ROA not before:           Fri 26 Jan 2024 00:25:35 +0000
ROA not after:            Mon 26 Jan 2026 00:25:35 +0000
asID:                     263798
IP address blocks:        2803:6290::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 20:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731449 (0xb2939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9a11aeaeba482db300e5c15088db3c41615181
        Validity
            Not Before: Jan 26 00:25:35 2024 GMT
            Not After : Jan 26 00:25:35 2026 GMT
        Subject: CN=1ff16498d6cf3cda69c886bd92f6034f40cd0d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:06:a7:cb:58:f1:e4:fa:6f:2c:36:3f:47:ef:
                    82:95:3e:6a:da:1a:9a:dc:ec:84:9e:ee:c1:7f:bb:
                    32:f8:37:c3:34:af:5b:8e:f5:8a:9a:8b:fc:de:ee:
                    ee:96:c0:2a:82:8a:7e:67:32:da:7a:78:0d:b4:a5:
                    6a:62:d1:1b:04:f3:da:c6:04:fb:70:5b:a8:c9:c7:
                    52:7a:28:f3:c1:c7:51:60:3b:3f:02:a6:13:b8:6b:
                    b5:c0:05:2d:34:dd:2c:4f:9a:53:d5:5c:83:78:c5:
                    ae:57:63:1b:de:e9:f3:15:4f:9e:48:7d:d9:86:ee:
                    52:be:79:46:9a:20:69:91:09:18:78:b6:de:5a:b0:
                    5b:ff:47:6e:b1:1a:39:a9:6f:1e:ae:fc:1b:56:ce:
                    e8:fa:10:63:cc:76:7b:31:14:d7:8a:ac:0d:77:16:
                    a3:c8:58:7c:25:73:da:b3:9a:2f:e7:4b:c5:46:0c:
                    a2:c1:ae:f3:25:db:46:50:ca:b1:12:58:61:e6:16:
                    37:03:4c:a1:38:6d:fb:9a:8d:06:be:1e:35:69:a8:
                    3d:8b:c0:71:e7:11:a7:3c:8e:da:70:c9:e7:58:d3:
                    25:b2:01:45:d2:0e:7d:3a:64:a9:e3:91:78:69:7b:
                    88:44:a8:0f:4a:c9:c6:6c:de:c8:88:81:71:4f:92:
                    17:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B0:75:23:48:C4:64:A4:06:D2:B6:67:F2:90:A7:6C:8A:07:CD:F9
            X509v3 Authority Key Identifier:
                keyid:D0:2D:22:55:35:1F:15:DC:12:7B:79:8B:4D:D1:63:7D:FD:20:5D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b9a11aeaeba482db300e5c15088db3c41615181.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/1ff16498d6cf3cda69c886bd92f6034f40cd0d5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/8b9a11aeaeba482db300e5c15088db3c41615181.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6290::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:8d:92:00:6f:38:78:05:e0:bc:e2:9e:f9:d7:d5:3e:75:52:
         71:d6:0c:44:0e:c6:b2:28:5e:57:bf:18:7f:89:f1:44:27:02:
         12:df:be:39:5f:06:33:9b:80:53:2a:fa:77:44:4a:f2:57:35:
         45:91:14:df:79:60:da:62:45:fe:24:93:e9:96:85:e4:2f:51:
         d4:2a:0f:c8:82:e7:48:08:58:ed:57:23:6d:19:68:0e:9f:b8:
         a8:45:10:40:de:e6:4a:c8:64:fa:b5:f4:c4:08:f0:b9:bf:76:
         c6:b5:64:e7:30:b1:c1:08:3b:ae:5c:d9:8f:e0:ce:e2:84:57:
         23:dd:33:50:84:06:84:a1:74:47:0e:c1:6c:8c:18:d4:20:aa:
         88:8e:63:7b:a7:af:eb:b4:34:3f:0f:fc:4c:28:a2:be:74:be:
         19:9d:c3:ef:73:89:3c:f1:66:e0:26:d8:17:94:60:b1:7f:9a:
         1f:52:a2:c3:66:c9:a6:d3:47:0f:61:34:a3:2a:7f:f5:41:dc:
         f7:31:a8:11:db:c9:56:88:e0:1e:94:94:cd:3c:38:79:8c:35:
         5c:03:b5:5e:5f:b3:d1:c2:4c:ba:95:c9:4d:54:e7:01:ac:ef:
         7d:87:38:aa:d1:60:82:20:1b:69:2b:59:40:7c:97:33:b4:66:
         72:0e:c7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----