Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/98449c602400dbc912bd8010696ae64a8e00f243.roa
File:                     98449c602400dbc912bd8010696ae64a8e00f243.roa (raw, json)
Hash identifier:          yKCTr/1+YiiC4qQDOaXn63OFumgE+yYLdxvtfmXszfU=
Subject key identifier:   0D:3F:55:2B:BB:B7:7C:88:7A:23:59:91:A2:62:FD:5D:ED:43:8C:20
Certificate issuer:       /CN=703bede159efdf3fd85e6b49bded6c79dc525307
Certificate serial:       0D9FD9
Authority key identifier: 79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/98449c602400dbc912bd8010696ae64a8e00f243.roa
Signing time:             Wed 24 Mar 2021 14:47:31 +0000
ROA not before:           Wed 24 Mar 2021 14:47:30 +0000
ROA not after:            Tue 24 Mar 2026 14:47:30 +0000
asID:                     27807
IP address blocks:        2001:1338::/32 maxlen: 32
                          2800:30::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892889 (0xd9fd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703bede159efdf3fd85e6b49bded6c79dc525307
        Validity
            Not Before: Mar 24 14:47:30 2021 GMT
            Not After : Mar 24 14:47:30 2026 GMT
        Subject: CN=98449c602400dbc912bd8010696ae64a8e00f243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fa:94:78:c5:ef:dd:fa:37:36:13:02:8a:ae:
                    37:f0:ee:36:a4:43:90:46:92:61:07:07:2b:48:ec:
                    fa:7d:b2:15:4a:ce:e4:64:de:16:6a:c8:ef:bd:6d:
                    f2:01:65:3e:4e:63:1c:20:fe:48:0c:8b:90:aa:75:
                    a4:23:92:8f:d6:fd:37:fb:bd:43:2c:0e:89:09:b4:
                    36:ba:70:d7:26:7a:79:d1:1e:f9:09:58:da:34:4f:
                    b3:58:6a:35:30:c1:05:6f:ca:e5:d3:63:68:54:f4:
                    8a:f9:3c:d4:4d:6c:fa:87:64:b8:77:2a:64:b0:db:
                    ca:8f:f3:49:9d:73:8f:a4:91:36:4a:0a:1e:ab:0b:
                    b8:5e:d9:d5:86:37:9b:e7:6a:c2:1a:cb:a0:48:18:
                    65:5f:63:12:99:ee:7e:f7:0e:8d:a9:22:00:73:7b:
                    0c:7c:33:fb:81:79:c8:86:4f:d7:6f:ab:dc:10:57:
                    c4:c6:3b:3f:12:cf:f1:01:4e:23:6f:94:24:de:25:
                    4f:12:4a:68:8b:9b:29:7c:a4:da:12:91:c7:9b:61:
                    d9:e5:21:34:6b:82:47:fb:0e:34:ad:65:e0:01:41:
                    c5:a2:80:c4:7a:1b:f3:4d:74:d7:f1:a4:8f:fc:10:
                    20:9a:e0:ea:20:7d:a2:7b:dd:38:03:02:3a:52:f7:
                    e7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3F:55:2B:BB:B7:7C:88:7A:23:59:91:A2:62:FD:5D:ED:43:8C:20
            X509v3 Authority Key Identifier:
                keyid:79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/98449c602400dbc912bd8010696ae64a8e00f243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/703bede159efdf3fd85e6b49bded6c79dc525307.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1338::/32
                  2800:30::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:03:51:42:34:cf:54:fc:3c:c3:dd:60:dd:0f:cf:5c:8e:56:
         62:75:a0:c9:25:a9:2b:5b:35:8e:10:13:b2:a9:a9:e1:d1:b7:
         56:1a:38:79:da:24:9c:67:26:46:3e:60:f6:2e:7b:2a:c7:c3:
         1c:1b:31:9c:a3:c3:d5:1c:bf:80:61:49:63:24:10:1e:62:23:
         f5:31:84:23:95:1f:a7:a0:2a:f7:d0:58:c4:6f:df:19:24:d2:
         99:ad:7c:02:62:42:21:9f:af:e3:81:ff:61:d6:83:65:c7:17:
         ba:49:e1:10:ac:4c:5f:a5:ec:e1:61:f0:bc:07:b0:56:73:a7:
         6b:9a:72:83:b7:fb:08:c8:b6:8a:14:e0:6d:f1:ba:e1:22:05:
         aa:e3:9d:38:23:fc:cc:d1:5f:6e:46:82:09:0a:67:05:6d:fe:
         b4:a5:c3:2e:88:b5:4c:a6:72:ba:fa:7c:3f:51:5d:ae:28:5e:
         1f:33:1c:c2:5d:b1:3c:ac:b3:3c:69:b1:41:c7:18:c4:c7:dc:
         14:8f:ed:38:d1:85:84:90:48:cb:ed:1b:3d:5d:25:e0:27:b2:
         b4:37:f2:7b:ec:5d:22:85:4a:59:cf:47:2e:d2:5f:d3:d0:16:
         87:cf:b4:57:62:89:d8:2d:e6:2c:3f:1f:de:d0:6a:44:aa:26:
         7e:6e:e2:5e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDDZ/ZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcw
M2JlZGUxNTllZmRmM2ZkODVlNmI0OWJkZWQ2Yzc5ZGM1MjUzMDcwHhcNMjEwMzI0
MTQ0NzMwWhcNMjYwMzI0MTQ0NzMwWjAzMTEwLwYDVQQDEyg5ODQ0OWM2MDI0MDBk
YmM5MTJiZDgwMTA2OTZhZTY0YThlMDBmMjQzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl/qUeMXv3fo3NhMCiq438O42pEOQRpJhBwcrSOz6fbIVSs7k
ZN4WasjvvW3yAWU+TmMcIP5IDIuQqnWkI5KP1v03+71DLA6JCbQ2unDXJnp50R75
CVjaNE+zWGo1MMEFb8rl02NoVPSK+TzUTWz6h2S4dypksNvKj/NJnXOPpJE2Sgoe
qwu4XtnVhjeb52rCGsugSBhlX2MSme5+9w6NqSIAc3sMfDP7gXnIhk/Xb6vcEFfE
xjs/Es/xAU4jb5Qk3iVPEkpoi5spfKTaEpHHm2HZ5SE0a4JH+w40rWXgAUHFooDE
ehvzTXTX8aSP/BAgmuDqIH2ie904AwI6UvfnnwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFA0/VSu7t3yIeiNZkaJi/V3tQ4wgMB8GA1UdIwQYMBaAFHmsn71HO0C8BtDw
US5CTe1rKogpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzAzYmVk
ZTE1OWVmZGYzZmQ4NWU2YjQ5YmRlZDZjNzlkYzUyNTMwNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWI2YmMxNTAtZGVmYi00MTlhLWFhYTEtYTVhMzU5
NTQyYTg1Lzk4NDQ5YzYwMjQwMGRiYzkxMmJkODAxMDY5NmFlNjRhOGUwMGYyNDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YjZiYzE1MC1kZWZiLTQxOWEtYWFhMS1hNWEz
NTk1NDJhODUvNzAzYmVkZTE1OWVmZGYzZmQ4NWU2YjQ5YmRlZDZjNzlkYzUyNTMw
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAIwDgMFACABEzgDBQAoAAAwMA0GCSqGSIb3DQEBCwUAA4IBAQCPA1FC
NM9U/DzD3WDdD89cjlZidaDJJakrWzWOEBOyqanh0bdWGjh52iScZyZGPmD2Lnsq
x8McGzGco8PVHL+AYUljJBAeYiP1MYQjlR+noCr30FjEb98ZJNKZrXwCYkIhn6/j
gf9h1oNlxxe6SeEQrExfpezhYfC8B7BWc6drmnKDt/sIyLaKFOBt8brhIgWq4504
I/zM0V9uRoIJCmcFbf60pcMuiLVMpnK6+nw/UV2uKF4fMxzCXbE8rLM8abFBxxjE
x9wUj+040YWEkEjL7Rs9XSXgJ7K0N/J77F0ihUpZz0cu0l/T0BaHz7RXYonYLeYs
Px/e0GpEqiZ+buJe
-----END CERTIFICATE-----
Generated at Mon Sep 25 15:53:08 2023 by rpki-client on console-fra.rpki-client.org