Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/19d399682883fc6213a8e504d041ab07c24eac1f.roa
File:                     19d399682883fc6213a8e504d041ab07c24eac1f.roa (raw, json)
Hash identifier:          3QxdlAGTyGqObBUdQgrJoGydPFwQfZxa3O0ro4DMbvo=
Subject key identifier:   61:0A:5F:69:40:DA:27:FB:7A:4D:AB:29:9C:12:BE:1F:2C:60:8E:63
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       0AA235
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/19d399682883fc6213a8e504d041ab07c24eac1f.roa
Signing time:             Fri 15 Oct 2021 07:53:19 +0000
ROA not before:           Fri 15 Oct 2021 03:00:00 +0000
ROA not after:            Thu 15 Oct 2026 03:00:00 +0000
asID:                     54235
IP address blocks:        2803:5ce0:b00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 696885 (0xaa235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Oct 15 03:00:00 2021 GMT
            Not After : Oct 15 03:00:00 2026 GMT
        Subject: CN=19d399682883fc6213a8e504d041ab07c24eac1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:b4:0e:4b:61:7e:f1:d3:70:1a:6b:ec:b9:
                    ae:e2:a8:da:2d:48:60:7b:c3:ad:15:98:ad:0d:a5:
                    ae:ae:b0:64:77:75:a5:96:e4:1f:80:dd:ca:cf:f9:
                    99:80:7c:d8:db:26:bb:22:66:aa:82:06:ed:82:22:
                    a3:ca:e7:91:83:21:7a:d1:e8:e4:d2:dc:be:ae:5c:
                    8f:02:33:fc:ad:ad:6a:74:21:54:52:93:d2:c2:5b:
                    09:ff:0a:23:2d:b3:a2:4f:0d:a6:02:c4:0e:13:a9:
                    3e:a3:f9:58:88:60:87:f1:20:54:f9:a2:f9:76:ba:
                    88:af:fb:18:2a:3a:2e:92:91:63:78:da:4d:85:82:
                    c8:67:9c:0f:28:f5:62:94:d2:0d:10:64:09:fb:df:
                    fe:92:c3:fd:14:60:cb:6c:f9:9e:09:64:f9:fc:b1:
                    3f:bd:31:dc:51:02:0e:72:15:df:77:aa:c4:c8:92:
                    f2:87:47:d1:41:2e:59:c9:34:8c:2f:92:4c:a8:16:
                    82:96:ed:f3:68:63:98:86:88:c0:96:62:98:42:58:
                    19:54:a3:9c:4b:a4:10:ca:b6:e4:ae:f8:b6:89:87:
                    fd:a2:e0:d2:08:c9:53:a1:aa:e5:2c:1f:da:da:8f:
                    5a:af:6b:73:08:66:e6:a0:1c:35:7f:d3:64:f0:ce:
                    f1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0A:5F:69:40:DA:27:FB:7A:4D:AB:29:9C:12:BE:1F:2C:60:8E:63
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/19d399682883fc6213a8e504d041ab07c24eac1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:70:e0:b7:ca:da:40:78:2b:fc:20:23:0d:2c:4d:40:57:e9:
         d3:99:4e:f9:15:da:37:e1:42:67:e9:26:4a:8d:a7:24:13:0e:
         1e:8c:24:e7:64:65:d5:cb:20:fa:6f:d7:12:4d:29:5a:b9:f2:
         6f:85:0e:da:89:41:d2:90:66:ab:29:d2:e6:02:7f:c3:b1:99:
         66:ce:bc:3a:87:7c:ef:1a:6f:6c:52:86:2c:ad:3c:d4:ce:8e:
         e2:88:f7:21:bd:0c:ce:bc:59:1a:3f:4f:c5:ff:f0:28:e3:73:
         5c:5d:f6:12:fd:b0:f1:e9:f2:ec:56:78:eb:80:c7:91:b7:d0:
         b5:7d:62:a5:f9:6d:8d:a6:35:49:6d:fc:6b:a0:82:89:87:c5:
         36:f8:c2:00:46:36:8a:0c:4a:42:ff:d3:a3:0b:ea:8c:c9:56:
         fa:ac:30:35:89:22:57:04:75:17:a5:8a:c8:d2:3f:0a:58:24:
         10:a6:2a:5f:e8:fc:52:20:d4:62:47:d4:29:5f:ac:3f:e5:1f:
         2b:28:a3:56:14:b2:dc:2f:9c:a1:58:aa:31:df:a5:dc:e0:6e:
         ca:51:1a:7f:5e:15:89:5e:ef:a2:f1:82:62:15:57:f8:12:2e:
         4c:85:70:91:ba:a2:bc:3f:bd:06:c5:6a:ff:43:a9:8e:fc:87:
         eb:e8:6c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:32 2023 by rpki-client on console-fra.rpki-client.org