Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/8ad493d33979379321ab3e6c7a0e6ff075833c19.roa
File:                     8ad493d33979379321ab3e6c7a0e6ff075833c19.roa (raw, json)
Hash identifier:          k+Wx2phRcHwZ8cyAtmK97GOZ9wgs7JVOXkP8gNXMRV8=
Subject key identifier:   E9:D0:B6:EB:50:99:F2:E1:49:AC:B5:64:41:32:6F:08:48:14:2A:EB
Certificate issuer:       /CN=2d287d9bace0aaa89c8a18b31d258122387e847f
Certificate serial:       04FDA6
Authority key identifier: 80:34:D5:7F:00:0A:74:D4:3B:7E:88:9A:12:19:8C:87:E6:5D:00:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d287d9bace0aaa89c8a18b31d258122387e847f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/8ad493d33979379321ab3e6c7a0e6ff075833c19.roa
Signing time:             Thu 01 Dec 2022 15:01:51 +0000
ROA not before:           Sat 13 Aug 2022 04:38:18 +0000
ROA not after:            Thu 15 Aug 2024 04:38:18 +0000
asID:                     262589
IP address blocks:        2803:6090::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327078 (0x4fda6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d287d9bace0aaa89c8a18b31d258122387e847f
        Validity
            Not Before: Aug 13 04:38:18 2022 GMT
            Not After : Aug 15 04:38:18 2024 GMT
        Subject: CN=8ad493d33979379321ab3e6c7a0e6ff075833c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fc:14:0e:4e:a4:de:2e:84:a8:54:4a:e6:38:
                    3d:b9:11:30:5d:48:17:4c:2e:cb:81:7b:b8:c6:c4:
                    b2:07:af:2f:4f:2d:f8:9a:48:d2:07:68:c4:4c:90:
                    65:e4:85:46:54:00:f8:91:cd:02:d2:a0:c8:a4:62:
                    bc:b6:8b:46:41:eb:32:a3:fe:22:c5:45:40:0a:bf:
                    9f:dd:a1:2f:b1:c5:4a:4d:f8:9e:79:db:eb:41:d0:
                    80:24:bf:fd:3e:82:79:ed:6f:7e:5e:f8:ee:a6:77:
                    20:b6:5b:29:0c:ac:fa:b2:3b:63:6a:06:f2:a1:3e:
                    a7:91:9c:15:cc:13:73:29:b3:ba:29:2b:c9:8c:f7:
                    77:c3:02:4e:6d:c6:7c:f6:25:09:c1:da:f9:cf:0b:
                    18:f3:de:11:3e:2d:2c:e7:f8:93:66:4d:58:56:8a:
                    59:d2:ff:4c:c5:8a:55:0f:67:0d:08:73:85:86:f1:
                    7b:b6:70:e3:62:21:95:ca:db:60:d6:4f:85:53:3f:
                    63:a7:07:88:a9:13:af:1a:eb:37:7d:fa:c8:45:d0:
                    7b:b1:c8:4e:a1:d4:77:cf:63:78:ca:15:65:7b:7f:
                    fc:a5:eb:5c:dd:4f:fe:02:65:70:7f:c8:0c:8b:14:
                    13:d8:8b:6a:29:e6:36:5e:31:57:fb:1f:90:92:d3:
                    8e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D0:B6:EB:50:99:F2:E1:49:AC:B5:64:41:32:6F:08:48:14:2A:EB
            X509v3 Authority Key Identifier:
                keyid:80:34:D5:7F:00:0A:74:D4:3B:7E:88:9A:12:19:8C:87:E6:5D:00:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d287d9bace0aaa89c8a18b31d258122387e847f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/8ad493d33979379321ab3e6c7a0e6ff075833c19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/2d287d9bace0aaa89c8a18b31d258122387e847f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6090::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:03:d0:52:06:a8:c5:76:77:b4:85:d9:a2:b3:6c:ad:02:ed:
         81:7a:e7:c0:73:10:d8:5f:70:40:f8:cb:0e:89:34:8f:45:f8:
         eb:5c:4c:a1:4f:05:47:2a:f4:c8:93:1f:77:b8:e6:e0:e8:0d:
         8e:39:11:34:90:45:58:78:e7:3e:9f:a3:b2:5a:28:e9:b5:ec:
         51:81:da:6e:f5:4d:12:d3:fc:53:f2:57:bc:fc:7d:96:1d:78:
         33:69:65:5a:5a:af:23:9b:ce:86:39:b1:c0:23:ea:11:13:04:
         0a:02:67:72:cc:9e:d1:40:c0:72:c3:6b:91:0d:af:c7:e1:54:
         cf:6d:28:56:56:3e:69:aa:6b:f0:de:ae:92:e2:9b:fa:0b:e7:
         d1:52:3a:04:78:6b:0a:a3:52:f4:99:ef:80:f1:f7:18:4d:c1:
         b1:f1:b6:cc:8f:d5:f7:04:19:62:6c:60:97:bd:67:d3:0e:e0:
         14:78:1b:9b:42:ba:40:ab:4a:43:8d:c8:e4:fb:b8:38:73:9b:
         35:8c:c7:4b:a3:7a:f6:1d:06:52:d1:13:22:29:85:9d:c7:2f:
         b7:40:8c:d8:42:0d:22:3e:3b:16:0c:54:a7:e5:cd:54:1f:8a:
         3c:f8:f9:a7:33:bf:ad:e1:52:0d:ee:c4:fd:fa:0c:d9:e2:04:
         67:49:c3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org