Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/319ac866878f9e105f0b3d9d8e0c7437116e0e63.roa
File:                     319ac866878f9e105f0b3d9d8e0c7437116e0e63.roa (raw, json)
Hash identifier:          XgZqDq80oqjBR6Z0aspucgyKosncpbrtnSTPd0jC/a8=
Subject key identifier:   55:75:F2:7F:37:D8:F3:33:01:C5:D8:2D:DB:5E:A4:58:F3:28:20:87
Certificate issuer:       /CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
Certificate serial:       1A9749
Authority key identifier: 95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/319ac866878f9e105f0b3d9d8e0c7437116e0e63.roa
Signing time:             Tue 06 Dec 2022 21:09:32 +0000
ROA not before:           Mon 05 Dec 2022 21:08:20 +0000
ROA not after:            Fri 06 Dec 2024 21:08:20 +0000
asID:                     262589
IP address blocks:        2803:bfa0:fe00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1742665 (0x1a9749)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
        Validity
            Not Before: Dec  5 21:08:20 2022 GMT
            Not After : Dec  6 21:08:20 2024 GMT
        Subject: CN=319ac866878f9e105f0b3d9d8e0c7437116e0e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:44:44:ee:84:71:ba:0a:73:cf:de:7e:1d:ec:
                    bf:a8:c0:09:07:59:56:bf:82:3e:45:33:2a:84:d5:
                    04:c9:91:ab:17:e6:5b:db:77:16:ab:36:ae:02:e3:
                    94:a5:3f:7d:59:6b:b9:af:c7:43:7e:81:35:28:9c:
                    96:55:ac:64:d3:b1:29:91:bf:16:5e:3a:b7:a7:7d:
                    5b:a3:e7:94:bd:2f:09:42:9b:cd:89:b1:80:7a:83:
                    29:c3:04:07:86:72:78:d8:5c:6f:4c:50:71:d1:c3:
                    d0:cf:2e:5d:83:c6:b5:1f:76:c2:f4:52:3e:11:91:
                    ac:f0:e7:8b:53:d6:cd:d9:54:a6:07:2a:ee:fe:60:
                    d6:cf:91:91:63:ef:9c:9e:84:79:35:ed:a7:6f:ef:
                    44:17:8a:15:37:c6:b3:27:4d:5a:ad:d7:d1:f6:fb:
                    a5:1a:8b:1b:32:e5:33:53:fc:6a:20:f6:28:f4:8c:
                    42:04:29:4a:64:fc:34:86:92:1e:56:76:71:43:bd:
                    55:d6:80:e5:89:03:8f:78:c9:d6:27:b5:cb:99:42:
                    9c:cd:30:72:16:2f:81:45:70:0c:fe:0b:fa:af:63:
                    52:0d:d9:93:63:3d:44:d4:6b:46:90:a7:57:8d:91:
                    b8:a5:b9:de:58:97:75:c2:e6:e6:dc:77:ed:bd:5c:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:75:F2:7F:37:D8:F3:33:01:C5:D8:2D:DB:5E:A4:58:F3:28:20:87
            X509v3 Authority Key Identifier:
                keyid:95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/319ac866878f9e105f0b3d9d8e0c7437116e0e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bfa0:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         46:59:25:c9:2a:9c:cc:66:71:60:97:c6:42:4f:88:18:19:22:
         cb:34:6c:3e:ea:a6:f2:d5:0c:90:24:35:43:f7:21:34:59:82:
         1e:24:62:f6:84:64:75:34:b3:5a:35:72:80:09:be:33:33:fe:
         0a:a4:08:1f:cd:8c:74:5f:74:17:58:4f:cb:4a:3e:1c:8a:a7:
         a9:3f:d7:86:5e:28:10:cf:20:2b:85:89:42:c3:85:89:91:9a:
         5e:24:be:1c:0a:a4:d3:a9:28:a4:ff:3d:ab:63:b7:b2:11:cc:
         25:06:d7:a4:01:86:3b:27:6e:e2:88:0a:cd:d9:ce:fd:be:cd:
         54:5e:93:7f:89:9e:ac:a0:81:01:8b:f0:92:85:2f:14:b3:91:
         e5:f1:8f:3b:ff:b8:b4:a9:e8:99:30:6c:40:74:a5:57:1c:f7:
         0a:d5:6b:a8:1e:3a:45:f4:e3:bb:07:45:de:2c:97:78:8a:5f:
         ae:ca:fc:5b:1c:61:9e:10:54:7e:90:6d:bd:4b:4a:3a:c2:c4:
         61:44:39:f5:2c:d6:91:bf:1d:00:fd:72:f5:11:05:06:01:ee:
         53:74:97:ed:26:2f:77:e6:70:b2:ab:18:a0:b9:ec:46:d3:03:
         de:2d:4d:38:31:33:18:66:f2:25:9e:5a:fa:ce:bc:0e:35:f3:
         04:c9:08:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 04:23:35 2023 by rpki-client on console-fra.rpki-client.org