Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ad91d32d-9578-4334-b3e4-07bfd64c6f57/4c890a77b9b8a15cc59ba31490e51983686fae6b.roa
File:                     4c890a77b9b8a15cc59ba31490e51983686fae6b.roa (raw, json)
Hash identifier:          gBe1brhwl3J1Wu9TrAd151b6oupCF3dZUxHOL1SKPN4=
Subject key identifier:   43:33:89:FE:76:3D:C7:A9:24:DD:FB:1E:4F:6B:94:A3:2D:38:46:B4
Certificate issuer:       /CN=0ab54f870629d44668b4eafe72acded873a82381
Certificate serial:       04E0FB
Authority key identifier: A4:41:BB:8F:20:69:00:3A:99:9F:64:F7:32:C2:CB:84:64:17:39:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ab54f870629d44668b4eafe72acded873a82381.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ad91d32d-9578-4334-b3e4-07bfd64c6f57/4c890a77b9b8a15cc59ba31490e51983686fae6b.roa
Signing time:             Thu 05 May 2022 13:38:59 +0000
ROA not before:           Mon 02 May 2022 03:00:00 +0000
ROA not after:            Thu 02 May 2024 03:00:00 +0000
asID:                     265671
IP address blocks:        2803:7ec0:4000::/36 maxlen: 36
                          2803:7ec0:c000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319739 (0x4e0fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab54f870629d44668b4eafe72acded873a82381
        Validity
            Not Before: May  2 03:00:00 2022 GMT
            Not After : May  2 03:00:00 2024 GMT
        Subject: CN=4c890a77b9b8a15cc59ba31490e51983686fae6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fc:b2:85:13:7e:44:59:bc:c8:ef:0b:69:44:
                    c4:64:e2:23:a4:40:9f:11:c2:64:05:4c:d5:1b:7e:
                    bb:8d:ac:4f:81:b0:70:d2:7a:cc:cd:44:a0:98:af:
                    e9:d5:45:cd:b6:94:ab:eb:41:ab:35:30:eb:5a:1e:
                    b6:8c:26:d3:94:ff:14:79:30:08:63:57:b1:2a:e1:
                    f2:c2:bc:9f:5d:a5:a1:0c:34:d1:94:d6:44:15:8f:
                    60:8c:8f:7e:f9:e7:2a:c4:b3:79:b6:02:f8:66:a5:
                    66:b1:e4:7e:b6:47:1d:68:61:51:96:33:2e:fa:a8:
                    50:ad:35:ea:8a:4f:bb:d1:f9:ea:2e:6f:8e:3e:e1:
                    e7:cf:f0:08:a5:b4:fd:e1:78:98:a4:a0:af:fc:13:
                    30:ef:62:bb:0d:54:05:4d:6b:8c:ae:f4:a9:29:54:
                    d4:75:57:1c:67:5a:4e:88:5a:34:ca:8f:c7:d0:09:
                    b0:70:2d:a4:95:bb:0f:f9:21:41:c7:8b:22:ab:08:
                    0f:da:6f:8d:a1:80:d3:1d:a2:3a:f8:6a:3d:c2:10:
                    4b:f1:95:e2:6a:96:4e:39:c5:03:2c:0b:5a:77:11:
                    4d:5a:60:f6:d7:13:41:e8:82:27:6d:a2:9a:e0:ca:
                    a9:39:60:1d:22:16:1a:42:3f:ae:78:9c:d2:28:b3:
                    a1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:33:89:FE:76:3D:C7:A9:24:DD:FB:1E:4F:6B:94:A3:2D:38:46:B4
            X509v3 Authority Key Identifier:
                keyid:A4:41:BB:8F:20:69:00:3A:99:9F:64:F7:32:C2:CB:84:64:17:39:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ab54f870629d44668b4eafe72acded873a82381.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ad91d32d-9578-4334-b3e4-07bfd64c6f57/4c890a77b9b8a15cc59ba31490e51983686fae6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ad91d32d-9578-4334-b3e4-07bfd64c6f57/0ab54f870629d44668b4eafe72acded873a82381.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7ec0:4000::/36
                  2803:7ec0:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         81:b9:7b:ff:2b:fe:e4:29:31:d4:1c:5c:57:e9:56:55:82:fd:
         01:ea:8c:97:d4:d7:0b:cd:c7:c3:94:cb:26:d9:9f:d1:1f:3f:
         f9:09:fa:63:6c:ca:2c:79:10:a8:76:b2:b1:d5:2f:d7:37:cd:
         22:51:cf:35:98:49:3a:f8:5a:77:c3:24:eb:dc:cb:9b:e4:9f:
         75:a7:55:02:1d:c0:15:2d:3c:1e:ed:71:18:45:b3:fa:66:90:
         f3:ee:84:c9:f9:d8:99:00:01:ea:8b:b3:0a:7f:c3:e4:b1:e5:
         ba:bb:d9:89:b3:e3:95:7b:bf:c2:8f:6e:08:99:33:5c:3b:07:
         22:e5:bd:60:2b:a8:6f:f6:17:14:7b:d1:ed:61:8e:1b:ed:a3:
         a4:26:dd:ac:90:e0:48:bd:cd:35:57:49:2b:d4:39:af:1b:a2:
         1d:6f:57:6a:92:9e:12:82:d3:61:21:5d:2a:45:74:62:c0:ea:
         64:e2:5a:e3:0b:90:15:ab:31:68:f9:9e:95:c7:9e:b9:f5:16:
         0e:62:95:bb:d6:b4:63:8d:ee:68:c6:8f:44:dc:a2:d7:e7:2d:
         b8:ba:99:c7:84:5a:92:94:6f:9c:45:75:c2:29:df:20:f2:3e:
         e6:52:0c:07:a3:aa:ff:90:4a:13:58:f0:2f:04:07:33:5d:7d:
         e7:ad:1c:4e
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIDBOD7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBh
YjU0Zjg3MDYyOWQ0NDY2OGI0ZWFmZTcyYWNkZWQ4NzNhODIzODEwHhcNMjIwNTAy
MDMwMDAwWhcNMjQwNTAyMDMwMDAwWjAzMTEwLwYDVQQDEyg0Yzg5MGE3N2I5Yjhh
MTVjYzU5YmEzMTQ5MGU1MTk4MzY4NmZhZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmvyyhRN+RFm8yO8LaUTEZOIjpECfEcJkBUzVG367jaxPgbBw
0nrMzUSgmK/p1UXNtpSr60GrNTDrWh62jCbTlP8UeTAIY1exKuHywryfXaWhDDTR
lNZEFY9gjI9++ecqxLN5tgL4ZqVmseR+tkcdaGFRljMu+qhQrTXqik+70fnqLm+O
PuHnz/AIpbT94XiYpKCv/BMw72K7DVQFTWuMrvSpKVTUdVccZ1pOiFo0yo/H0Amw
cC2klbsP+SFBx4siqwgP2m+NoYDTHaI6+Go9whBL8ZXiapZOOcUDLAtadxFNWmD2
1xNB6IInbaKa4MqpOWAdIhYaQj+ueJzSKLOhtwIDAQABo4ICZTCCAmEwHQYDVR0O
BBYEFEMzif52PcepJN37Hk9rlKMtOEa0MB8GA1UdIwQYMBaAFKRBu48gaQA6mZ9k
9zLCy4RkFznRMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGFiNTRm
ODcwNjI5ZDQ0NjY4YjRlYWZlNzJhY2RlZDg3M2E4MjM4MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWQ5MWQzMmQtOTU3OC00MzM0LWIzZTQtMDdiZmQ2
NGM2ZjU3LzRjODkwYTc3YjliOGExNWNjNTliYTMxNDkwZTUxOTgzNjg2ZmFlNmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hZDkxZDMyZC05NTc4LTQzMzQtYjNlNC0wN2Jm
ZDY0YzZmNTcvMGFiNTRmODcwNjI5ZDQ0NjY4YjRlYWZlNzJhY2RlZDg3M2E4MjM4
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjApBggrBgEFBQcBBwEB/wQa
MBgwFgQCAAIwEAMGBCgDfsBAAwYEKAN+wMAwDQYJKoZIhvcNAQELBQADggEBAIG5
e/8r/uQpMdQcXFfpVlWC/QHqjJfU1wvNx8OUyybZn9EfP/kJ+mNsyix5EKh2srHV
L9c3zSJRzzWYSTr4WnfDJOvcy5vkn3WnVQIdwBUtPB7tcRhFs/pmkPPuhMn52JkA
AeqLswp/w+Sx5bq72Ymz45V7v8KPbgiZM1w7ByLlvWArqG/2FxR70e1hjhvto6Qm
3ayQ4Ei9zTVXSSvUOa8boh1vV2qSnhKC02EhXSpFdGLA6mTiWuMLkBWrMWj5npXH
nrn1Fg5ilbvWtGON7mjGj0TcotfnLbi6mceEWpKUb5xFdcIp3yDyPuZSDAejqv+Q
ShNY8C8EBzNdfeetHE4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-fra.rpki-client.org