Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2fe289e-d505-4f3d-850e-9212052f00fc/c2ab0b11bd55ee0b1a1d3cb64ebe111e63a7633b.roa
File:                     c2ab0b11bd55ee0b1a1d3cb64ebe111e63a7633b.roa (raw, json)
Hash identifier:          lxJ0AA2qNMJnTRTY5lvF98GbSyh2HIl8J5kkB7/FLTM=
Subject key identifier:   E3:0D:C7:34:66:49:D0:8B:9F:84:0B:3C:41:48:C4:CF:2A:54:7D:43
Certificate issuer:       /CN=eedf2a0d6e5100957ef88c9fe578a8326f0b74d1
Certificate serial:       19A576
Authority key identifier: E0:B9:00:27:94:1B:AF:46:48:5F:40:CF:4A:8C:4E:D9:15:32:9B:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eedf2a0d6e5100957ef88c9fe578a8326f0b74d1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b2fe289e-d505-4f3d-850e-9212052f00fc/c2ab0b11bd55ee0b1a1d3cb64ebe111e63a7633b.roa
Signing time:             Sun 14 Aug 2022 14:07:41 +0000
ROA not before:           Sun 14 Aug 2022 14:07:13 +0000
ROA not after:            Wed 14 Aug 2024 14:07:13 +0000
asID:                     265703
IP address blocks:        2803:d9c0::/32 maxlen: 48

Validation:               Failed, certificate revoked on Fri 12 Jan 2024 23:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1680758 (0x19a576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eedf2a0d6e5100957ef88c9fe578a8326f0b74d1
        Validity
            Not Before: Aug 14 14:07:13 2022 GMT
            Not After : Aug 14 14:07:13 2024 GMT
        Subject: CN=c2ab0b11bd55ee0b1a1d3cb64ebe111e63a7633b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:14:8f:ff:9d:07:a0:1b:da:07:d0:c3:50:85:
                    b7:c1:88:d3:47:10:cd:2e:8d:6e:bb:a1:19:ec:8d:
                    86:af:c7:5c:eb:79:f4:92:e8:db:eb:f5:4e:b9:97:
                    c4:15:de:36:10:f2:a5:5b:65:03:e9:4e:ae:1d:d9:
                    05:8b:2f:45:02:aa:13:ac:aa:dc:87:25:f6:d9:58:
                    fd:46:09:ac:c8:2e:40:13:c7:5c:9a:19:a6:6a:e8:
                    9b:4d:0f:c9:5e:f5:da:00:d5:28:a1:1a:6f:40:e5:
                    5d:de:98:e5:98:02:b1:aa:fa:f0:85:27:4a:34:84:
                    7b:27:1c:5a:e1:81:41:36:65:0f:12:b5:05:aa:63:
                    ab:3b:e1:5b:2d:62:e6:34:ba:07:08:13:b4:e6:5c:
                    48:1f:56:10:4a:70:a7:18:d8:eb:7d:6f:74:c7:1a:
                    d1:c2:2a:c8:e0:61:a2:e7:7f:b9:be:65:76:79:ed:
                    f9:57:1a:99:57:4e:89:20:61:59:e6:3a:12:45:a1:
                    57:5f:d5:9e:ba:46:1a:cf:73:0a:e4:a3:f3:24:c5:
                    fc:f5:29:43:aa:cb:1d:23:ac:67:f6:09:54:d9:e8:
                    1f:a8:e7:f6:57:27:1e:70:ed:d2:25:fb:5c:a1:8c:
                    74:6e:9e:e4:0d:c3:cb:2f:0a:3e:4b:04:d3:f4:a3:
                    7a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0D:C7:34:66:49:D0:8B:9F:84:0B:3C:41:48:C4:CF:2A:54:7D:43
            X509v3 Authority Key Identifier:
                keyid:E0:B9:00:27:94:1B:AF:46:48:5F:40:CF:4A:8C:4E:D9:15:32:9B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eedf2a0d6e5100957ef88c9fe578a8326f0b74d1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2fe289e-d505-4f3d-850e-9212052f00fc/c2ab0b11bd55ee0b1a1d3cb64ebe111e63a7633b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b2fe289e-d505-4f3d-850e-9212052f00fc/eedf2a0d6e5100957ef88c9fe578a8326f0b74d1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:c0:cc:4a:dc:08:8f:87:3e:36:c3:2e:04:95:2b:87:57:e5:
         ce:c6:a6:d5:c8:65:fa:f5:31:7b:46:70:3f:cd:9f:4f:71:b8:
         1e:70:87:12:51:8f:34:4e:d4:b5:cb:d8:55:9e:ec:fa:99:0a:
         c3:69:22:f2:66:ee:38:c4:58:02:b8:6e:fd:48:5d:37:a4:4f:
         43:cc:23:ad:b1:dd:bd:6a:c5:35:83:62:a4:a9:67:d5:b5:26:
         32:57:be:1c:90:22:72:22:7f:f3:a9:7e:9b:0c:7c:a3:84:2a:
         fc:1f:4a:f1:1e:1f:10:b9:5f:52:ff:54:b5:f0:18:51:db:b1:
         be:db:3c:57:e4:96:45:fb:23:4c:55:9c:11:12:c6:da:07:62:
         e3:08:aa:36:38:70:c7:a7:37:0a:06:94:f6:f2:39:35:a0:f8:
         c1:fa:48:6d:38:17:48:fa:38:a0:ae:7b:dd:15:24:2f:5c:df:
         5b:f9:c2:53:22:17:3d:ab:5e:1b:1f:25:5a:fe:03:b8:9f:4e:
         3e:99:1a:60:8a:70:2b:36:f2:ca:17:12:dd:da:14:0f:f5:3e:
         b9:d3:7a:0e:ee:52:df:46:ae:e5:0f:ef:3f:f7:a9:ca:48:eb:
         37:49:21:ff:dd:35:3f:cd:d0:c2:ef:26:bc:de:02:da:d4:b7:
         43:d9:3c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 23:49:49 2024 by rpki-client on console-ams.rpki-client.org