Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b461cf4c-8f23-45d8-bdd2-9de386ef416f/cd6a231cb6197f83d7ad0f16fbe803e4e5a3adf9.roa
File:                     cd6a231cb6197f83d7ad0f16fbe803e4e5a3adf9.roa (raw, json)
Hash identifier:          YBLenCnk7UjPzxm7fmB7hJ6h2yWrhyzRPpbf3D7w8a8=
Subject key identifier:   39:36:F3:A9:AD:AD:C3:D2:4B:96:8E:F2:E3:F1:11:5F:B4:24:3B:C0
Certificate issuer:       /CN=50802344b486a4c01c04470934151964e086db83
Certificate serial:       01C92A
Authority key identifier: 11:36:9C:AD:EE:D0:36:AA:AB:A5:5F:B7:E5:EA:2F:8E:2A:EE:92:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50802344b486a4c01c04470934151964e086db83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b461cf4c-8f23-45d8-bdd2-9de386ef416f/cd6a231cb6197f83d7ad0f16fbe803e4e5a3adf9.roa
Signing time:             Fri 10 Jun 2022 17:05:52 +0000
ROA not before:           Fri 10 Jun 2022 03:00:00 +0000
ROA not after:            Mon 10 Jun 2024 03:00:00 +0000
asID:                     272111
IP address blocks:        2803:f710::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117034 (0x1c92a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50802344b486a4c01c04470934151964e086db83
        Validity
            Not Before: Jun 10 03:00:00 2022 GMT
            Not After : Jun 10 03:00:00 2024 GMT
        Subject: CN=cd6a231cb6197f83d7ad0f16fbe803e4e5a3adf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3a:fa:d5:67:f0:80:5e:a0:6f:c1:9b:17:da:
                    5f:0b:dc:11:77:13:68:a1:e3:6c:5e:56:21:a2:89:
                    94:78:96:03:1d:f0:4f:9a:24:f4:f4:06:db:cf:38:
                    7d:e1:d3:2e:23:5a:c1:57:3a:29:a5:10:64:bb:78:
                    3f:a0:af:f2:97:81:ea:19:b1:7b:6c:4b:63:01:24:
                    bd:57:33:dd:af:2b:d9:91:86:d2:f0:15:47:f9:43:
                    2d:7e:da:2b:bd:91:1c:67:60:72:87:dc:eb:f3:78:
                    6e:6a:85:73:b4:92:ee:16:e3:5a:15:c4:90:44:72:
                    95:2c:9d:0d:6d:3b:0f:89:fa:9f:b6:7f:70:4c:2e:
                    a1:12:f5:0b:c7:57:79:17:bf:ae:c6:27:0a:ca:6d:
                    59:5c:8a:e5:07:5a:55:5f:b8:73:2d:5d:6b:4a:1c:
                    61:d8:7a:1a:f1:d7:6a:cb:5b:a1:58:de:3a:8e:a3:
                    84:5c:44:c9:e8:ee:55:5c:17:f9:12:67:42:3e:2d:
                    80:51:dc:c8:b2:dd:c2:0e:52:cc:fc:e4:d3:51:d6:
                    4a:05:96:20:bc:35:d4:5c:ba:a5:26:bb:86:20:2f:
                    a7:c9:2c:16:7a:08:55:88:af:c8:51:bb:63:16:a9:
                    4f:a6:45:2b:31:bb:66:fe:ef:75:0e:03:a9:13:02:
                    0a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:36:F3:A9:AD:AD:C3:D2:4B:96:8E:F2:E3:F1:11:5F:B4:24:3B:C0
            X509v3 Authority Key Identifier:
                keyid:11:36:9C:AD:EE:D0:36:AA:AB:A5:5F:B7:E5:EA:2F:8E:2A:EE:92:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50802344b486a4c01c04470934151964e086db83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b461cf4c-8f23-45d8-bdd2-9de386ef416f/cd6a231cb6197f83d7ad0f16fbe803e4e5a3adf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b461cf4c-8f23-45d8-bdd2-9de386ef416f/50802344b486a4c01c04470934151964e086db83.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f710::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:1d:0c:44:f0:ac:23:bc:47:47:1c:f2:44:66:f7:25:e5:8c:
         1d:96:eb:e3:35:85:ba:74:b7:d5:9c:e5:6e:ef:b2:02:3b:c3:
         38:c0:5d:f4:e3:cc:e9:38:c5:6b:48:09:5f:1d:98:c0:75:86:
         58:8e:4d:94:8b:a8:de:81:f6:db:b8:34:5f:b8:4c:c5:c4:33:
         06:52:ae:a8:66:02:29:e1:82:ef:59:b8:9c:cc:29:18:c4:fd:
         7e:35:cc:c3:00:e3:ab:72:22:84:60:41:da:51:f2:7b:81:48:
         66:74:9f:75:38:7a:53:1a:1a:68:13:94:e3:b8:ee:92:62:7d:
         7b:63:d0:db:11:24:24:52:62:af:b6:38:fd:9c:7d:56:9f:59:
         89:11:84:b2:79:f6:37:a9:3a:29:c5:bc:b3:5f:2d:fb:f2:d7:
         2b:e1:d9:80:cd:8c:e9:49:25:03:0f:dc:92:91:28:39:ee:2d:
         e3:09:ad:cc:a3:84:51:b3:7d:5d:f7:8d:f2:9b:19:e3:72:bc:
         29:a9:97:1f:03:fc:22:5f:00:cc:45:17:04:7c:0d:40:d6:0d:
         8c:ae:3c:dd:46:97:46:13:3a:ca:3f:84:4a:c6:ae:6d:fb:54:
         8a:ea:fd:a1:f2:33:53:5c:6c:a0:0c:4c:b4:07:96:97:b1:04:
         b7:95:ec:1d
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDAckqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUw
ODAyMzQ0YjQ4NmE0YzAxYzA0NDcwOTM0MTUxOTY0ZTA4NmRiODMwHhcNMjIwNjEw
MDMwMDAwWhcNMjQwNjEwMDMwMDAwWjAzMTEwLwYDVQQDEyhjZDZhMjMxY2I2MTk3
ZjgzZDdhZDBmMTZmYmU4MDNlNGU1YTNhZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiTr61WfwgF6gb8GbF9pfC9wRdxNooeNsXlYhoomUeJYDHfBP
miT09Abbzzh94dMuI1rBVzoppRBku3g/oK/yl4HqGbF7bEtjASS9VzPdryvZkYbS
8BVH+UMtftorvZEcZ2Byh9zr83huaoVztJLuFuNaFcSQRHKVLJ0NbTsPifqftn9w
TC6hEvULx1d5F7+uxicKym1ZXIrlB1pVX7hzLV1rShxh2Hoa8ddqy1uhWN46jqOE
XETJ6O5VXBf5EmdCPi2AUdzIst3CDlLM/OTTUdZKBZYgvDXUXLqlJruGIC+nySwW
eghViK/IUbtjFqlPpkUrMbtm/u91DgOpEwIKnwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFDk286mtrcPSS5aO8uPxEV+0JDvAMB8GA1UdIwQYMBaAFBE2nK3u0Daqq6Vf
t+XqL44q7pLYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTA4MDIz
NDRiNDg2YTRjMDFjMDQ0NzA5MzQxNTE5NjRlMDg2ZGI4My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjQ2MWNmNGMtOGYyMy00NWQ4LWJkZDItOWRlMzg2
ZWY0MTZmL2NkNmEyMzFjYjYxOTdmODNkN2FkMGYxNmZiZTgwM2U0ZTVhM2FkZjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNDYxY2Y0Yy04ZjIzLTQ1ZDgtYmRkMi05ZGUz
ODZlZjQxNmYvNTA4MDIzNDRiNDg2YTRjMDFjMDQ0NzA5MzQxNTE5NjRlMDg2ZGI4
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgD9xAwDQYJKoZIhvcNAQELBQADggEBAGAdDETwrCO8R0cc
8kRm9yXljB2W6+M1hbp0t9Wc5W7vsgI7wzjAXfTjzOk4xWtICV8dmMB1hliOTZSL
qN6B9tu4NF+4TMXEMwZSrqhmAinhgu9ZuJzMKRjE/X41zMMA46tyIoRgQdpR8nuB
SGZ0n3U4elMaGmgTlOO47pJifXtj0NsRJCRSYq+2OP2cfVafWYkRhLJ59jepOinF
vLNfLfvy1yvh2YDNjOlJJQMP3JKRKDnuLeMJrcyjhFGzfV33jfKbGeNyvCmplx8D
/CJfAMxFFwR8DUDWDYyuPN1Gl0YTOso/hErGrm37VIrq/aHyM1NcbKAMTLQHlpex
BLeV7B0=
-----END CERTIFICATE-----
Generated at Fri Aug 11 15:40:53 2023 by rpki-client on console-ams.rpki-client.org