Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/de871184e9b858147fbffc74603ab23a77d81992.roa
File:                     de871184e9b858147fbffc74603ab23a77d81992.roa (raw, json)
Hash identifier:          IGsev21vGOS5b6noSlkfdNcL/01DGbb663kGxl92XyU=
Subject key identifier:   53:05:AF:6C:A5:F7:A0:2E:91:38:18:25:FD:B0:45:92:3F:00:E0:33
Certificate issuer:       /CN=0a6ca410e9d4d6609a966809763133d36a922b82
Certificate serial:       12EF1A
Authority key identifier: 61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a6ca410e9d4d6609a966809763133d36a922b82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/de871184e9b858147fbffc74603ab23a77d81992.roa
Signing time:             Mon 25 Oct 2021 20:43:15 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     270009
IP address blocks:        2803:8420::/40 maxlen: 48

Validation:               Failed, certificate revoked on Tue 09 Apr 2024 16:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1240858 (0x12ef1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a6ca410e9d4d6609a966809763133d36a922b82
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=de871184e9b858147fbffc74603ab23a77d81992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:27:83:36:f8:c1:86:57:82:92:3c:2c:79:9b:
                    55:84:3d:0e:85:07:db:33:45:ee:87:14:d4:03:c0:
                    34:50:eb:ba:eb:ce:a3:b2:13:c6:f2:ef:b8:3e:a6:
                    2e:7c:77:a1:b3:16:d6:63:e6:57:f8:b8:81:df:2e:
                    48:4f:11:df:41:7f:c1:f6:35:65:f3:ec:2d:4b:99:
                    4f:91:6d:37:af:3b:cb:5d:ab:f4:a1:0b:43:98:65:
                    1b:07:1a:a8:a7:93:e6:28:d4:69:fa:3b:3c:9f:76:
                    fd:c4:89:8b:10:f3:3f:f8:1c:a9:35:e9:57:11:c1:
                    16:f1:a8:b2:91:d2:a8:7b:14:ca:d0:01:2d:56:a2:
                    5b:16:b0:cc:3e:7d:61:d6:81:cc:89:e0:60:1f:0c:
                    92:3c:fa:19:68:a4:f8:c7:98:a6:b6:39:69:00:cc:
                    ae:d4:6c:7b:01:76:11:d7:0c:38:59:85:7e:ec:0b:
                    b1:79:16:93:54:a2:bf:70:3c:b2:56:f2:6f:48:05:
                    0a:42:77:9a:d7:ae:77:09:2b:eb:66:4b:6f:31:12:
                    fa:de:21:f2:7a:ab:ca:25:f1:26:14:4e:96:a0:3d:
                    bb:5a:a2:99:84:5d:ca:30:c3:6e:9c:7b:8a:9f:d7:
                    da:4e:5a:5d:94:01:72:09:a1:7b:49:a6:27:16:c3:
                    12:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:05:AF:6C:A5:F7:A0:2E:91:38:18:25:FD:B0:45:92:3F:00:E0:33
            X509v3 Authority Key Identifier:
                keyid:61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a6ca410e9d4d6609a966809763133d36a922b82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/de871184e9b858147fbffc74603ab23a77d81992.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/0a6ca410e9d4d6609a966809763133d36a922b82.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8420::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:b5:99:e7:c5:65:a5:c2:9e:d1:8a:9e:ee:d1:1b:35:85:1e:
         91:fa:61:cd:c9:ec:73:58:19:0d:26:43:0b:56:c1:7e:97:60:
         76:34:de:ad:93:06:d4:0e:9d:79:ea:a6:0c:5c:d9:54:64:df:
         42:aa:e2:3a:5c:2e:e0:fc:2c:ac:1b:f6:5f:7e:e2:cb:b8:9a:
         9a:fc:27:d5:d0:2b:27:c8:6b:f5:71:68:a2:01:e6:29:16:13:
         77:bb:33:61:d5:4a:62:67:34:4c:7e:cd:17:9e:cc:9d:bc:f8:
         7e:70:38:57:46:56:d3:96:14:e8:1b:9f:d0:52:f2:f6:2b:b5:
         c9:3f:34:8e:db:ba:3c:3d:78:b2:3e:7d:39:a1:45:0c:e2:0a:
         15:b0:39:82:f3:bf:93:5c:75:ca:1b:45:bc:b7:c2:79:2c:7a:
         b7:7f:e4:21:38:53:ac:ae:7e:75:e7:ef:d7:12:75:bb:5d:9e:
         e3:e4:66:84:59:4c:fa:17:17:49:cb:7d:5c:c6:f5:ab:24:b1:
         83:0b:b4:93:d2:98:e8:db:60:47:75:58:03:c7:4f:54:62:8d:
         2a:97:a9:3e:ae:52:4f:13:b2:1f:fa:b3:df:3f:69:87:62:20:
         25:5a:35:d6:fe:9e:70:af:c4:0b:31:84:b0:b9:13:1d:eb:e7:
         7b:a2:ec:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----