Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/f631244f5c24441a74916c8970bf3e40e6c839ec.roa
File:                     f631244f5c24441a74916c8970bf3e40e6c839ec.roa (raw, json)
Hash identifier:          RrvCkEvjEnOrvSOjKXpffdH2oEoM4kLn+tCxJoRe2os=
Subject key identifier:   75:63:40:76:D6:17:1D:B2:FE:78:15:35:BE:8E:52:2C:CD:35:C9:A4
Certificate issuer:       /CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
Certificate serial:       04614B
Authority key identifier: E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/f631244f5c24441a74916c8970bf3e40e6c839ec.roa
Signing time:             Sun 29 Jan 2023 14:10:09 +0000
ROA not before:           Tue 02 Aug 2022 22:52:21 +0000
ROA not after:            Sun 04 Aug 2024 22:52:21 +0000
asID:                     272812
IP address blocks:        2803:f890::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287051 (0x4614b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c448bed8874701c9e691585bf2686e0b7a5e36e
        Validity
            Not Before: Aug  2 22:52:21 2022 GMT
            Not After : Aug  4 22:52:21 2024 GMT
        Subject: CN=f631244f5c24441a74916c8970bf3e40e6c839ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:74:72:f0:1c:f6:53:53:a2:1a:b8:77:37:d3:
                    34:1c:f0:f5:58:50:fc:f5:5b:16:5f:0a:3d:22:a6:
                    d9:f5:8f:39:94:30:89:e6:0e:f2:43:88:1b:ad:25:
                    8d:f3:4e:80:66:4c:c3:ae:e3:8b:0d:7d:25:25:68:
                    8f:20:09:bf:a3:e6:42:c9:a8:4a:c6:85:5f:2f:28:
                    ba:a1:3f:47:75:f8:63:6c:9b:d3:b9:41:db:c7:75:
                    85:27:09:14:39:19:82:7b:02:00:3f:ae:92:d9:79:
                    42:ab:bc:1d:6b:4c:a0:c6:13:a8:9d:a2:18:54:c5:
                    79:f3:cb:3f:19:c6:ce:9a:f9:52:25:1b:cf:e1:30:
                    0b:4d:43:8f:c3:72:8a:8b:a0:b8:b0:32:ec:0c:3c:
                    8b:86:81:f3:9d:ab:96:50:7a:fb:b1:09:81:2a:2c:
                    3e:d6:47:e2:e2:43:f1:5d:90:3e:b0:c6:e8:b9:d7:
                    06:ee:0d:33:c9:78:97:59:ab:5d:b7:cc:a4:85:57:
                    91:07:f8:3f:5d:e8:4f:c7:51:68:8c:64:50:87:0a:
                    31:a6:7f:d0:ac:86:b4:48:82:96:bb:de:b6:c7:3a:
                    3b:ff:3a:ef:7d:8d:aa:4c:fa:8a:c3:32:b4:12:c1:
                    45:22:a1:84:11:31:fb:6c:45:a3:11:3d:59:26:c6:
                    56:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:63:40:76:D6:17:1D:B2:FE:78:15:35:BE:8E:52:2C:CD:35:C9:A4
            X509v3 Authority Key Identifier:
                keyid:E9:96:69:D1:16:3E:65:7F:6D:C1:BC:F5:E5:89:67:F3:59:51:C0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c448bed8874701c9e691585bf2686e0b7a5e36e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/f631244f5c24441a74916c8970bf3e40e6c839ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5ecbe7d-487e-4d84-ace8-5ddafbf541f2/5c448bed8874701c9e691585bf2686e0b7a5e36e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f890::/36

    Signature Algorithm: sha256WithRSAEncryption
         b7:f2:8a:ca:86:76:65:b8:a4:da:6d:72:7e:b4:7f:be:b0:98:
         03:ea:00:9e:d5:62:d2:43:29:97:29:c7:ce:67:d3:d6:af:e7:
         04:10:2f:39:40:6f:6d:2c:1e:b3:44:a7:d9:cc:92:7c:c8:4c:
         b5:b4:21:21:79:5a:80:a5:0c:66:f6:89:2c:79:5a:9c:e3:85:
         f7:89:83:e6:8b:61:0b:99:6a:f1:48:5c:40:a3:74:d3:4e:ee:
         96:ef:30:3f:4a:ce:bc:29:b0:f7:b3:71:8d:3e:aa:be:0a:6a:
         e6:f3:48:ca:3c:4b:a6:59:71:9f:22:9d:44:29:ab:a9:8a:80:
         bd:9f:bc:67:9d:e5:bc:29:ef:00:5b:7f:04:84:23:f5:5f:bb:
         fc:f4:4a:0c:90:00:bf:32:ef:d2:cf:f0:e5:5b:94:08:64:89:
         0e:21:09:4d:db:af:47:50:20:b2:bc:0d:ab:29:65:a6:8d:76:
         0e:6a:48:16:ce:89:98:0c:17:3f:61:93:7c:d1:69:49:13:85:
         11:8b:e7:ef:c1:ce:aa:af:37:7d:91:35:7e:d2:3d:88:c0:7c:
         47:10:f5:19:7b:74:17:94:fa:5c:de:5d:53:9e:2c:76:a8:cd:
         f5:4e:ed:a0:3d:20:32:ac:98:d8:ca:21:df:bf:b0:5e:a8:49:
         a4:a8:18:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org