Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/cae8f9ab53e11910830704f087d1b63bda2b426e.roa
File:                     cae8f9ab53e11910830704f087d1b63bda2b426e.roa (raw, json)
Hash identifier:          /HwCGOIT3x907S4UH7fHq6Va+NMUXVgOrZ/1srac3rY=
Subject key identifier:   1E:E8:5F:1D:EC:D0:11:FE:80:FF:15:15:0A:8A:C9:E8:6E:D6:9E:D9
Certificate issuer:       /CN=285c4851f123355e1dfc7c41d72c849598bfbf31
Certificate serial:       17050B
Authority key identifier: FA:6B:CD:9E:98:AC:70:13:19:5F:EA:8D:58:F0:86:83:7D:57:5D:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/285c4851f123355e1dfc7c41d72c849598bfbf31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/cae8f9ab53e11910830704f087d1b63bda2b426e.roa
Signing time:             Thu 26 May 2022 21:14:23 +0000
ROA not before:           Thu 26 May 2022 03:00:00 +0000
ROA not after:            Sun 26 May 2024 03:00:00 +0000
asID:                     267790
IP address blocks:        2803:6fa0::/48 maxlen: 48
                          2803:6fa0:2::/48 maxlen: 48
                          2803:6fa0:6::/48 maxlen: 48
                          2803:6fa0:100::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 17:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1508619 (0x17050b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285c4851f123355e1dfc7c41d72c849598bfbf31
        Validity
            Not Before: May 26 03:00:00 2022 GMT
            Not After : May 26 03:00:00 2024 GMT
        Subject: CN=cae8f9ab53e11910830704f087d1b63bda2b426e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ec:d7:36:6c:b5:6f:07:4a:05:f5:94:59:52:
                    3f:64:83:ed:42:1a:26:6d:e8:5f:5d:43:f3:19:aa:
                    29:77:af:58:6e:c4:e7:8e:27:f4:3e:a6:db:fb:09:
                    2b:d9:fa:48:4d:36:79:9d:4f:0d:21:e5:0b:60:86:
                    d3:e9:69:f1:06:5c:e9:de:b6:f3:89:2e:cd:e8:d1:
                    ac:f7:9c:15:2d:9a:9a:14:51:6a:74:f5:e8:7c:72:
                    f1:cb:c5:7d:ef:23:e0:4b:17:bb:be:ea:df:c5:6e:
                    fb:bf:56:8e:f7:37:42:95:3c:78:f3:31:81:d2:ab:
                    8d:f2:1f:82:a2:78:86:8a:46:b8:e1:bc:3c:1c:ae:
                    6e:0c:21:71:b0:d7:03:a6:ae:43:cd:5d:c6:91:ec:
                    2b:9c:9d:9d:a4:5e:f2:65:9e:5d:6e:36:9a:70:b1:
                    01:92:6d:8c:29:48:39:56:b0:56:a1:ee:f1:b0:aa:
                    1d:f6:33:d3:24:e1:8b:db:17:f7:90:ce:42:1e:2e:
                    81:d4:38:82:e8:a5:31:38:6c:09:fe:42:55:8e:4d:
                    35:e3:7d:4e:08:20:6d:dd:c7:7c:c7:ea:7e:ff:7b:
                    66:5d:4d:8f:f6:a7:fe:42:dd:59:a5:1a:4a:94:eb:
                    f9:d1:e2:83:8b:a3:7b:da:98:f4:0b:a3:99:0f:d5:
                    e9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E8:5F:1D:EC:D0:11:FE:80:FF:15:15:0A:8A:C9:E8:6E:D6:9E:D9
            X509v3 Authority Key Identifier:
                keyid:FA:6B:CD:9E:98:AC:70:13:19:5F:EA:8D:58:F0:86:83:7D:57:5D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/285c4851f123355e1dfc7c41d72c849598bfbf31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/cae8f9ab53e11910830704f087d1b63bda2b426e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed512c13-0d14-4486-8622-54eddaad4218/285c4851f123355e1dfc7c41d72c849598bfbf31.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6fa0::/48
                  2803:6fa0:2::/48
                  2803:6fa0:6::/48
                  2803:6fa0:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:fc:d7:7a:69:c1:d0:da:54:07:db:88:91:29:a4:1e:a3:a1:
         0b:2b:0f:9e:cc:96:9d:68:99:bf:3b:41:d1:57:04:30:65:b2:
         00:17:da:fc:00:c3:ee:5e:f2:17:42:3b:0c:7b:fc:a5:ef:76:
         2f:b1:dd:4f:fe:21:e0:f9:d0:47:d2:81:02:7c:ee:c8:a7:42:
         29:8c:fd:7d:e2:b6:58:a8:d0:84:78:2e:94:3a:36:a6:2e:5d:
         03:72:9a:9b:69:02:81:00:4d:ee:3b:d5:e6:73:59:f1:85:ea:
         04:ee:28:8c:18:00:d6:de:48:fd:a8:a3:f1:68:1d:21:79:16:
         71:84:ad:60:51:cc:9e:4e:85:f8:eb:5c:b8:76:b7:79:39:8d:
         37:cd:65:72:f6:d4:38:42:d5:b1:ea:01:ba:84:d4:82:c5:1a:
         e0:e5:1a:a1:42:42:d0:86:79:36:1a:4e:de:fb:29:0d:1d:e0:
         33:80:4d:0f:7e:70:95:24:30:0e:c6:da:1a:17:0b:86:30:93:
         ea:bd:a4:40:69:74:00:b9:a3:fe:e9:a3:f3:41:0b:59:f5:7f:
         69:9e:b5:d7:01:e6:03:21:aa:85:5a:8f:f8:a2:2b:3d:60:63:
         2e:32:ec:06:ca:4c:7f:fe:22:29:29:fe:a5:a9:fa:c3:e2:a1:
         5a:bc:ba:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 20:35:41 2024 by rpki-client on console-fra.rpki-client.org