Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/d33d75a6e3bcd6f83b368e2cb9d354b7ab2632c3.roa
File:                     d33d75a6e3bcd6f83b368e2cb9d354b7ab2632c3.roa (raw, json)
Hash identifier:          lvTcGPEMd0kURhKw1XX1bsddzk0At+95H7tAv/IRg+s=
Subject key identifier:   7F:C4:C1:C7:E9:AB:F3:C2:BB:20:42:50:6E:F4:61:89:EF:3A:6E:F9
Certificate issuer:       /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial:       1AB375
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/d33d75a6e3bcd6f83b368e2cb9d354b7ab2632c3.roa
Signing time:             Mon 03 Oct 2022 19:36:35 +0000
ROA not before:           Mon 03 Oct 2022 19:32:55 +0000
ROA not after:            Thu 03 Oct 2024 20:32:55 +0000
asID:                     6306
IP address blocks:        2800:6b0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1749877 (0x1ab375)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
        Validity
            Not Before: Oct  3 19:32:55 2022 GMT
            Not After : Oct  3 20:32:55 2024 GMT
        Subject: CN=d33d75a6e3bcd6f83b368e2cb9d354b7ab2632c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:45:be:87:31:f2:b4:9b:32:e5:77:7f:a4:eb:
                    21:b6:4d:11:fa:64:ff:49:0e:4f:27:ac:ad:35:84:
                    3c:66:3f:0a:83:40:25:fa:18:ee:13:54:30:93:0b:
                    db:eb:e4:e0:35:70:bd:70:1a:1b:62:9c:c4:9e:9f:
                    1b:2d:d1:d0:ad:e3:fa:71:e2:0e:00:4e:91:d4:a9:
                    3d:7d:bb:91:bf:20:49:c1:c2:3e:40:f9:dc:89:b1:
                    c0:10:09:f6:bb:5c:5e:58:34:e7:96:28:84:16:eb:
                    9c:61:13:5d:dc:e9:5a:e8:a2:f2:e2:06:87:79:0d:
                    67:22:74:3d:23:6e:0f:c0:4a:b7:9e:64:ca:df:84:
                    b7:39:f3:4b:06:f6:c8:27:f2:b4:da:1c:d4:d1:d6:
                    3c:3f:2c:97:aa:69:02:4c:b7:15:4d:95:da:1d:c8:
                    a8:74:95:de:ca:d6:88:d3:f0:eb:cd:d2:a4:9b:17:
                    60:44:a9:46:df:04:3d:36:99:d2:56:dd:86:0f:86:
                    45:92:ca:4a:2f:c5:cb:6f:a1:27:80:77:00:10:e4:
                    08:5d:0b:e3:21:a3:a0:5d:16:70:d8:57:6d:46:f6:
                    8a:7b:72:f5:a9:b5:1a:6c:47:99:4e:07:8f:79:bd:
                    2f:f1:cf:9c:38:c6:0d:52:f9:b9:1a:29:2e:c6:11:
                    41:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C4:C1:C7:E9:AB:F3:C2:BB:20:42:50:6E:F4:61:89:EF:3A:6E:F9
            X509v3 Authority Key Identifier:
                keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/d33d75a6e3bcd6f83b368e2cb9d354b7ab2632c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:6b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:9c:52:82:db:e7:ff:71:1e:5b:9e:f9:f1:7d:a0:d2:13:17:
         9f:78:47:e5:88:ab:30:33:90:c5:67:27:f1:1a:49:25:1d:c8:
         20:9f:74:38:d8:7b:a8:db:e3:1c:dd:c6:2d:e4:69:73:02:21:
         41:91:a5:66:9d:7b:64:16:0e:93:eb:a5:04:40:d8:33:39:a1:
         f3:bc:31:af:49:17:de:e0:82:72:04:83:8e:d3:b4:0c:79:1f:
         83:ef:29:4e:68:d5:25:75:4a:88:a2:d7:d4:1c:72:d8:96:dd:
         d7:a5:61:d5:0c:41:32:35:79:fb:8e:56:37:b1:13:97:5c:27:
         b9:b5:4a:ff:0e:6f:4b:21:0a:81:39:96:f2:8d:9d:5c:95:b7:
         8e:a7:6b:1a:d4:57:82:db:c0:10:ea:e1:0c:ef:0e:63:94:d7:
         e2:41:fe:90:63:e5:e9:f3:cc:8f:ba:c7:36:ce:fb:45:be:2e:
         49:29:d1:ee:53:30:5f:29:8e:c7:20:67:13:6e:41:20:e1:1b:
         2b:59:03:9b:e0:5f:13:0c:e2:69:4e:04:2a:1c:40:22:6a:3d:
         b4:dd:23:6d:7d:5d:64:80:13:4d:56:44:4b:3f:ad:09:6f:2f:
         50:db:d5:51:2c:2f:43:b9:9d:5d:54:53:a2:bd:b9:d3:38:10:
         89:de:21:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 20:51:40 2023 by rpki-client on console-ams.rpki-client.org