Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a313030303a3a2f33362d3336203d3e2036343239.roa
File:                     323830303a3362303a313030303a3a2f33362d3336203d3e2036343239.roa (raw, json)
Hash identifier:          YYWnShrERXwn71DblJOR4zQRAaruU+McKUjp3Zt/FBo=
Subject key identifier:   94:88:4D:FB:AF:35:AB:46:AF:5F:D5:4B:F5:BC:6B:06:7F:CE:2E:C2
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       196968C03C0965FC968749EB5A0D92F4FE505BC5
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a313030303a3a2f33362d3336203d3e2036343239.roa
Signing time:             Wed 19 Mar 2025 04:15:00 +0000
ROA not before:           Wed 19 Mar 2025 04:10:00 +0000
ROA not after:            Wed 18 Mar 2026 04:15:00 +0000
asID:                     6429
IP address blocks:        2800:3b0:1000::/36 maxlen: 36
Validation:               Failed, certificate revoked on Wed 19 Mar 2025 06:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:69:68:c0:3c:09:65:fc:96:87:49:eb:5a:0d:92:f4:fe:50:5b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Mar 19 04:10:00 2025 GMT
            Not After : Mar 18 04:15:00 2026 GMT
        Subject: CN=94884DFBAF35AB46AF5FD54BF5BC6B067FCE2EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:53:6e:a6:a4:b7:26:5d:c4:a3:fa:00:51:f1:
                    36:c3:f9:d8:e5:c8:ba:8c:e0:1a:89:af:e9:2c:2e:
                    51:9a:d0:72:7e:64:55:1d:f2:5f:57:3e:14:7e:3d:
                    ce:94:c5:0f:bd:ad:e7:48:b8:fe:8e:35:00:1f:9b:
                    5c:92:f2:90:66:ad:37:38:db:13:a6:be:7d:37:ec:
                    16:c9:f4:a5:16:d3:09:b3:9c:01:83:ec:d3:b9:5d:
                    37:93:63:d3:7c:fa:a6:82:93:c0:a7:8c:ab:9a:e2:
                    b8:89:60:f9:7c:eb:fa:7c:52:c6:74:b8:5c:4e:4d:
                    2f:41:5f:2b:43:f9:22:93:ca:65:c2:50:b8:e3:77:
                    ac:2a:94:58:6e:39:77:ac:16:b3:17:fa:21:ed:bf:
                    b5:2c:bf:cf:6c:24:30:ab:46:e4:81:80:47:7b:78:
                    51:71:35:c0:4d:54:75:71:b6:66:93:33:cd:ec:6c:
                    20:bb:ee:ed:1b:c9:d9:79:97:c0:3b:1b:15:f2:55:
                    78:a5:de:a8:cf:00:8a:ff:ad:d6:aa:e2:5c:0a:43:
                    f5:26:31:3c:6e:af:3c:c9:fc:f8:0e:d7:b4:f1:cf:
                    b4:54:de:08:00:b1:44:b4:6e:72:f0:22:6a:fe:b0:
                    a6:7c:d6:7e:09:d1:4f:4d:cb:9f:54:6d:1b:c2:28:
                    96:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:88:4D:FB:AF:35:AB:46:AF:5F:D5:4B:F5:BC:6B:06:7F:CE:2E:C2
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a313030303a3a2f33362d3336203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3b0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         42:13:a3:3a:44:ef:11:b6:6f:55:76:94:5e:90:ac:b3:f9:fc:
         9d:cb:5c:81:e1:26:f0:6f:e9:e3:a1:b9:3b:0a:85:2d:ce:1f:
         df:2a:8c:e2:c1:44:1e:83:b6:ee:09:07:c7:57:3d:45:ab:e6:
         95:4c:a2:67:61:77:17:dd:c7:ce:10:c3:3b:f3:83:63:eb:3b:
         9b:8d:3c:7b:ee:39:e1:52:59:8c:28:26:9a:8d:01:34:a8:7b:
         3f:a6:67:c5:43:cc:ba:12:61:00:86:12:50:0a:44:96:52:4a:
         7e:c3:5e:d9:5c:a0:e3:61:01:52:b6:8a:bd:ec:1a:1a:e6:0f:
         8a:a8:db:76:a4:10:57:96:a6:e7:91:de:72:ae:75:12:6b:0e:
         a7:80:48:4d:2a:2d:27:a6:ce:44:2c:60:5a:35:61:17:79:97:
         9d:a8:af:74:c9:82:93:ef:4c:00:7a:6c:53:5f:92:18:1f:39:
         0c:42:d6:4b:07:a1:fa:94:29:bc:bb:79:a3:f4:98:c2:3d:67:
         75:da:88:f8:ec:4b:fd:00:f0:7b:dc:57:78:3c:cb:86:e6:fa:
         39:78:2d:07:53:fe:2a:f8:af:f3:ae:c9:1e:47:45:18:d7:b6:
         bd:57:7d:00:86:67:15:43:76:6d:2b:63:db:1a:4b:52:e3:92:
         a7:6b:4f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:35:41 2025 by rpki-client