Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313062303a3a2f34342d3434203d3e203238343033.roa
File:                     323830363a3337303a313062303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier:          LTbZDDsirvjkwi8ZfI22y67olxla5+4cElnhftVkKCE=
Subject key identifier:   E9:60:4E:C1:55:62:1D:EA:AE:04:21:13:86:F9:4D:EB:AA:B5:31:72
Certificate issuer:       /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial:       44649C360F733D013862DFF2C99A47F7B62FEA83
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313062303a3a2f34342d3434203d3e203238343033.roa
Signing time:             Tue 20 May 2025 04:25:00 +0000
ROA not before:           Tue 20 May 2025 04:20:00 +0000
ROA not after:            Tue 19 May 2026 04:25:00 +0000
asID:                     28403
IP address blocks:        2806:370:10b0::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:64:9c:36:0f:73:3d:01:38:62:df:f2:c9:9a:47:f7:b6:2f:ea:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
        Validity
            Not Before: May 20 04:20:00 2025 GMT
            Not After : May 19 04:25:00 2026 GMT
        Subject: CN=E9604EC155621DEAAE04211386F94DEBAAB53172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e1:4d:1e:8e:cd:ff:89:69:b1:5c:1a:03:3e:
                    c0:89:c8:d4:c7:d7:19:56:3e:8a:f0:92:ad:1b:7f:
                    a7:66:e0:6a:fa:40:c9:5d:31:91:cc:db:92:35:05:
                    cc:0d:dd:db:c3:0e:96:8e:2b:f6:02:79:88:9b:74:
                    1d:0c:50:d5:50:1f:ee:6c:9d:85:6b:b1:30:ea:d8:
                    f5:89:b6:54:75:fa:28:08:db:99:50:f3:6e:41:1b:
                    99:4c:74:4f:79:08:ed:46:47:50:81:3a:d3:c6:04:
                    8c:41:1c:66:10:30:27:78:ab:42:1b:d9:b7:50:cd:
                    b3:cd:68:e4:56:e7:84:a2:72:97:89:6e:40:ae:ca:
                    8c:15:7a:b7:56:44:75:39:36:d7:f5:6f:c1:35:39:
                    fa:fb:89:a4:87:fe:16:e2:3f:07:2a:cc:27:c9:6d:
                    4a:fe:b1:b4:b9:b6:02:b6:68:45:01:44:df:d3:84:
                    b7:a2:42:b3:51:62:80:cc:e4:05:3f:01:be:d0:d7:
                    16:9a:7d:6d:6e:24:e9:69:c1:4b:a7:f5:4b:52:e8:
                    ef:cc:4f:de:bd:9a:f0:b0:81:d7:61:87:ec:6b:41:
                    b8:2f:a8:43:b4:5d:cb:d6:68:b1:a2:b6:5b:2e:75:
                    0f:a6:e1:26:e5:65:14:63:7f:61:7c:a9:43:5e:11:
                    3e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:60:4E:C1:55:62:1D:EA:AE:04:21:13:86:F9:4D:EB:AA:B5:31:72
            X509v3 Authority Key Identifier:
                keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313062303a3a2f34342d3434203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:370:10b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         15:62:17:83:d0:40:5b:7a:76:d1:d4:19:65:8c:eb:a9:4c:cd:
         81:64:54:59:cf:6d:33:e1:b9:ab:cc:34:65:96:0a:0f:f6:e1:
         1b:b8:c9:09:3b:bc:12:02:b7:7c:20:f5:16:80:d3:43:01:97:
         a2:d2:e1:68:cc:f1:02:55:2c:49:22:7a:14:5d:52:0f:ab:d3:
         11:8c:ee:ad:b6:56:6c:ba:08:26:a9:31:c4:30:12:79:9c:37:
         6b:c2:8c:39:1e:d0:42:25:a4:00:fc:82:75:27:a8:ea:d2:50:
         ce:7f:c2:9a:90:5f:8d:66:8a:fa:c6:8a:11:27:38:82:fb:2c:
         e9:2f:7a:54:52:38:ea:60:df:b4:bc:f5:33:41:de:3f:1a:98:
         5b:c7:21:70:0c:7a:ee:33:02:50:70:fa:c4:8d:92:4a:4e:b3:
         c6:95:b9:e5:ef:b1:ef:1c:64:b1:72:87:af:08:5e:e0:2f:c4:
         6d:65:7b:d9:e8:24:b5:05:55:2e:36:91:9c:dc:f9:38:28:f1:
         a3:38:ef:4d:67:0a:43:73:94:e7:99:53:c7:5c:8a:30:eb:1c:
         69:4e:49:d6:44:c9:d5:e6:8d:d0:af:c1:d0:75:a0:69:49:68:
         61:a4:f8:19:b9:0e:34:05:70:f9:7a:5b:b2:3f:1a:8a:04:a3:
         e7:e5:69:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:12:27 2025 by rpki-client