Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313238303a3a2f34342d3434203d3e203238343033.roa
File:                     323830363a3337303a313238303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier:          zsnmBBhGMja0DPO6gIYa+0tOO+/QPr01Vo/gSWMvSoI=
Subject key identifier:   15:1D:DB:57:49:A2:61:FC:3C:04:B5:C4:ED:D5:14:24:A8:D5:FC:F9
Certificate issuer:       /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial:       6702DD122B1F4F5C4C041F67F8798407C3E8F4BF
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313238303a3a2f34342d3434203d3e203238343033.roa
Signing time:             Tue 20 May 2025 04:30:00 +0000
ROA not before:           Tue 20 May 2025 04:25:00 +0000
ROA not after:            Tue 19 May 2026 04:30:00 +0000
asID:                     28403
IP address blocks:        2806:370:1280::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:02:dd:12:2b:1f:4f:5c:4c:04:1f:67:f8:79:84:07:c3:e8:f4:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
        Validity
            Not Before: May 20 04:25:00 2025 GMT
            Not After : May 19 04:30:00 2026 GMT
        Subject: CN=151DDB5749A261FC3C04B5C4EDD51424A8D5FCF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:77:dc:95:9c:4c:07:09:b8:ba:df:8d:d2:c1:
                    3d:dd:ff:49:c8:f4:fb:9b:91:be:4f:61:54:04:77:
                    fe:e4:9b:8a:cf:4e:68:57:4a:88:2b:25:b5:f1:dd:
                    4f:c1:56:ce:22:6b:d6:50:3b:17:4b:72:2f:68:d9:
                    e1:4d:4f:ac:3b:0e:f4:7b:14:ac:32:5f:1f:f1:fa:
                    67:bc:70:b4:2a:64:33:c9:29:71:67:c5:5e:4c:ea:
                    7e:e3:49:43:e7:ab:0d:d2:03:40:69:99:14:10:b0:
                    6e:7f:51:1c:d7:80:f0:8a:bb:00:4f:13:2c:80:2e:
                    d6:4f:cc:51:b4:93:10:29:7b:1c:99:d7:f0:e8:3b:
                    84:91:48:a8:c7:ec:4f:19:ca:a0:62:28:f2:d8:e8:
                    72:2e:ff:ac:09:58:2f:e6:70:24:38:92:f2:b2:fc:
                    ee:e8:1d:7e:73:cf:2b:b1:ee:e6:88:c9:b5:b2:bb:
                    a4:87:8c:4f:bc:7a:a5:a4:d8:c5:b8:8f:7e:3a:92:
                    e0:71:ab:db:c6:1f:71:b1:eb:69:2f:0e:ad:3d:ce:
                    2a:0d:88:95:ac:38:a4:fe:b1:5d:de:34:a6:db:94:
                    02:98:71:1f:5c:99:0d:4f:7e:7e:2f:06:c2:89:f0:
                    5b:80:a8:ca:51:61:80:d2:f1:25:1e:0f:01:c3:63:
                    44:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1D:DB:57:49:A2:61:FC:3C:04:B5:C4:ED:D5:14:24:A8:D5:FC:F9
            X509v3 Authority Key Identifier:
                keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313238303a3a2f34342d3434203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:370:1280::/44

    Signature Algorithm: sha256WithRSAEncryption
         1a:fe:a8:40:c6:04:4b:19:b2:0a:c3:4e:5e:d0:95:fb:36:41:
         31:0d:52:52:2b:a9:43:c9:06:c2:bd:28:5b:ff:b5:1d:5e:87:
         8d:5c:00:70:d5:05:61:6d:2b:e7:f2:c8:b4:19:8f:d3:ab:ad:
         45:05:93:fe:c3:77:bd:cf:74:2f:33:e6:40:37:cf:2e:a8:22:
         33:6f:aa:4c:4c:36:79:5d:a5:c8:6d:8a:cc:fa:93:0e:68:8d:
         61:87:bc:47:b3:cb:da:06:03:13:75:19:f7:fb:53:f1:69:ac:
         23:9c:b4:09:dd:79:cf:96:93:dc:fb:6c:96:25:8b:1c:fc:be:
         46:67:42:11:b5:ca:48:08:a4:37:c8:2e:73:dd:9b:85:5e:28:
         82:16:93:6c:5a:8b:d3:a5:77:78:fd:20:1a:74:44:14:f7:fe:
         0f:9a:ff:0c:bd:31:3b:2f:59:36:79:52:ab:fb:29:e3:35:2f:
         8c:61:ce:ca:a0:94:a5:57:a9:10:77:00:31:c9:a0:47:4b:f9:
         3f:2a:c4:ee:93:8a:dc:3b:c6:b3:a3:06:9e:6f:57:22:53:04:
         85:47:c0:09:29:7e:0a:d8:90:87:76:d0:c7:11:6b:9b:87:74:
         16:16:c6:44:30:25:be:03:93:9f:9d:e9:dc:48:6d:b3:0f:ee:
         a9:1f:19:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 07:44:08 2025 by rpki-client