Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313261303a3a2f34342d3434203d3e203238343033.roa
File:                     323830363a3337303a313261303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier:          eLzEN3mcm9tcRizU+aX70FWGPsFtrQYsZR2Qg7m/P58=
Subject key identifier:   DF:E7:7D:00:52:2B:25:DD:17:A2:41:12:A9:CE:C9:57:2C:24:71:C5
Certificate issuer:       /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial:       71BECBE330C7D089C476FF515547B300375ED9D2
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313261303a3a2f34342d3434203d3e203238343033.roa
Signing time:             Thu 22 May 2025 04:05:00 +0000
ROA not before:           Thu 22 May 2025 04:00:00 +0000
ROA not after:            Thu 21 May 2026 04:05:00 +0000
asID:                     28403
IP address blocks:        2806:370:12a0::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:be:cb:e3:30:c7:d0:89:c4:76:ff:51:55:47:b3:00:37:5e:d9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
        Validity
            Not Before: May 22 04:00:00 2025 GMT
            Not After : May 21 04:05:00 2026 GMT
        Subject: CN=DFE77D00522B25DD17A24112A9CEC9572C2471C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:0b:08:4d:1c:18:dd:0d:da:ba:e1:1a:71:
                    c5:e8:23:52:8b:43:fd:2c:ef:81:ca:57:bb:bf:8a:
                    e9:5a:b2:2b:0c:cb:f8:ea:98:01:aa:f3:58:f8:d8:
                    eb:1d:d6:9c:55:e8:e5:13:e8:3e:f3:7b:e6:15:8d:
                    50:a6:a1:ec:d3:d4:75:00:49:10:58:2e:3a:9e:60:
                    f8:aa:a3:82:ce:9d:75:e8:8f:cb:a0:98:68:d3:1c:
                    4e:4c:52:0b:8b:15:b8:f9:b5:bf:80:60:25:ed:d7:
                    ec:57:11:14:4f:75:39:2a:67:cf:27:ad:57:1d:e9:
                    d0:77:66:b6:8f:6f:f9:c2:d8:dc:16:fc:74:5b:b9:
                    90:61:b7:ac:31:be:46:9a:a7:0c:d3:51:3b:28:9f:
                    dc:0c:67:51:19:3b:e5:27:d1:92:52:88:02:9b:87:
                    f5:e6:4e:7d:6f:23:68:54:cb:b4:cd:01:aa:ce:fd:
                    03:ac:99:a8:85:87:50:31:c1:79:e1:f0:f0:7b:07:
                    fb:be:95:7d:33:ae:98:83:b8:10:a2:0a:6c:30:26:
                    a6:fb:56:b0:42:de:12:7d:ce:ed:4a:eb:42:c7:ce:
                    0a:f5:a5:07:0c:01:74:b3:60:2a:c8:7f:2b:f4:02:
                    e6:67:b5:12:b0:37:c7:1c:e4:f1:d5:14:ce:37:8a:
                    da:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E7:7D:00:52:2B:25:DD:17:A2:41:12:A9:CE:C9:57:2C:24:71:C5
            X509v3 Authority Key Identifier:
                keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313261303a3a2f34342d3434203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:370:12a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         14:87:94:f7:be:f2:29:4c:07:f4:81:a5:b6:82:f3:1a:34:fa:
         a9:ee:9f:13:b2:9f:a4:d6:ac:45:fc:bc:82:81:a6:8d:1c:49:
         72:a9:76:64:ea:bb:bc:48:4e:c4:4d:27:b9:87:39:be:bd:09:
         01:2b:11:5b:6b:be:39:40:7c:d3:d7:f8:e2:96:36:ed:77:2a:
         20:94:5b:b4:ec:7d:c3:9a:f3:bb:22:b3:61:1d:08:b9:70:18:
         f6:5b:e5:b2:80:8d:80:e2:66:5e:5c:8e:ad:b2:fa:ec:01:3d:
         da:67:53:24:a2:80:2d:34:c0:3a:4f:60:94:01:78:eb:33:b7:
         f3:5a:ea:0d:dc:3f:de:e9:be:4d:7d:c3:a2:ec:de:64:da:ca:
         e5:b9:a4:16:61:e2:9c:7b:22:f3:7f:40:92:ae:28:0c:77:0f:
         8f:82:9b:3b:51:ce:4f:8c:27:c5:49:40:bc:ea:5f:01:d0:aa:
         cf:e3:5f:99:71:53:da:c6:35:bf:a4:4e:93:56:9f:33:fd:09:
         23:65:e0:d7:21:98:7f:be:30:48:e6:c7:b7:02:09:f9:64:16:
         82:76:4b:a5:ca:81:76:85:99:23:65:1a:f0:9e:9d:94:a7:06:
         f1:e0:5b:62:ae:0c:e6:80:51:10:85:d5:23:c3:9b:d2:3c:fc:
         09:0c:ed:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:16:28 2025 by rpki-client