Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313263303a3a2f34342d3434203d3e203238343033.roa
File:                     323830363a3337303a313263303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier:          RFtxD6LDauNXUWgZfnVSdxPb7+WLPI727mgyu/DGTvg=
Subject key identifier:   5D:E4:82:EA:73:AE:91:C9:D8:5A:09:C0:49:CD:7C:82:F2:6D:B2:B6
Certificate issuer:       /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial:       66843840BFC1AFEBC74EB3B33C9226D3E2F4C364
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313263303a3a2f34342d3434203d3e203238343033.roa
Signing time:             Thu 22 May 2025 04:10:01 +0000
ROA not before:           Thu 22 May 2025 04:05:01 +0000
ROA not after:            Thu 21 May 2026 04:10:01 +0000
asID:                     28403
IP address blocks:        2806:370:12c0::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:84:38:40:bf:c1:af:eb:c7:4e:b3:b3:3c:92:26:d3:e2:f4:c3:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
        Validity
            Not Before: May 22 04:05:01 2025 GMT
            Not After : May 21 04:10:01 2026 GMT
        Subject: CN=5DE482EA73AE91C9D85A09C049CD7C82F26DB2B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:00:64:11:f9:9f:e5:57:7a:db:95:c3:d8:
                    be:ea:28:11:3b:bb:6c:e1:93:f4:70:a7:f2:fe:f9:
                    54:e2:e2:55:1c:09:7a:99:3c:16:ee:60:96:5f:5e:
                    fa:8b:91:6f:52:89:ef:82:b1:97:41:83:9e:90:a5:
                    59:ee:c6:11:ff:32:c3:39:79:67:9a:8e:70:ac:1e:
                    09:8b:bf:c6:bb:b6:43:ba:e3:8d:8c:9d:ac:3f:bb:
                    6d:81:b1:da:eb:4e:0d:98:ea:95:ef:8f:6a:96:39:
                    57:f4:56:42:6b:fa:5f:ad:b5:68:50:85:1f:0e:4c:
                    a2:af:42:34:dd:59:58:a2:d2:96:2c:aa:6a:fd:06:
                    05:43:cf:9b:6d:b7:6e:01:1b:4a:51:53:42:43:89:
                    75:24:8e:0f:d9:b1:08:56:0f:20:af:e5:2c:d8:40:
                    d6:ae:5c:ce:49:22:06:d2:71:11:27:64:f1:bd:af:
                    4a:2f:c9:f3:0a:b2:f6:47:73:eb:ff:01:db:39:72:
                    82:ab:20:a7:4e:b3:3f:97:33:50:bd:05:60:7e:a3:
                    96:31:43:96:aa:de:ae:e5:5e:29:ee:53:b9:33:4f:
                    61:ff:e9:cd:cc:22:df:04:80:e6:c1:cc:6f:10:aa:
                    93:f3:3b:f6:75:e6:d7:f7:b3:5b:c9:d1:ca:12:18:
                    12:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E4:82:EA:73:AE:91:C9:D8:5A:09:C0:49:CD:7C:82:F2:6D:B2:B6
            X509v3 Authority Key Identifier:
                keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313263303a3a2f34342d3434203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:370:12c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8e:4c:f3:0a:7e:5e:56:36:ab:f1:42:15:89:b3:83:4a:72:5c:
         23:54:45:fd:43:5e:90:16:a8:a3:be:4e:c0:db:44:77:41:d3:
         44:e7:cc:10:66:43:38:98:80:3b:4e:8e:a1:79:50:17:c6:c5:
         bd:a2:5f:c5:c5:84:df:b5:4b:15:e1:64:da:4e:0d:d2:12:75:
         71:58:fb:9c:34:73:4e:f4:33:da:ce:97:e1:c9:78:1c:d2:d5:
         30:cd:97:5a:14:4f:32:53:3c:6f:d0:e8:83:a1:bb:f4:b5:5b:
         b3:d4:e6:19:d1:73:e2:cc:20:c3:86:ab:e5:7e:25:a9:bb:47:
         a8:ee:1b:87:d1:5c:84:98:ec:65:26:1c:5d:08:4b:8f:99:0c:
         13:7b:f4:7c:be:6a:7f:03:14:3f:ef:7c:b6:db:9b:04:9a:1f:
         ca:8b:65:53:cb:34:06:b0:45:4a:df:29:f1:19:0c:f4:69:30:
         23:40:0c:a2:37:10:1e:92:63:f4:30:4d:6f:0f:60:be:9b:33:
         f0:c1:64:0a:86:01:39:0c:b0:33:ab:c3:c3:27:f9:74:55:5d:
         5f:4a:79:01:10:84:40:6b:ec:4d:41:8f:77:30:d9:94:f0:99:
         43:42:d9:93:38:8b:3b:4c:a7:19:bc:67:af:df:de:68:b3:3f:
         ab:21:52:ce
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUZoQ4QL/Br+vHTrOzPJIm0+L0w2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBBNkM4NzhDNEZGOTJFODdDMjE3QjJDRkFBMDJEMEE5
OTVEMDQ5NjAeFw0yNTA1MjIwNDA1MDFaFw0yNjA1MjEwNDEwMDFaMDMxMTAvBgNV
BAMTKDVERTQ4MkVBNzNBRTkxQzlEODVBMDlDMDQ5Q0Q3QzgyRjI2REIyQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxTgBkEfmf5Vd625XD2L7qKBE7
u2zhk/Rwp/L++VTi4lUcCXqZPBbuYJZfXvqLkW9Sie+CsZdBg56QpVnuxhH/MsM5
eWeajnCsHgmLv8a7tkO6442Mnaw/u22BsdrrTg2Y6pXvj2qWOVf0VkJr+l+ttWhQ
hR8OTKKvQjTdWVii0pYsqmr9BgVDz5ttt24BG0pRU0JDiXUkjg/ZsQhWDyCv5SzY
QNauXM5JIgbScREnZPG9r0ovyfMKsvZHc+v/Ads5coKrIKdOsz+XM1C9BWB+o5Yx
Q5aq3q7lXinuU7kzT2H/6c3MIt8EgObBzG8QqpPzO/Z15tf3s1vJ0coSGBKHAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUXeSC6nOukcnYWgnASc18gvJtsrYwHwYDVR0j
BBgwFoAUoKbIeMT/kuh8IXss+qAtCpldBJYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NEYwOTgyQzZGOTUwQjlEREIxOTcxQ0E3QzU4RDRDNjkw
MTVDRTEyMDUyMEE5N0M5MDg1MTNBRTVDMzRDQUVGLzAvQTBBNkM4NzhDNEZGOTJF
ODdDMjE3QjJDRkFBMDJEMEE5OTVEMDQ5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMEE2Qzg3OEM0RkY5MkU4N0My
MTdCMkNGQUEwMkQwQTk5NUQwNDk2LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDRGMDk4MkM2Rjk1MEI5RERCMTk3MUNBN0M1OEQ0QzY5MDE1Q0UxMjA1
MjBBOTdDOTA4NTEzQUU1QzM0Q0FFRi8wLzMyMzgzMDM2M2EzMzM3MzAzYTMxMzI2
MzMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIzODM0MzAzMy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
BCgGA3ASwDANBgkqhkiG9w0BAQsFAAOCAQEAjkzzCn5eVjar8UIVibODSnJcI1RF
/UNekBaoo75OwNtEd0HTROfMEGZDOJiAO06OoXlQF8bFvaJfxcWE37VLFeFk2k4N
0hJ1cVj7nDRzTvQz2s6X4cl4HNLVMM2XWhRPMlM8b9Dog6G79LVbs9TmGdFz4swg
w4ar5X4lqbtHqO4bh9FchJjsZSYcXQhLj5kME3v0fL5qfwMUP+98ttubBJofyotl
U8s0BrBFSt8p8RkM9GkwI0AMojcQHpJj9DBNbw9gvpsz8MFkCoYBOQywM6vDwyf5
dFVdX0p5ARCEQGvsTUGPdzDZlPCZQ0LZkziLO0ynGbxnr9/eaLM/qyFSzg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 08:24:31 2025 by rpki-client