Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323031303a3a2f34342d3434203d3e203238343033.roa
File:                     323830363a3337303a323031303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier:          GpMxLkbtN/sYtuscRnc2sC1LLa9Op5ZBj60WxgwCgt4=
Subject key identifier:   FB:DE:15:1E:8C:14:7C:11:0B:D0:D5:66:4C:6A:54:62:33:1C:D1:C4
Certificate issuer:       /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial:       249AF1653945D6C73029FCF1A27679A78B6618BD
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323031303a3a2f34342d3434203d3e203238343033.roa
Signing time:             Thu 22 May 2025 04:10:00 +0000
ROA not before:           Thu 22 May 2025 04:05:00 +0000
ROA not after:            Thu 21 May 2026 04:10:00 +0000
asID:                     28403
IP address blocks:        2806:370:2010::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9a:f1:65:39:45:d6:c7:30:29:fc:f1:a2:76:79:a7:8b:66:18:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
        Validity
            Not Before: May 22 04:05:00 2025 GMT
            Not After : May 21 04:10:00 2026 GMT
        Subject: CN=FBDE151E8C147C110BD0D5664C6A5462331CD1C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:48:45:57:31:b7:84:46:ca:3a:08:42:2e:08:
                    61:6a:43:0b:8f:a8:43:02:2f:c6:94:47:f9:0d:81:
                    5a:29:c0:e0:3b:78:f2:32:39:69:f9:16:c2:d1:93:
                    24:b7:bd:b0:89:14:c3:45:31:4f:cf:a9:e4:35:73:
                    90:e9:f0:c2:31:20:b0:ad:5a:e3:60:48:a9:81:3f:
                    b6:90:40:d2:02:0e:3b:af:2f:c5:0e:4d:78:2b:a2:
                    9b:95:30:93:91:da:90:a1:16:61:18:1e:c1:b6:04:
                    00:c5:01:d3:a8:34:da:23:c8:2f:47:72:6b:18:eb:
                    c4:eb:3b:74:ce:49:f1:51:61:21:ef:e4:10:1b:8e:
                    89:f8:ef:ba:5f:c3:99:33:ce:b7:e6:ce:0a:5d:fa:
                    cc:c8:e6:ee:52:d2:1c:22:61:17:af:f8:a3:81:c5:
                    e4:95:ad:4c:9b:19:70:6d:c3:cb:ba:dd:50:fc:cc:
                    86:9d:74:6a:75:a6:c4:2a:35:96:05:08:a6:e9:50:
                    6d:3b:b7:bd:90:44:d6:c9:19:b2:cc:e7:61:78:4a:
                    dd:32:97:70:26:9f:19:97:ff:93:db:e7:db:92:3e:
                    17:e7:38:4e:7a:3e:bf:60:44:a0:b3:c0:78:f4:42:
                    b8:fc:68:a9:dc:31:46:bb:39:94:3f:23:22:41:a3:
                    66:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DE:15:1E:8C:14:7C:11:0B:D0:D5:66:4C:6A:54:62:33:1C:D1:C4
            X509v3 Authority Key Identifier:
                keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323031303a3a2f34342d3434203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:370:2010::/44

    Signature Algorithm: sha256WithRSAEncryption
         16:79:1a:05:31:8c:5b:06:46:69:b7:75:6a:cd:30:86:70:5d:
         47:8d:51:b4:9f:46:1d:c1:a9:0e:15:c5:38:81:c7:5b:50:a4:
         4f:59:f7:a8:46:69:40:c8:96:97:1d:ab:c5:a3:ca:1f:1c:3e:
         14:73:f1:c1:b0:49:92:2a:24:8c:04:04:eb:5d:78:39:4f:21:
         f4:cf:69:45:59:93:d1:c4:2d:5a:68:36:b0:5f:92:54:ba:ba:
         2d:c3:35:79:49:61:99:d1:d6:69:67:68:13:f9:55:95:ed:a2:
         45:ce:42:89:af:06:48:ff:5d:df:5a:ec:d9:84:0b:2e:d1:45:
         d6:c3:5c:4b:50:7d:ce:36:ec:81:76:94:9b:6f:77:6c:9c:4f:
         43:86:e5:9b:d2:9f:ec:24:7b:2c:cd:11:12:f8:b8:b6:93:3f:
         2b:d9:6e:8f:a1:4a:68:8a:a9:48:34:30:c1:a9:f9:c4:30:99:
         98:64:7d:cc:22:f1:53:9e:b5:63:63:b2:31:9c:14:b4:6c:00:
         97:58:fd:65:a5:9d:84:41:e3:bb:25:15:a1:a9:08:f6:84:67:
         6e:51:68:49:3e:14:0e:f0:d7:ef:72:ce:c7:87:ef:5c:4e:c2:
         06:03:63:ce:22:32:3e:68:a0:14:61:3d:0a:cf:75:96:44:a1:
         68:86:27:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:05:07 2025 by rpki-client