Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323033303a3a2f34342d3434203d3e203238343033.roa
File:                     323830363a3337303a323033303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier:          5UmriSfP39TDa1fSKUzbQUQMwOXz1fxVVmC0dCHq0vw=
Subject key identifier:   29:6B:7A:C2:52:86:F7:CD:7F:9B:63:2A:1F:E1:44:A0:20:7E:6E:80
Certificate issuer:       /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial:       32B687FB83B81E3CDCF8E7977609B0D36B0AA395
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323033303a3a2f34342d3434203d3e203238343033.roa
Signing time:             Thu 22 May 2025 04:10:01 +0000
ROA not before:           Thu 22 May 2025 04:05:01 +0000
ROA not after:            Thu 21 May 2026 04:10:01 +0000
asID:                     28403
IP address blocks:        2806:370:2030::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b6:87:fb:83:b8:1e:3c:dc:f8:e7:97:76:09:b0:d3:6b:0a:a3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
        Validity
            Not Before: May 22 04:05:01 2025 GMT
            Not After : May 21 04:10:01 2026 GMT
        Subject: CN=296B7AC25286F7CD7F9B632A1FE144A0207E6E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:14:29:39:f9:5e:96:7a:e9:c4:0b:45:07:f5:
                    94:92:4d:bf:3f:4b:00:95:9d:2b:b1:7b:5b:50:f3:
                    7d:4b:02:58:ac:dd:1d:a6:40:1b:29:e1:fb:58:e5:
                    10:58:fe:85:42:b0:16:31:30:e2:41:00:b0:b4:5d:
                    ff:28:50:c6:4c:01:d9:51:6a:ab:0e:ee:a8:eb:4a:
                    ac:20:2e:9a:f2:9c:7c:4b:39:26:79:be:3a:52:c7:
                    4d:a9:18:49:cf:ba:5e:41:a4:13:79:86:8a:73:4c:
                    de:22:35:dd:6e:44:57:33:6d:4d:28:53:a7:33:29:
                    58:9a:29:5f:9a:aa:9d:9f:b9:e9:05:96:0c:7f:62:
                    ac:ee:0d:1c:38:31:0b:2d:87:d2:7c:7e:72:2e:62:
                    8c:41:12:fd:c5:c6:77:62:bd:ba:68:d3:1e:e1:a3:
                    65:8b:25:ae:ad:86:86:02:c0:20:fe:15:7e:be:cb:
                    b4:25:75:4b:da:6a:84:21:93:03:47:fe:38:e7:68:
                    4b:e8:1e:cd:0f:c7:57:a6:d9:8b:47:1c:29:01:24:
                    ae:ad:cf:fe:24:1a:15:52:d0:69:fc:50:87:b0:27:
                    84:b9:86:08:c6:0b:77:8a:be:de:d6:6f:9d:93:af:
                    46:a2:d6:0c:57:18:f5:0c:37:43:46:79:b2:0f:1d:
                    de:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6B:7A:C2:52:86:F7:CD:7F:9B:63:2A:1F:E1:44:A0:20:7E:6E:80
            X509v3 Authority Key Identifier:
                keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323033303a3a2f34342d3434203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:370:2030::/44

    Signature Algorithm: sha256WithRSAEncryption
         52:82:96:eb:29:d6:62:f5:05:d9:a4:d2:73:e0:7a:47:83:e9:
         ce:c0:24:f0:39:1a:e8:74:ab:a3:d5:e1:37:31:8d:fc:61:ff:
         71:91:d4:56:00:27:be:de:d7:5d:52:27:e8:c5:f2:ef:46:f8:
         04:43:98:50:41:58:1e:ec:7e:5f:fd:bf:41:57:9b:e1:9a:56:
         60:cc:d3:b5:d5:02:d8:92:96:b0:1a:8d:8c:3b:81:d3:9c:f8:
         61:18:5c:09:bf:8b:ad:e6:2f:ad:2a:4f:ae:7b:85:56:ae:a9:
         f6:6b:b5:10:5e:4b:ea:09:a0:13:23:0e:c2:be:b8:7d:34:5a:
         19:54:c5:ef:8b:74:52:09:6e:fc:61:f8:69:9d:da:be:d8:53:
         41:08:c5:b4:7d:9c:0a:6b:84:df:1a:5b:f6:5f:b1:e5:e7:9c:
         00:11:38:75:dd:82:99:91:9b:77:ac:e2:6c:2b:3c:9f:48:31:
         d1:5c:f7:60:f0:65:dd:a4:b7:0f:9c:19:a5:ca:b0:c0:1d:11:
         1e:4d:5b:27:22:bf:3a:4e:f9:5f:07:a7:55:bb:67:e3:ad:d2:
         10:3e:26:62:81:bf:d7:ab:86:1d:b4:40:88:25:6b:b9:70:e9:
         6c:5b:8d:73:c4:c1:8c:08:76:c8:2d:83:32:fa:55:cb:0b:65:
         24:68:94:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:26:17 2025 by rpki-client