Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323034303a3a2f34342d3434203d3e203238343033.roa
File:                     323830363a3337303a323034303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier:          +FnT7EeI0wKd68Ttl+ZSJ6W1tqgvm46inKP87oNTZEY=
Subject key identifier:   76:B3:95:59:D3:BE:AD:CB:15:F5:16:F3:4A:8E:80:22:31:80:3E:0B
Certificate issuer:       /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial:       3E3E261642BA3382807EE4FB3D6BD7D874248CB8
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323034303a3a2f34342d3434203d3e203238343033.roa
Signing time:             Thu 22 May 2025 04:15:01 +0000
ROA not before:           Thu 22 May 2025 04:10:01 +0000
ROA not after:            Thu 21 May 2026 04:15:01 +0000
asID:                     28403
IP address blocks:        2806:370:2040::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3e:26:16:42:ba:33:82:80:7e:e4:fb:3d:6b:d7:d8:74:24:8c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
        Validity
            Not Before: May 22 04:10:01 2025 GMT
            Not After : May 21 04:15:01 2026 GMT
        Subject: CN=76B39559D3BEADCB15F516F34A8E802231803E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:13:9d:72:69:16:99:48:eb:b4:1c:0c:be:9e:
                    8d:fc:48:d3:08:74:26:25:15:b0:54:ae:a1:08:7e:
                    be:a1:d3:83:f9:92:64:79:c9:c2:3f:2f:54:57:3a:
                    07:f3:45:81:95:37:6f:18:9e:b4:c9:71:fd:bf:ee:
                    f0:22:42:2a:a7:71:84:cc:84:70:88:80:cb:43:e9:
                    2c:c9:c2:cd:49:4a:b3:3b:9f:e7:55:39:96:e9:1c:
                    59:9a:dd:90:3c:63:1d:10:f6:8e:77:c4:9c:24:6f:
                    da:6b:c0:24:4c:e2:94:27:e8:f2:ca:3d:90:fb:b9:
                    69:99:39:f2:95:e8:13:d9:03:32:a4:fb:1e:bd:9e:
                    6e:00:3e:7e:6a:47:65:26:f7:44:9f:be:f1:e7:8c:
                    0c:03:78:b9:f2:75:3b:1a:9b:59:e5:24:bf:3f:4b:
                    6d:76:b1:d8:89:51:0f:84:2f:43:9e:35:63:6b:ee:
                    61:96:c6:f5:28:cf:a7:ac:16:70:3f:08:4e:58:c7:
                    2b:35:86:16:33:b7:87:31:5f:ef:9f:d4:2c:39:7a:
                    a4:50:83:25:81:6b:9d:64:fc:fc:4c:53:37:a7:d1:
                    a6:3e:74:c2:e5:e1:90:e3:6e:a5:bd:5b:dd:5a:40:
                    5c:78:3d:bd:e9:12:84:10:b2:e4:fb:11:76:45:25:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B3:95:59:D3:BE:AD:CB:15:F5:16:F3:4A:8E:80:22:31:80:3E:0B
            X509v3 Authority Key Identifier:
                keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323034303a3a2f34342d3434203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:370:2040::/44

    Signature Algorithm: sha256WithRSAEncryption
         6b:73:de:69:5f:3d:8e:d1:cf:12:e4:50:d3:2c:06:1e:b4:7e:
         24:e4:c1:0b:b4:7c:4c:f0:d3:7b:4b:3e:73:fd:0f:42:ba:ac:
         03:ee:e6:35:8f:a1:a9:5d:83:14:75:0e:69:92:de:27:96:49:
         79:15:63:ce:a2:ce:4b:fd:8c:1f:84:38:58:aa:01:d9:c0:a0:
         be:0b:4a:b1:cf:9c:52:cf:6c:99:6e:f6:b3:6f:42:9d:0f:47:
         b4:52:09:c4:0e:75:58:b0:b4:9d:f2:53:cd:a9:e7:10:ed:4e:
         26:4f:33:ee:cb:1c:a2:b4:2e:93:6c:ab:23:c1:3b:2f:df:49:
         88:21:7c:8a:80:26:31:ba:84:b1:d8:52:d1:87:98:2a:b8:71:
         5a:66:05:6d:b8:3d:26:80:ce:6b:d0:0a:37:3e:44:5c:9b:a2:
         be:54:d3:71:72:d5:2f:76:ad:f9:20:77:23:27:58:0b:b3:93:
         78:86:c3:f7:15:e4:4d:a6:f3:04:b4:63:27:ed:11:62:87:61:
         51:c4:22:2a:2a:f1:eb:a8:00:f9:d6:a6:0c:9a:85:83:4e:b6:
         44:48:82:73:74:d8:45:0c:59:55:6f:9a:f7:d6:33:20:b1:e5:
         c1:6f:55:83:c6:cf:6d:2b:4d:eb:fa:96:56:d7:9d:d1:5d:18:
         0f:74:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 16:21:17 2025 by rpki-client