Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323135303a3a2f34342d3434203d3e203238343033.roa
File:                     323830363a3337303a323135303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier:          BvSC7ICWrp1AshrLhgzLDldyIHHU8Du8BJl7z8U+mdc=
Subject key identifier:   B7:95:48:8A:0B:99:F0:12:EB:FA:39:EC:58:34:3E:BD:BA:E6:C5:6F
Certificate issuer:       /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial:       23C6A5D69A941E14D2A8DDEA66B6A55F2F97D510
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323135303a3a2f34342d3434203d3e203238343033.roa
Signing time:             Thu 22 May 2025 04:15:02 +0000
ROA not before:           Thu 22 May 2025 04:10:02 +0000
ROA not after:            Thu 21 May 2026 04:15:02 +0000
asID:                     28403
IP address blocks:        2806:370:2150::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c6:a5:d6:9a:94:1e:14:d2:a8:dd:ea:66:b6:a5:5f:2f:97:d5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
        Validity
            Not Before: May 22 04:10:02 2025 GMT
            Not After : May 21 04:15:02 2026 GMT
        Subject: CN=B795488A0B99F012EBFA39EC58343EBDBAE6C56F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:1d:14:98:aa:a5:1c:3e:6f:06:bf:85:3f:
                    e3:70:c8:c6:a1:e4:cf:57:aa:19:0d:4b:c2:33:c3:
                    43:bc:f4:07:69:48:93:a8:76:6f:5e:34:a4:8f:c7:
                    95:c0:e3:ee:a0:75:2b:2c:62:48:40:ce:f8:7d:75:
                    ad:e9:b0:d9:d8:ad:bc:d3:c6:ff:3b:18:31:a3:00:
                    13:d9:54:2a:03:84:9c:4c:47:b4:c6:81:72:da:09:
                    1e:c2:59:92:07:f2:ce:33:a6:d7:7f:5f:82:bf:b9:
                    a1:f7:7b:47:ef:cd:ee:27:70:a8:55:f6:f4:15:93:
                    ed:2b:10:b7:00:74:28:5e:8d:80:db:1e:86:2c:68:
                    50:ab:8b:c6:c1:49:6d:16:39:81:4c:94:30:68:20:
                    e0:a2:ac:d2:86:73:0c:2e:e9:02:cb:09:67:92:20:
                    f5:86:b3:59:f7:28:78:78:1c:91:7f:ef:4b:be:74:
                    4b:78:20:76:a9:92:45:ae:eb:61:8d:77:31:30:dc:
                    9e:ea:15:2c:e6:85:d5:d6:a6:23:38:84:1e:45:9b:
                    b9:b8:ca:a9:d2:f8:22:3a:93:1b:a7:73:c0:c6:7a:
                    26:d4:54:25:2f:6e:9d:30:a5:6b:d8:b0:55:89:17:
                    99:da:3b:41:ab:41:e4:17:59:79:05:8a:ac:43:f9:
                    62:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:95:48:8A:0B:99:F0:12:EB:FA:39:EC:58:34:3E:BD:BA:E6:C5:6F
            X509v3 Authority Key Identifier:
                keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323135303a3a2f34342d3434203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:370:2150::/44

    Signature Algorithm: sha256WithRSAEncryption
         68:3a:9a:06:11:b8:d2:57:93:8a:31:33:73:82:38:fa:58:14:
         51:81:03:94:3e:36:fa:50:32:98:7f:de:51:93:1b:7e:c7:15:
         2c:23:d2:e5:fd:81:12:aa:6d:6f:79:02:53:3f:f9:35:00:94:
         d9:e6:56:85:24:5e:cb:e8:a1:99:32:a4:e2:34:e3:a6:52:44:
         22:1d:e6:72:d2:e7:af:3e:5e:e8:8e:f7:30:4e:3a:f4:5b:a0:
         58:7a:83:94:08:0c:7f:24:0e:aa:e4:26:72:bc:9e:22:47:51:
         ba:f0:38:47:0f:75:b4:8b:e4:ef:30:5e:35:dc:1e:44:25:08:
         d3:06:ca:86:79:73:ac:e5:c4:cb:75:ae:6f:44:ea:e7:10:98:
         70:af:e9:a9:82:f3:e0:17:bb:9f:e7:5f:11:47:68:f0:94:65:
         a4:4e:aa:eb:cf:a6:3c:28:6c:62:a7:b3:ca:b1:4e:c6:1e:33:
         d0:63:17:a4:03:b5:58:5d:fb:fe:e9:5c:3f:d2:84:69:ed:74:
         d9:1a:48:37:64:91:34:49:e4:a3:e3:25:cb:11:4c:8f:24:f2:
         26:76:f9:b6:db:bb:ac:ae:76:e2:4d:5b:53:32:7c:37:44:07:
         af:c7:6d:d5:bb:2b:49:4a:01:88:b4:4d:fe:bc:4f:93:8f:e9:
         4f:3f:e5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:18:25 2025 by rpki-client