Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323231303a3a2f34342d3434203d3e203238343033.roa
File:                     323830363a3337303a323231303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier:          oB66eQIXYak06+HoKL7fQRD4oSQt5xw3oHyCDTCn5Ls=
Subject key identifier:   DD:14:28:87:73:11:FA:16:6A:8C:84:56:55:09:30:7B:4D:63:87:5A
Certificate issuer:       /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial:       708A209549CDE07C3C2576D9C60E7169F3BA7641
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323231303a3a2f34342d3434203d3e203238343033.roa
Signing time:             Thu 22 May 2025 04:20:01 +0000
ROA not before:           Thu 22 May 2025 04:15:01 +0000
ROA not after:            Thu 21 May 2026 04:20:01 +0000
asID:                     28403
IP address blocks:        2806:370:2210::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:8a:20:95:49:cd:e0:7c:3c:25:76:d9:c6:0e:71:69:f3:ba:76:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
        Validity
            Not Before: May 22 04:15:01 2025 GMT
            Not After : May 21 04:20:01 2026 GMT
        Subject: CN=DD1428877311FA166A8C84565509307B4D63875A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:29:e0:e0:38:d8:f3:fa:98:28:b1:2e:10:e2:
                    39:94:6a:27:91:8e:73:f9:5f:76:b0:30:c6:a6:da:
                    1c:9d:84:71:80:92:01:f1:2b:e7:40:db:fa:7a:af:
                    81:bf:54:6b:4f:05:90:f4:f3:39:e3:db:bb:31:7b:
                    5b:f3:35:53:a2:06:78:b1:a9:ee:49:50:a4:64:97:
                    c5:bd:ff:96:8b:b6:66:d0:22:ea:0d:3c:29:ba:0b:
                    cb:c0:14:9d:fe:8a:ed:f9:3e:4d:ef:db:41:92:2a:
                    59:db:f2:9b:f9:39:c9:e9:96:d7:5e:c0:24:f3:53:
                    5d:b7:7c:40:6c:49:01:e4:23:6e:57:94:9e:1a:3e:
                    a7:ca:55:94:1b:3c:4a:78:8b:3a:f3:cb:37:52:97:
                    1a:22:9c:ec:9c:eb:fe:b0:33:b3:21:ed:e5:7a:73:
                    7a:db:58:78:47:86:9e:d8:da:d6:a0:45:a2:54:68:
                    82:6d:3a:30:db:07:aa:38:a6:49:c3:72:e5:0a:41:
                    bc:2f:86:3a:19:8b:d5:e0:d6:0a:fe:42:cc:59:32:
                    55:51:48:25:84:ac:0c:63:0b:61:61:fc:f1:65:af:
                    2c:bf:4a:4c:55:62:e5:43:32:22:58:b2:bd:03:e1:
                    3c:48:a7:f1:6e:96:a7:52:7c:ef:89:f0:39:44:a6:
                    ad:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:14:28:87:73:11:FA:16:6A:8C:84:56:55:09:30:7B:4D:63:87:5A
            X509v3 Authority Key Identifier:
                keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323231303a3a2f34342d3434203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:370:2210::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:af:b9:af:3a:8f:1a:25:97:7c:87:3c:1c:95:a6:6c:1c:91:
         4c:82:4c:25:8f:10:84:df:7f:89:b2:93:62:87:67:b7:71:fa:
         07:09:e9:9c:69:28:52:7d:88:c3:06:65:1f:91:c6:c6:c7:e1:
         57:29:a1:7b:88:69:32:61:a3:57:ed:8b:7e:d4:5c:80:a9:4d:
         ae:d6:3c:ed:46:4d:5b:26:d6:71:37:55:96:25:56:95:dc:63:
         9f:5f:7d:9b:44:20:af:04:31:5d:8f:eb:f6:f6:f2:cd:b5:37:
         1f:33:71:18:c5:9e:f6:cc:34:11:10:1f:a8:bf:a2:cb:f4:97:
         53:91:b8:19:4b:e2:8b:d3:25:34:b2:2f:dc:a7:8b:f5:37:32:
         b5:5a:83:92:33:ed:0a:07:51:96:a4:f9:d8:af:02:e7:6f:10:
         aa:76:68:25:05:23:32:38:f0:d0:ba:97:3c:51:9b:97:91:76:
         d3:a9:12:fd:69:7c:1c:6b:df:00:04:57:de:d6:d0:17:9d:7f:
         18:06:e7:e2:32:c0:94:8a:c6:4c:26:0d:2e:a9:c9:1a:51:c9:
         5d:a5:be:f6:d6:57:10:e7:6f:5c:e0:cb:97:11:9b:c7:2d:f7:
         34:6b:0e:14:1f:63:b6:ea:c2:54:e6:cd:8e:d9:81:9c:b0:b6:
         8e:1d:29:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:17:47 2025 by rpki-client