Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323232303a3a2f34342d3434203d3e203238343033.roa
File:                     323830363a3337303a323232303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier:          uQxsT5e6P39CeQu/dyrHOqUBF26xoNwA/1mocEdYa34=
Subject key identifier:   44:BB:E8:58:CD:D5:84:84:DF:E4:2E:78:F3:60:A3:AF:4F:E2:E7:07
Certificate issuer:       /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial:       02ED822AACBBDF2223764680E1E68339368E3499
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323232303a3a2f34342d3434203d3e203238343033.roa
Signing time:             Thu 22 May 2025 04:20:02 +0000
ROA not before:           Thu 22 May 2025 04:15:02 +0000
ROA not after:            Thu 21 May 2026 04:20:02 +0000
asID:                     28403
IP address blocks:        2806:370:2220::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ed:82:2a:ac:bb:df:22:23:76:46:80:e1:e6:83:39:36:8e:34:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
        Validity
            Not Before: May 22 04:15:02 2025 GMT
            Not After : May 21 04:20:02 2026 GMT
        Subject: CN=44BBE858CDD58484DFE42E78F360A3AF4FE2E707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c8:db:ee:25:fd:a4:8b:df:df:2a:66:36:12:
                    fd:86:56:b4:07:a0:9e:69:04:1a:af:19:cf:e9:45:
                    f5:9a:7f:05:48:5e:41:b0:99:44:93:17:dc:3b:fa:
                    0e:ee:08:1c:12:8e:2a:0c:fc:8b:42:76:b1:ca:41:
                    54:97:3f:7c:2b:37:3d:30:c3:c8:c6:ff:16:f1:9e:
                    a8:79:96:a7:0b:c4:a7:3b:63:d4:8a:db:f5:ff:5b:
                    84:85:6a:19:bb:a1:59:da:8b:53:c6:7b:84:da:ba:
                    8a:e3:5d:9a:7d:90:a1:00:da:3d:b4:32:bc:16:de:
                    05:c1:4d:0c:a1:30:95:b0:26:ed:3b:c7:bd:a4:8a:
                    92:b2:03:c2:20:07:ea:6b:69:59:4f:8b:24:6f:14:
                    fb:7c:aa:14:87:c3:31:35:ef:25:83:d0:f6:49:ec:
                    fd:96:0d:90:0c:af:ec:db:a7:8b:39:8b:52:14:59:
                    ee:6b:56:7e:fe:45:47:1c:b0:f2:d2:ca:48:95:e8:
                    d7:9d:12:cd:18:45:d9:7c:ab:40:5a:b6:4a:49:1a:
                    d1:9f:b7:03:c3:cb:6d:8f:32:65:03:bf:c2:b6:60:
                    5a:97:10:21:3e:71:72:d0:e8:7f:5f:0b:99:9e:5a:
                    46:52:64:d0:63:a3:f4:1e:6e:85:3d:af:c5:43:ea:
                    46:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BB:E8:58:CD:D5:84:84:DF:E4:2E:78:F3:60:A3:AF:4F:E2:E7:07
            X509v3 Authority Key Identifier:
                keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323232303a3a2f34342d3434203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:370:2220::/44

    Signature Algorithm: sha256WithRSAEncryption
         07:7d:1b:6c:cf:9a:60:e8:e4:7d:c8:e7:5b:16:38:62:2c:5b:
         87:fa:8f:b4:6d:82:48:e8:4e:f4:6c:cb:26:a4:39:81:a1:da:
         a3:cd:9a:54:06:49:6c:1e:28:a7:59:c3:fb:17:6c:d3:eb:c2:
         9b:a2:4f:53:b0:5a:eb:5b:06:ae:79:f1:3c:8e:41:b5:6e:f6:
         1d:c2:00:57:0a:93:1e:e1:82:9b:64:02:8d:c6:ca:0e:85:ae:
         69:93:96:4d:a7:b9:33:a7:a8:be:09:6f:d9:fe:62:30:ae:8a:
         71:c4:2f:41:ca:9d:01:08:17:8d:32:b0:26:c0:31:21:0f:b1:
         fe:b8:3c:08:1a:87:91:29:fb:db:14:83:56:3d:5e:24:0c:e4:
         15:2b:5f:4d:6b:ea:dd:ab:13:78:58:a3:bc:8f:6a:77:94:d0:
         2a:58:0e:c5:a7:f1:8a:79:68:9d:2f:3a:f0:48:90:00:0a:a8:
         6c:94:da:5c:98:3d:6b:e2:6e:18:94:90:39:0f:80:70:40:dc:
         9d:3e:9b:1c:c7:09:b4:46:c4:bc:c8:cc:6d:1e:9b:32:3d:8b:
         38:0f:df:05:a6:44:5a:20:a7:ea:32:b8:81:ad:65:66:6f:10:
         53:b7:d3:79:ab:10:8a:eb:d8:43:50:13:23:7c:b8:2d:10:8b:
         10:03:89:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:17:59 2025 by rpki-client