Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323234303a3a2f34342d3434203d3e203238343033.roa
File:                     323830363a3337303a323234303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier:          g8DT9shQObBv0whDhwFIFkTFw6Ysw5VFtvQ9ZqEK2NU=
Subject key identifier:   B0:98:38:F9:54:AE:3B:D9:16:A0:B0:B5:F9:78:EA:66:78:06:4C:31
Certificate issuer:       /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial:       512C12575C8F2608A703346351C7329AD4FAB94E
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323234303a3a2f34342d3434203d3e203238343033.roa
Signing time:             Thu 22 May 2025 04:20:02 +0000
ROA not before:           Thu 22 May 2025 04:15:02 +0000
ROA not after:            Thu 21 May 2026 04:20:02 +0000
asID:                     28403
IP address blocks:        2806:370:2240::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2c:12:57:5c:8f:26:08:a7:03:34:63:51:c7:32:9a:d4:fa:b9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
        Validity
            Not Before: May 22 04:15:02 2025 GMT
            Not After : May 21 04:20:02 2026 GMT
        Subject: CN=B09838F954AE3BD916A0B0B5F978EA6678064C31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9c:26:bc:f6:18:ea:ac:bc:95:d8:48:86:b9:
                    93:b5:17:9b:79:61:fd:ff:d9:72:68:7c:3c:ad:73:
                    d2:81:3c:a7:63:6d:aa:9c:e6:7d:74:c4:16:f9:cb:
                    c9:01:c8:df:39:a9:7f:4a:b8:57:92:48:fd:28:a5:
                    db:92:71:17:3b:11:15:c1:09:20:5a:6d:29:53:14:
                    e0:f0:a8:48:b5:cd:bd:2e:7b:fe:2b:75:9c:92:ec:
                    b5:dd:50:3a:68:b7:5d:bb:46:14:d6:28:99:0a:04:
                    a4:73:7f:68:18:f7:4f:7b:ea:6c:1a:c1:53:c3:29:
                    ca:20:1f:12:c1:51:c0:0d:8d:93:32:d8:cf:4d:7e:
                    05:08:87:d1:4b:21:c4:69:92:b0:ca:c3:13:0e:d9:
                    76:63:44:01:d7:8c:e3:7e:73:9a:ec:de:5f:65:3d:
                    58:fa:4b:7d:ea:c0:00:a5:d4:53:b4:75:ed:20:da:
                    de:e3:ea:4e:f3:c7:37:c2:3c:44:9f:21:0c:fd:6b:
                    24:f9:ec:66:d2:c0:d4:4c:80:55:a3:d1:91:3a:ef:
                    2e:4d:01:7e:44:39:bf:58:2a:6b:17:1f:6a:1c:26:
                    71:89:32:6f:f4:1a:f5:c3:f5:e0:fd:58:eb:17:8f:
                    81:73:a5:0c:ec:59:4f:cf:97:bc:39:cd:7b:1b:cf:
                    7b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:98:38:F9:54:AE:3B:D9:16:A0:B0:B5:F9:78:EA:66:78:06:4C:31
            X509v3 Authority Key Identifier:
                keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323234303a3a2f34342d3434203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:370:2240::/44

    Signature Algorithm: sha256WithRSAEncryption
         44:65:3a:05:d4:10:6c:93:36:be:cc:a9:08:70:a1:d1:53:ce:
         52:f0:fc:d2:bd:ad:eb:c6:f5:e0:52:d5:aa:ac:2c:c6:da:c0:
         1d:6d:7d:ba:67:e0:44:bc:05:82:88:d5:e0:20:5d:9d:9e:c5:
         c3:bd:a2:d3:ac:9c:c8:7e:1f:bf:7d:77:d1:d6:fa:09:03:80:
         01:d1:ff:e0:0b:a7:ae:37:0f:30:24:cc:f9:8e:93:f8:66:5f:
         19:da:95:93:3e:d1:57:90:5f:6c:11:c1:d8:1b:94:0c:a8:eb:
         eb:85:f5:09:6f:4e:79:4e:aa:38:8f:23:4a:2f:72:7c:12:77:
         3b:1a:46:9f:d6:fd:12:b2:ba:66:b9:23:f8:b7:a4:18:55:a6:
         5f:d3:00:1c:ce:3e:5f:30:de:1a:d4:b7:26:71:32:20:d7:45:
         52:23:7c:c5:83:1c:b1:d8:dc:71:cf:54:9e:d7:b2:df:5e:8b:
         8b:79:c9:53:95:49:2b:02:8f:91:b7:d5:22:94:00:11:7b:55:
         b7:94:7f:5d:e0:a1:31:da:ee:d6:92:53:f1:59:88:60:cf:4f:
         c6:56:a4:f5:59:c9:1b:a4:aa:99:da:05:a0:d3:14:96:7f:e4:
         b2:f8:f1:09:72:24:0a:90:91:95:5e:c4:1b:58:16:f8:24:95:
         87:46:c9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:18:20 2025 by rpki-client