Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323531303a3a2f34342d3434203d3e203238343033.roa
File:                     323830363a3337303a323531303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier:          B9am/LRZXAp4yoRvfkaYGen7CX/pJ6lvx9RfX7xEmAg=
Subject key identifier:   1B:BA:40:97:96:AE:A4:49:41:72:B3:82:74:CB:DB:82:ED:6A:E2:8E
Certificate issuer:       /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial:       177314AF794008F4873B293B0C160493BE78D11F
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323531303a3a2f34342d3434203d3e203238343033.roa
Signing time:             Thu 22 May 2025 04:20:00 +0000
ROA not before:           Thu 22 May 2025 04:15:00 +0000
ROA not after:            Thu 21 May 2026 04:20:00 +0000
asID:                     28403
IP address blocks:        2806:370:2510::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:73:14:af:79:40:08:f4:87:3b:29:3b:0c:16:04:93:be:78:d1:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
        Validity
            Not Before: May 22 04:15:00 2025 GMT
            Not After : May 21 04:20:00 2026 GMT
        Subject: CN=1BBA409796AEA4494172B38274CBDB82ED6AE28E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:0a:bf:17:11:8e:4c:bb:8f:94:6c:39:31:
                    93:8a:90:39:09:56:aa:04:16:a3:48:1e:83:dc:d6:
                    4d:14:49:90:fd:8f:ec:11:2b:8a:d1:72:27:8e:19:
                    6e:b3:4f:07:1a:d0:f7:20:44:93:5c:89:80:f3:15:
                    46:90:ea:d0:6d:f3:91:8a:a9:74:b8:35:79:d0:1b:
                    48:6e:19:ac:90:53:14:70:f8:46:7d:dc:77:36:bf:
                    59:b7:04:c1:9d:cf:4e:ec:64:d9:b2:1a:ab:5d:a6:
                    96:57:75:55:1c:50:0c:de:1b:19:fc:a2:24:ef:27:
                    fd:c7:b7:bd:a5:a4:05:04:3d:57:f4:c3:ed:50:77:
                    52:44:7f:ab:4d:8d:29:9a:0a:2f:fe:68:d0:d8:b2:
                    68:31:f2:67:f6:f6:24:a0:dd:b1:66:46:d8:1b:e2:
                    63:b8:5a:99:00:c8:18:82:e0:61:09:33:b3:af:2f:
                    a3:4a:33:b0:29:e8:02:46:37:dc:2e:2e:3c:ee:ae:
                    12:8c:e1:db:16:e0:e3:8a:a3:58:20:95:cd:d4:54:
                    bf:ca:06:71:9e:02:c6:0a:fa:29:f1:83:0c:5e:d7:
                    c5:10:c5:2e:99:2b:c3:76:0c:d8:91:4c:ef:a1:59:
                    96:5d:ff:46:a5:11:3c:3c:b0:d1:54:69:01:3d:46:
                    b6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BA:40:97:96:AE:A4:49:41:72:B3:82:74:CB:DB:82:ED:6A:E2:8E
            X509v3 Authority Key Identifier:
                keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323531303a3a2f34342d3434203d3e203238343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:370:2510::/44

    Signature Algorithm: sha256WithRSAEncryption
         92:f2:41:e7:1c:88:ec:fb:fa:e2:08:cd:c3:14:96:a4:0b:b0:
         e0:55:f6:56:d4:b6:9f:da:63:84:a9:fc:08:87:12:f3:70:0f:
         12:88:1c:95:fd:f5:96:39:0e:23:06:94:28:e7:fb:c5:cb:52:
         9b:9c:d9:6b:1c:5f:f8:88:0e:95:4b:cb:b8:84:e0:c7:aa:ce:
         4e:28:a7:a1:5d:87:73:e8:7b:1a:e0:65:cb:19:09:88:d6:9a:
         3c:7c:ae:86:d2:12:37:50:cc:44:f1:8a:e7:42:c5:dc:ab:eb:
         b0:cf:40:53:4e:e9:10:3a:f3:ed:bc:61:cf:d6:18:5a:5c:7f:
         0f:1a:e8:73:b9:02:80:a1:cd:74:30:ae:4f:e5:02:26:cc:f4:
         78:32:d0:be:d5:44:4e:78:55:59:76:ef:4d:7b:94:53:27:73:
         a5:28:74:f0:94:5e:b7:f0:7a:5c:b8:2d:eb:30:a2:a0:ba:eb:
         0b:f2:8a:88:29:90:7b:7f:22:74:89:46:2e:74:c8:2c:48:23:
         1e:c4:a8:61:ad:b2:2e:a0:e3:14:14:4a:66:11:2a:ab:04:38:
         18:b3:51:75:b9:e0:52:7e:19:f9:d6:4e:a5:61:77:cf:fa:27:
         53:3a:c8:96:e0:f8:28:a5:f4:bd:75:7b:9b:62:a6:9e:39:2c:
         ce:5c:25:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:27:57 2025 by rpki-client