Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3434303a3a2f34322d3432203d3e20323636393034.roa
File:                     323830333a663661303a3434303a3a2f34322d3432203d3e20323636393034.roa (raw, json)
Hash identifier:          p2GSQpnjbLjPhuFOQTWLq+sUKn8Iwpvk6kr3M1FIoOk=
Subject key identifier:   11:95:31:21:F0:5E:B5:F8:BD:91:6E:DD:AF:B3:77:08:97:9A:C3:19
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       581931F8A2BF3AA8BCE7773AA2B17C1AA35123C9
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3434303a3a2f34322d3432203d3e20323636393034.roa
Signing time:             Thu 03 Jul 2025 20:40:19 +0000
ROA not before:           Thu 03 Jul 2025 20:35:19 +0000
ROA not after:            Thu 02 Jul 2026 20:40:19 +0000
asID:                     266904
IP address blocks:        2803:f6a0:440::/42 maxlen: 42
Validation:               Failed, certificate revoked on Thu 17 Jul 2025 01:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:19:31:f8:a2:bf:3a:a8:bc:e7:77:3a:a2:b1:7c:1a:a3:51:23:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Jul  3 20:35:19 2025 GMT
            Not After : Jul  2 20:40:19 2026 GMT
        Subject: CN=11953121F05EB5F8BD916EDDAFB37708979AC319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3f:59:68:83:1a:2f:5b:30:de:d3:02:1e:ca:
                    72:a9:53:11:e7:89:8f:4b:15:f8:4b:76:04:46:9a:
                    ec:79:89:b5:d3:a5:97:dd:c7:a2:6f:27:71:9f:41:
                    75:4d:8a:39:d6:8d:37:0e:09:a8:fd:7b:2f:d5:b9:
                    48:76:96:fb:0e:7b:e6:0a:8c:b0:45:ec:92:04:31:
                    6d:98:be:3b:84:a1:07:3c:f7:b8:dc:cc:18:19:7a:
                    dd:3a:20:19:bb:3b:19:ed:36:0e:c7:cd:cc:e9:f9:
                    e0:6a:6d:28:1f:97:f2:c7:12:0f:7e:fb:9d:f2:cf:
                    bc:bf:a5:fd:62:f3:6f:87:2a:5b:e7:1a:b4:7c:48:
                    07:30:8f:73:c3:66:6c:10:1e:12:e4:bd:4b:4d:95:
                    ba:f5:7f:f2:d2:40:56:09:11:d2:7c:f9:09:c7:b3:
                    98:b6:df:06:ea:5f:76:2a:64:ad:4f:04:dc:b8:50:
                    28:d2:3c:0d:d8:08:b5:b6:63:1a:bc:7d:9f:1f:88:
                    f0:5f:8e:5a:74:4d:fc:dc:92:fe:12:0f:c5:7b:45:
                    ff:24:59:15:59:eb:be:7c:0f:34:94:de:33:40:4b:
                    eb:29:be:0a:0f:d3:fa:76:10:3f:d6:9c:78:79:bd:
                    e6:9e:13:14:4f:d3:92:55:32:4f:26:5f:22:4c:a6:
                    be:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:95:31:21:F0:5E:B5:F8:BD:91:6E:DD:AF:B3:77:08:97:9A:C3:19
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/323830333a663661303a3434303a3a2f34322d3432203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f6a0:440::/42

    Signature Algorithm: sha256WithRSAEncryption
         ab:3d:d7:d2:60:f5:5f:39:6a:26:c6:50:25:eb:46:6b:39:4a:
         1d:5b:75:5f:0a:da:a3:d1:97:8a:be:6e:be:2c:7c:c4:e0:4a:
         ab:44:70:b5:5e:0d:ac:bd:d9:d0:b1:8c:8a:fd:ac:4e:76:00:
         5d:06:a1:ec:88:96:1e:2e:b9:7f:7f:6d:34:d5:90:d3:65:9f:
         86:b4:71:a4:e1:a2:1d:87:f0:e1:69:ad:f0:48:57:84:de:13:
         38:70:9b:22:33:bf:f1:62:4a:77:71:a3:a5:f7:44:51:f2:88:
         b6:b8:e6:e9:28:eb:e1:b6:d3:d2:40:01:5d:8a:40:84:c0:f9:
         44:38:57:70:83:87:1f:74:b5:9a:b9:26:cf:e2:90:12:bf:2a:
         47:ae:36:47:fe:05:1e:77:3e:a3:21:00:9d:42:18:d7:7f:cd:
         ca:7f:53:e3:42:f3:58:82:a8:32:5a:7d:0b:fc:51:2f:76:8d:
         2f:03:1d:fd:98:92:51:91:12:88:7f:07:96:ef:39:b1:5d:dd:
         b6:32:fc:80:d8:46:4d:d0:62:2a:9e:54:db:71:e9:ae:55:e9:
         ef:ee:74:ca:16:63:fe:fb:97:63:af:4b:f6:81:c4:8a:11:41:
         bd:8f:88:89:34:97:29:72:61:a8:4a:a1:b0:03:f8:cc:3a:bf:
         47:20:e4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----