Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8756187C02AC0393551EFADE620EE91273CE37B8A8E8528978BDF28E5AB064DC/0/323830333a373531303a3a2f33322d3332203d3e2030.roa
File:                     323830333a373531303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier:          e+Gb3KXd5j4WN1cXha2i6dcshOXn279E9niAl/sH3ZI=
Subject key identifier:   57:8A:03:01:B5:DB:BB:16:E1:ED:10:E6:B3:5D:F2:85:60:F4:00:4B
Certificate issuer:       /CN=D87A1AB545BE4E257CE10B4965EE134E7673FC52
Certificate serial:       79EA07141240168C26D6023C8F83BB219F65193E
Authority key identifier: D8:7A:1A:B5:45:BE:4E:25:7C:E1:0B:49:65:EE:13:4E:76:73:FC:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D87A1AB545BE4E257CE10B4965EE134E7673FC52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8756187C02AC0393551EFADE620EE91273CE37B8A8E8528978BDF28E5AB064DC/0/323830333a373531303a3a2f33322d3332203d3e2030.roa
Signing time:             Tue 20 May 2025 02:45:00 +0000
ROA not before:           Tue 20 May 2025 02:40:00 +0000
ROA not after:            Tue 19 May 2026 02:45:00 +0000
asID:                     0
IP address blocks:        2803:7510::/32 maxlen: 32
Validation:               Failed, certificate revoked on Tue 20 May 2025 03:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ea:07:14:12:40:16:8c:26:d6:02:3c:8f:83:bb:21:9f:65:19:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D87A1AB545BE4E257CE10B4965EE134E7673FC52
        Validity
            Not Before: May 20 02:40:00 2025 GMT
            Not After : May 19 02:45:00 2026 GMT
        Subject: CN=578A0301B5DBBB16E1ED10E6B35DF28560F4004B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:89:64:1c:91:70:e9:89:3a:3c:98:6e:78:46:
                    24:7e:7a:b4:3a:f5:46:71:7d:b1:5e:45:b3:66:2d:
                    3c:a4:fa:7f:5c:b8:a8:6c:6b:5b:ec:d4:8e:5a:c0:
                    ee:66:b6:11:99:2d:ec:53:e4:c0:54:31:6f:a8:7c:
                    0d:1a:cd:c0:aa:d4:41:cc:c2:ad:63:c4:f6:fa:33:
                    0f:bf:57:ea:32:6d:27:4b:20:1a:7c:d9:e2:25:0e:
                    1e:95:ab:3d:1b:de:20:e4:5c:98:05:aa:af:47:74:
                    b0:60:33:58:92:62:73:0c:49:08:e1:09:c2:5d:b7:
                    7b:b1:ff:50:2b:92:b5:71:df:1f:03:19:29:39:3a:
                    35:95:46:1c:e4:08:ec:80:bb:c8:01:51:54:d9:c6:
                    bb:3f:db:db:c6:c2:dd:31:0c:61:86:1e:92:26:3a:
                    cf:05:53:d9:75:db:3c:9e:dc:9b:b3:b6:c3:a8:f5:
                    ce:1b:85:7d:ad:f4:32:f8:72:ce:fd:4c:af:84:4e:
                    27:d4:37:44:22:f2:1e:03:3d:1e:2d:79:e8:b5:57:
                    e4:38:f3:03:83:95:cf:98:e0:58:d3:d9:a8:44:41:
                    96:a1:51:53:3b:ef:68:c5:c2:bf:39:c4:e3:db:2c:
                    2e:b7:f6:2b:97:fd:e8:3b:d4:5b:af:e3:e5:ee:59:
                    18:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8A:03:01:B5:DB:BB:16:E1:ED:10:E6:B3:5D:F2:85:60:F4:00:4B
            X509v3 Authority Key Identifier:
                keyid:D8:7A:1A:B5:45:BE:4E:25:7C:E1:0B:49:65:EE:13:4E:76:73:FC:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8756187C02AC0393551EFADE620EE91273CE37B8A8E8528978BDF28E5AB064DC/0/D87A1AB545BE4E257CE10B4965EE134E7673FC52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D87A1AB545BE4E257CE10B4965EE134E7673FC52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8756187C02AC0393551EFADE620EE91273CE37B8A8E8528978BDF28E5AB064DC/0/323830333a373531303a3a2f33322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7510::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:8e:5c:c8:95:9e:a9:bb:28:78:16:3a:b3:dd:23:e1:eb:a7:
         44:2c:4c:04:a4:ab:b9:47:ef:05:3f:fd:a1:24:27:88:d7:a0:
         9e:31:69:fa:d7:bb:69:f9:25:e4:1a:7f:2e:67:16:03:f2:73:
         2d:04:76:26:7d:5f:2e:64:c1:d4:ce:0e:f7:2a:97:65:f7:d6:
         32:7e:14:71:7e:29:1c:42:51:33:9e:29:24:d8:33:44:64:07:
         01:b9:9c:5b:db:99:2c:a7:31:8f:cf:a8:5b:76:7e:5e:9f:21:
         06:9e:8f:44:21:54:1e:a0:b0:a1:b3:71:7b:06:d0:4a:3d:43:
         40:4d:7c:61:d0:20:8f:4c:18:5c:f8:d6:2c:4e:33:c2:53:98:
         37:33:0a:22:16:49:d0:44:cd:12:9a:24:96:fa:a6:cd:ee:b4:
         00:a7:49:80:ab:72:41:6c:92:f2:97:47:04:1b:1b:6b:24:23:
         e5:78:11:eb:ef:f7:45:fe:03:3c:bf:dc:e0:c7:6e:e1:79:bd:
         f3:a0:d5:62:02:23:72:78:1e:f2:15:2d:ca:a3:76:39:9c:21:
         a8:6f:b6:3c:66:d4:5e:8a:ae:50:96:fe:72:e5:e5:27:2a:d3:
         4a:11:f0:ab:b2:b5:12:0b:47:b7:8f:3f:11:70:a5:51:66:be:
         48:2b:2a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:11:24 2025 by rpki-client