Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830333a6438303a3a2f32392d3332203d3e203133343839.roa
File:                     323830333a6438303a3a2f32392d3332203d3e203133343839.roa (raw, json)
Hash identifier:          oAfRxPHOuhQAP6pdlMrCCtokxjYpbfZL3VyzvOoaWsY=
Subject key identifier:   0E:D7:A4:E7:B7:D7:7C:74:3C:BC:D5:6E:D6:0F:01:22:C9:C9:01:B9
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       048937B1D41855731E7A62587A20A756398E0292
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830333a6438303a3a2f32392d3332203d3e203133343839.roa
Signing time:             Mon 30 Sep 2024 22:20:00 +0000
ROA not before:           Mon 30 Sep 2024 22:15:00 +0000
ROA not after:            Mon 29 Sep 2025 22:20:00 +0000
asID:                     13489
IP address blocks:        2803:d80::/29 maxlen: 32
Validation:               Failed, certificate revoked on Mon 30 Sep 2024 22:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:89:37:b1:d4:18:55:73:1e:7a:62:58:7a:20:a7:56:39:8e:02:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Sep 30 22:15:00 2024 GMT
            Not After : Sep 29 22:20:00 2025 GMT
        Subject: CN=0ED7A4E7B7D77C743CBCD56ED60F0122C9C901B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:26:6c:cf:c6:f5:00:f0:c1:e0:65:cb:0c:be:
                    d0:9f:fd:f7:ac:e8:41:b5:df:52:64:88:b2:1f:7d:
                    42:cd:37:e0:a0:6b:2e:5a:cb:26:8d:e7:e1:81:57:
                    39:ac:64:5f:4b:47:0f:2b:ff:cd:2e:82:a4:78:66:
                    89:3b:a4:2d:a1:70:56:1a:b2:f3:b9:db:1b:9b:e6:
                    1e:ef:21:31:84:31:16:38:3a:23:76:05:d3:fb:ac:
                    fc:1c:9b:81:74:13:dd:cf:f7:fa:de:36:b5:34:3b:
                    d5:f4:33:fc:f9:b5:f1:0d:ff:0c:1d:89:bd:94:7a:
                    7b:d7:99:88:a8:23:a9:a9:26:8f:e8:6f:b8:e4:1c:
                    5b:9b:10:13:ae:9d:ca:0e:38:62:da:de:42:25:39:
                    ea:0e:b8:69:24:8d:3e:c9:e1:23:b6:49:aa:bf:25:
                    ae:c9:a1:14:63:b9:d0:e3:8b:42:35:66:0c:60:8d:
                    50:79:b0:fb:85:30:82:32:c6:5a:62:44:7f:ea:0b:
                    e3:d2:5d:30:13:11:00:22:47:16:03:f9:7d:dc:23:
                    35:9a:dd:31:ef:8a:d5:08:dc:e4:f2:b4:1d:be:2d:
                    59:1e:1d:1c:1f:47:18:5d:1f:b7:1a:4f:d9:c3:8d:
                    c4:84:52:b3:15:7c:29:91:a4:50:ea:8d:e4:c6:03:
                    1c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D7:A4:E7:B7:D7:7C:74:3C:BC:D5:6E:D6:0F:01:22:C9:C9:01:B9
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830333a6438303a3a2f32392d3332203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         51:21:36:75:72:b9:c1:4e:ac:27:0f:a9:5b:cf:36:cf:c5:77:
         d8:39:8f:a1:3f:2b:71:64:9d:1b:31:4d:6f:10:2b:fb:79:95:
         c2:e2:2b:d1:ac:bd:c7:bb:3b:c5:b6:56:f5:65:a1:53:d2:b4:
         38:0c:91:4e:92:df:4b:a3:a9:20:06:58:5e:f9:06:13:97:5d:
         e9:9c:15:40:12:36:18:d8:95:44:6f:06:87:bf:d8:22:4a:c5:
         be:80:cb:9b:71:27:a4:86:cd:fe:d8:41:e2:46:d7:4b:81:12:
         96:73:f7:a9:8c:54:00:a7:1f:80:25:83:3c:0b:66:35:06:e2:
         a2:dd:64:ac:e5:64:f2:36:cd:96:3e:e7:bc:15:d8:77:d6:a3:
         62:42:0a:a1:73:97:8b:00:c1:1c:4a:05:02:31:f6:e8:a5:02:
         79:e1:ad:ab:dc:76:c2:dd:7d:45:20:4d:68:45:bf:85:2c:c6:
         d4:6d:f6:43:1c:6f:89:52:8c:c3:a2:8a:37:a8:d5:4c:5e:c0:
         63:89:ff:bd:7d:05:12:e8:7d:e7:84:6a:0f:f7:24:77:10:51:
         b8:2d:19:1c:36:c1:df:9d:65:3b:fa:73:05:22:75:04:0e:d5:
         96:52:4f:db:1d:17:34:9c:99:71:6a:fb:10:56:12:cc:83:a8:
         74:3b:93:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:32:31 2025 by rpki-client