Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/323830333a646632303a3a2f33322d3332203d3e20323636373831.roa
File:                     323830333a646632303a3a2f33322d3332203d3e20323636373831.roa (raw, json)
Hash identifier:          ajacRq5ZZsmeB1cyzR3FMrJC8ek/LeLHFHPvhbemwB8=
Subject key identifier:   66:3D:FE:B4:43:2D:6B:E7:92:D0:51:98:6C:3D:A6:FF:2C:92:F4:40
Certificate issuer:       /CN=74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483
Certificate serial:       37CA343C9A528AE8A6B1E2AFBFD7DE4BF351FA0A
Authority key identifier: 74:AA:43:08:C5:C1:EF:C7:C5:C0:06:F2:CC:6F:5C:7B:E6:02:14:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/323830333a646632303a3a2f33322d3332203d3e20323636373831.roa
Signing time:             Thu 24 Apr 2025 14:00:00 +0000
ROA not before:           Thu 24 Apr 2025 13:55:00 +0000
ROA not after:            Thu 23 Apr 2026 14:00:00 +0000
asID:                     266781
IP address blocks:        2803:df20::/32 maxlen: 32
Validation:               Failed, certificate revoked on Thu 24 Apr 2025 20:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ca:34:3c:9a:52:8a:e8:a6:b1:e2:af:bf:d7:de:4b:f3:51:fa:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483
        Validity
            Not Before: Apr 24 13:55:00 2025 GMT
            Not After : Apr 23 14:00:00 2026 GMT
        Subject: CN=663DFEB4432D6BE792D051986C3DA6FF2C92F440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4d:c0:bb:e9:c5:77:c1:4c:8c:92:87:e9:67:
                    a2:c4:4a:61:44:ce:76:91:2a:5d:9d:0d:e9:75:2e:
                    2b:9a:c3:71:a8:5a:77:61:bf:da:f7:17:c5:1f:b7:
                    20:42:be:53:cf:2b:12:53:5b:53:bc:4f:08:f3:3c:
                    12:f2:5d:d4:66:24:8f:ce:fe:aa:f0:1a:e6:cc:3e:
                    73:39:f7:25:d8:71:88:49:56:d6:3b:66:ec:39:e3:
                    f4:58:10:cc:c7:0b:46:e0:7e:06:88:7d:52:bb:6b:
                    93:4b:30:d4:44:df:f9:87:f9:f5:b0:eb:11:34:f8:
                    42:e3:9d:d3:f9:38:cf:c8:b9:b2:8a:42:06:ef:2d:
                    e9:ef:cf:55:0c:e6:19:cb:ff:b1:a0:2a:81:bc:07:
                    97:57:39:cc:1c:d4:b7:ef:3d:f1:ad:32:71:a7:e2:
                    3b:ed:30:f7:34:3c:e4:a1:b9:ee:ae:ff:d0:46:f5:
                    55:95:14:c4:28:7a:22:b5:1f:0a:8f:e7:00:16:76:
                    14:80:1c:e0:a6:bd:f3:8a:d8:43:3a:78:84:11:fe:
                    6f:20:96:26:ed:bb:ab:73:c2:70:e5:db:d6:9b:29:
                    14:f3:1f:23:0b:a3:ef:3a:23:e3:43:02:fe:d8:ea:
                    e9:b5:4a:4c:79:48:16:30:c7:66:b4:9a:f9:83:d2:
                    36:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3D:FE:B4:43:2D:6B:E7:92:D0:51:98:6C:3D:A6:FF:2C:92:F4:40
            X509v3 Authority Key Identifier:
                keyid:74:AA:43:08:C5:C1:EF:C7:C5:C0:06:F2:CC:6F:5C:7B:E6:02:14:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/323830333a646632303a3a2f33322d3332203d3e20323636373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:df20::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:07:34:da:e1:fd:fd:d1:b5:a1:3e:08:f7:ab:b8:ba:0f:39:
         04:0a:5d:6a:97:00:28:2f:b0:ca:4c:4f:3c:03:57:5b:97:c9:
         fe:80:b9:7e:46:0d:9e:59:25:0c:7a:be:91:15:a1:a5:b3:81:
         c0:cf:d3:46:d4:66:b5:4f:89:d0:d0:3d:8d:b6:e4:62:08:01:
         1a:63:37:a5:5f:ce:83:3b:d4:fc:7a:40:cf:cb:e4:76:4b:08:
         03:17:e8:6f:9d:a6:d9:23:5f:c6:14:1d:fb:e0:14:be:55:47:
         a1:17:3a:71:30:93:df:ba:e5:27:55:10:86:8b:e9:c5:3f:02:
         1e:40:1a:66:21:1f:1f:61:81:4a:29:a5:06:01:69:1d:ee:dc:
         f0:49:fc:ef:6b:ed:8e:75:fb:16:98:89:32:5d:c1:8a:e9:01:
         25:7d:2a:e5:9e:d2:9b:e3:8a:b5:8d:9f:27:b8:c1:94:8a:81:
         61:bc:6f:22:4a:23:3f:01:b1:c4:95:a5:c7:0a:1e:5a:53:33:
         79:24:fd:4a:a0:5b:3f:03:1e:d6:56:03:fa:f6:72:9b:7c:18:
         42:8e:ac:ce:b1:cc:e4:3a:b1:5d:3c:c5:7d:4a:40:6a:61:d9:
         bd:54:45:06:0f:79:6d:6b:79:95:73:64:2d:d1:13:59:41:3b:
         8c:60:e3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:20:44 2025 by rpki-client