Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/323830313a31303a3430303a3a2f34382d3438203d3e203634313730.roa
File:                     323830313a31303a3430303a3a2f34382d3438203d3e203634313730.roa (raw, json)
Hash identifier:          i8Fr6LMAfK5/03eSqYF+k8Bms6pbEXFS2ZCXBLerAkY=
Subject key identifier:   36:B3:81:D5:97:C6:49:69:0D:C2:04:2B:D7:2C:C4:3F:0E:AA:41:A2
Certificate issuer:       /CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0
Certificate serial:       19462D5B800308A4C4ECF2B4C3EDA2A0DE1241AB
Authority key identifier: E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/323830313a31303a3430303a3a2f34382d3438203d3e203634313730.roa
Signing time:             Tue 17 Jun 2025 01:50:01 +0000
ROA not before:           Tue 17 Jun 2025 01:45:01 +0000
ROA not after:            Tue 16 Jun 2026 01:50:01 +0000
asID:                     64170
IP address blocks:        2801:10:400::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 17 Jun 2025 11:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:46:2d:5b:80:03:08:a4:c4:ec:f2:b4:c3:ed:a2:a0:de:12:41:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0
        Validity
            Not Before: Jun 17 01:45:01 2025 GMT
            Not After : Jun 16 01:50:01 2026 GMT
        Subject: CN=36B381D597C649690DC2042BD72CC43F0EAA41A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:aa:1c:cd:0b:e8:f2:0d:c5:85:c3:84:1a:
                    4b:ae:a9:f5:4f:32:ea:bc:3d:01:5f:9e:64:81:a1:
                    27:33:d4:d2:f1:58:43:69:5b:2e:56:63:df:58:18:
                    ad:e0:02:07:32:1d:4c:8e:c3:8b:75:3e:7c:6b:5c:
                    16:ff:b8:38:54:6b:e0:d9:5c:6b:18:87:73:58:4f:
                    b6:31:5a:84:05:cb:e6:f8:82:78:2f:b0:b4:46:69:
                    ba:62:bb:94:d1:16:44:9b:29:b8:cd:ef:bb:07:35:
                    c5:29:fa:90:fa:fb:50:7b:0b:01:f6:44:03:17:c9:
                    b1:a3:fd:ea:f9:52:8b:51:ee:fe:e5:1f:76:06:d8:
                    07:96:93:35:fa:b2:63:1b:b8:f1:69:55:47:aa:84:
                    bd:c0:39:86:c8:13:2f:ab:48:b6:5b:8d:30:e9:8f:
                    f6:a4:5f:ae:2b:45:0b:2f:cf:63:45:86:21:e1:58:
                    06:c2:e4:15:d0:b4:bc:9c:f1:97:4f:16:31:9a:4c:
                    4e:01:b3:d1:4b:d5:f8:b7:54:57:3c:23:f9:56:20:
                    c1:d6:69:69:05:1d:4e:bf:a6:7f:ce:d0:9d:73:d3:
                    86:4d:ae:e7:f2:db:aa:b1:5f:6d:6b:bf:dd:75:94:
                    22:2d:07:57:a5:0e:71:64:24:1a:04:6f:02:7a:40:
                    c7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B3:81:D5:97:C6:49:69:0D:C2:04:2B:D7:2C:C4:3F:0E:AA:41:A2
            X509v3 Authority Key Identifier:
                keyid:E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/323830313a31303a3430303a3a2f34382d3438203d3e203634313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:17:86:dd:93:4d:77:02:72:90:15:30:04:69:10:86:72:71:
         5a:76:e6:e5:52:b7:b5:ed:c1:13:b3:fe:46:24:bd:2c:37:ee:
         7d:61:2a:76:64:2a:67:5c:be:1b:a1:2b:34:0b:22:00:e8:3e:
         fa:3d:43:44:23:0d:e6:56:d4:1e:98:d6:e5:4d:db:ef:c0:9d:
         da:ff:2b:3b:45:8b:d7:5d:0e:20:20:e0:6a:a1:6c:54:8d:36:
         44:a1:53:3d:a8:c4:f9:d9:e0:b8:97:48:b2:78:06:1c:3e:ac:
         16:3e:50:fb:83:3c:43:ef:63:a7:d3:8a:d5:0a:33:32:04:e1:
         ca:7a:9c:26:1e:79:ef:47:ad:40:48:2c:f7:46:3c:88:77:fa:
         a5:4e:27:5d:b0:cf:f6:9f:47:bc:98:06:29:75:9e:30:d7:9a:
         d3:d1:89:7d:5e:36:cd:50:c7:a2:1e:ee:f4:f6:5f:0b:ec:1a:
         76:53:64:9b:c9:d3:3c:c8:06:b1:16:44:67:6c:8e:c4:c1:fd:
         53:5a:15:2c:68:1c:84:1b:c8:32:66:ed:34:bf:3a:19:2c:41:
         d3:7e:e4:ab:be:ea:cc:2f:10:b7:51:41:06:dd:9e:5d:82:88:
         50:a7:df:f5:b5:c3:a9:5d:9f:b2:ed:f0:28:57:86:c6:83:c0:
         4f:41:f2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----