Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/323830333a373465303a633032353a3a2f34382d3438203d3e20323639393030.roa
File:                     323830333a373465303a633032353a3a2f34382d3438203d3e20323639393030.roa (raw, json)
Hash identifier:          VsfqOLzVe2xBtJGDtqWc8IVLSrhYkuBodIBHgTzPbis=
Subject key identifier:   47:99:87:89:9A:C5:C9:07:45:E8:53:E9:5F:2E:B9:41:CA:2F:CE:5C
Certificate issuer:       /CN=C88E06CCAFF9CD22AA83801DCA00A03F91548D6E
Certificate serial:       351520DC0461386352ECC4D917C61366C40A84CE
Authority key identifier: C8:8E:06:CC:AF:F9:CD:22:AA:83:80:1D:CA:00:A0:3F:91:54:8D:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/323830333a373465303a633032353a3a2f34382d3438203d3e20323639393030.roa
Signing time:             Tue 17 Jun 2025 21:05:00 +0000
ROA not before:           Tue 17 Jun 2025 21:00:00 +0000
ROA not after:            Tue 16 Jun 2026 21:05:00 +0000
asID:                     269900
IP address blocks:        2803:74e0:c025::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 17 Jun 2025 23:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:15:20:dc:04:61:38:63:52:ec:c4:d9:17:c6:13:66:c4:0a:84:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C88E06CCAFF9CD22AA83801DCA00A03F91548D6E
        Validity
            Not Before: Jun 17 21:00:00 2025 GMT
            Not After : Jun 16 21:05:00 2026 GMT
        Subject: CN=479987899AC5C90745E853E95F2EB941CA2FCE5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:85:f4:34:da:82:b1:4c:4f:14:25:0e:66:5a:
                    1c:ea:ec:fb:a6:57:ea:c9:c3:eb:2e:33:d5:ac:5c:
                    65:21:42:8c:ed:bf:15:a2:91:98:93:60:5a:68:25:
                    46:96:3b:65:9d:5f:4f:87:d4:4d:36:92:ed:6c:94:
                    99:1b:ec:92:40:af:a8:4d:02:c4:27:1f:9b:7b:fc:
                    26:d9:ab:66:4d:13:ca:78:68:0b:02:5b:40:b2:9c:
                    46:b3:16:66:24:0a:02:b4:c0:a9:d7:4d:b2:1b:39:
                    29:ec:01:7b:e8:d9:17:e7:6f:c9:29:b2:45:48:8b:
                    7d:15:aa:03:ba:bb:85:b6:a1:b4:68:3a:5f:4d:32:
                    ed:08:98:f1:be:30:df:a0:59:9c:43:e4:9c:a7:ff:
                    99:e7:ae:c4:17:e8:92:34:15:a4:1e:a4:51:d0:d4:
                    04:66:2d:e1:b6:32:06:66:bd:35:81:57:37:0f:1a:
                    aa:f7:39:d0:bc:15:52:f8:d9:c4:6a:e2:97:a4:2d:
                    a7:77:3c:13:49:f9:fb:cc:d0:9e:d1:6e:cd:50:4f:
                    1d:1b:c9:7b:04:a9:68:4d:1e:b9:1f:c4:fd:fe:9f:
                    1b:53:49:14:28:fb:0d:70:28:06:ab:62:bb:64:b2:
                    9c:83:66:5b:00:4b:f2:75:a0:0f:8f:7e:d1:61:9d:
                    93:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:99:87:89:9A:C5:C9:07:45:E8:53:E9:5F:2E:B9:41:CA:2F:CE:5C
            X509v3 Authority Key Identifier:
                keyid:C8:8E:06:CC:AF:F9:CD:22:AA:83:80:1D:CA:00:A0:3F:91:54:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/323830333a373465303a633032353a3a2f34382d3438203d3e20323639393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:74e0:c025::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:16:4d:c8:0d:e2:67:fb:1c:07:65:33:3e:49:5d:9c:a4:a6:
         d5:09:3d:2e:b6:b3:4e:67:8d:1b:f4:44:21:d1:de:cb:aa:93:
         08:ba:cf:25:8f:33:94:ee:68:88:a8:8b:7d:00:40:f8:b7:86:
         4b:d1:c3:ca:43:9f:c5:97:6b:39:6c:23:bc:d2:20:14:ed:ba:
         23:a9:9f:89:a4:0e:8f:57:9b:2f:3e:19:e4:00:7e:0e:fc:57:
         06:59:a2:b6:f2:c9:d6:3e:59:c9:96:ca:c6:0b:d2:16:15:1f:
         27:f4:ee:77:cd:ff:87:d0:2d:54:f5:8a:ab:49:62:3c:ae:8d:
         6c:1a:bc:6a:c4:c8:f0:62:6d:b9:00:b0:49:e3:2f:9f:f5:c3:
         91:12:e8:3a:11:9d:a7:85:b1:bd:0d:e8:89:11:89:59:2e:6a:
         40:10:01:6d:05:8c:ee:86:d5:23:12:15:53:e2:4d:21:18:2b:
         0c:79:64:88:52:43:cf:c1:13:27:11:bf:86:3f:97:cd:35:b6:
         29:76:2f:83:22:de:28:a3:8c:0c:ba:f9:c6:b2:d1:86:f2:4d:
         32:75:18:da:8c:35:f4:ed:dc:2f:cf:14:87:34:59:f9:9a:ae:
         b3:3d:97:ab:2f:d9:99:b1:8f:e5:80:bd:6e:47:bf:21:b7:7f:
         e3:d0:69:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 23 05:07:12 2025 by rpki-client