Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/323830333a313231303a3a2f33322d3438203d3e203230343733.roa
File:                     323830333a313231303a3a2f33322d3438203d3e203230343733.roa (raw, json)
Hash identifier:          vIJnDwsk4uTkUkA7x/6gNIr+AK5DX7Aa+t3LWKwnH3o=
Subject key identifier:   E5:A7:11:D0:87:22:A9:EE:D0:C6:03:35:D6:FB:40:3A:8F:FF:97:B4
Certificate issuer:       /CN=C63FB072C318744286AE683521DFED7AF1E0B944
Certificate serial:       3DACB2CEEA1CC185672F7317C6B26F60F60E44A2
Authority key identifier: C6:3F:B0:72:C3:18:74:42:86:AE:68:35:21:DF:ED:7A:F1:E0:B9:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C63FB072C318744286AE683521DFED7AF1E0B944.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/323830333a313231303a3a2f33322d3438203d3e203230343733.roa
Signing time:             Mon 21 Apr 2025 05:50:00 +0000
ROA not before:           Mon 21 Apr 2025 05:45:00 +0000
ROA not after:            Mon 20 Apr 2026 05:50:00 +0000
asID:                     20473
IP address blocks:        2803:1210::/32 maxlen: 48
Validation:               Failed, certificate revoked on Mon 21 Apr 2025 06:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ac:b2:ce:ea:1c:c1:85:67:2f:73:17:c6:b2:6f:60:f6:0e:44:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C63FB072C318744286AE683521DFED7AF1E0B944
        Validity
            Not Before: Apr 21 05:45:00 2025 GMT
            Not After : Apr 20 05:50:00 2026 GMT
        Subject: CN=E5A711D08722A9EED0C60335D6FB403A8FFF97B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9f:4d:de:25:b0:1e:d0:23:c1:7d:f4:e4:a6:
                    37:cd:d4:a0:14:5b:e6:9b:81:7d:03:58:17:98:98:
                    21:59:07:d3:71:4f:f0:b0:f3:f0:8c:15:8a:d7:ad:
                    b1:70:ef:88:45:be:76:d9:49:c8:0b:0c:54:29:b3:
                    83:93:b4:44:a2:2c:aa:26:4f:ea:e3:cc:66:6b:9c:
                    ea:98:65:54:1e:fd:17:f8:32:5a:89:69:60:62:94:
                    11:87:ab:89:df:b2:c7:96:e6:c9:bb:45:d5:75:5e:
                    51:34:74:1d:b1:e0:41:01:4a:cd:b3:ee:c4:58:7f:
                    1d:27:77:79:9d:9f:58:1c:47:6f:62:ba:83:50:8c:
                    d6:ff:5d:e7:98:ed:04:c2:ad:70:f5:4a:77:e9:3b:
                    eb:42:e0:11:d6:a6:b6:22:07:ae:1d:e4:ec:97:d9:
                    91:3d:ee:ec:a3:e2:8b:a2:e9:e1:f7:13:c1:ed:c8:
                    00:99:45:65:0f:61:80:0a:6d:ab:d5:00:7e:cf:83:
                    dc:86:11:f3:70:2d:64:0b:7c:81:73:d5:27:55:76:
                    88:1a:35:c4:ca:82:04:27:15:07:80:52:38:9d:c3:
                    0c:46:8a:36:1a:b6:a8:a4:78:a4:08:83:e1:73:b1:
                    0e:71:89:0b:fb:e4:74:12:12:63:55:fc:bb:cc:17:
                    7c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A7:11:D0:87:22:A9:EE:D0:C6:03:35:D6:FB:40:3A:8F:FF:97:B4
            X509v3 Authority Key Identifier:
                keyid:C6:3F:B0:72:C3:18:74:42:86:AE:68:35:21:DF:ED:7A:F1:E0:B9:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/C63FB072C318744286AE683521DFED7AF1E0B944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C63FB072C318744286AE683521DFED7AF1E0B944.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/323830333a313231303a3a2f33322d3438203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1210::/32

    Signature Algorithm: sha256WithRSAEncryption
         da:03:2c:b3:f5:da:df:d1:e4:c8:12:3b:1d:64:91:6a:11:2b:
         0c:26:c7:08:d2:29:eb:7d:bc:b0:2e:cb:7e:30:af:a6:8b:3d:
         60:e0:b3:15:73:83:f9:21:d7:63:71:8c:03:fd:84:f6:72:70:
         65:f0:b6:07:48:3f:9e:99:f7:06:c1:1f:3b:60:a1:de:2b:15:
         54:b2:60:c3:87:a6:8c:a1:2c:46:4a:b3:24:66:a6:66:33:10:
         c5:da:54:d0:40:ae:18:4c:72:54:e6:4d:2e:c5:4e:ce:f3:0e:
         d1:78:fc:9e:f8:5f:65:6d:55:29:74:c1:80:dc:fc:fc:33:0a:
         71:c8:fb:4d:cb:7c:15:85:cc:df:fd:9d:24:61:dd:cd:6b:60:
         8c:f3:8c:ff:ce:10:bd:e9:88:3c:ab:88:a8:d1:6c:31:95:3f:
         de:11:ac:f4:eb:fa:48:c3:cb:15:39:19:0d:ee:19:a0:f7:f5:
         7a:94:b2:7c:88:84:df:46:7a:25:26:e5:7c:83:ae:18:30:07:
         3b:ee:ac:7d:7c:83:90:5b:b4:c2:8e:4f:ff:f6:9c:6f:03:cf:
         7f:f5:66:2c:e6:56:e2:15:7a:6e:00:7d:84:d4:9b:71:b9:86:
         84:92:e0:b1:79:61:94:48:08:d7:7f:fe:9f:19:f9:f7:0e:0c:
         be:cd:41:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:53:12 2025 by rpki-client