Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/e5b00567101291f33e9a1013d337145cba582b83.roa
File:                     e5b00567101291f33e9a1013d337145cba582b83.roa (raw, json)
Hash identifier:          TjU4zUeXS9ZIIsk4a2HdrNxMyf+I4+Bgc+OhIbkjal8=
Subject key identifier:   8D:5A:39:10:EF:B6:AF:66:0A:BF:1C:21:F6:08:C5:6C:12:D4:1F:FD
Certificate issuer:       /CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Certificate serial:       278A10
Authority key identifier: 34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/e5b00567101291f33e9a1013d337145cba582b83.roa
Signing time:             Sat 27 Jan 2024 05:56:22 +0000
ROA not before:           Sat 27 Jan 2024 05:56:22 +0000
ROA not after:            Tue 27 Jan 2026 05:56:22 +0000
asID:                     52228
IP address blocks:        186.15.0.0/17 maxlen: 24
                          186.15.128.0/19 maxlen: 24
                          186.15.160.0/20 maxlen: 24
                          186.15.176.0/21 maxlen: 24
                          186.159.220.0/22 maxlen: 24
                          186.159.224.0/19 maxlen: 24
                          186.159.128.0/18 maxlen: 24
                          186.159.192.0/20 maxlen: 24
                          186.159.208.0/21 maxlen: 24
                          186.159.216.0/23 maxlen: 24
                          179.50.128.0/17 maxlen: 24
                          186.64.128.0/17 maxlen: 24
                          186.15.192.0/18 maxlen: 24
                          2803:6000::/32 maxlen: 128

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 20:59:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2591248 (0x278a10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
        Validity
            Not Before: Jan 27 05:56:22 2024 GMT
            Not After : Jan 27 05:56:22 2026 GMT
        Subject: CN=e5b00567101291f33e9a1013d337145cba582b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:c6:9a:c6:88:f8:04:b5:85:6c:85:a8:8d:
                    d5:1a:99:0b:59:15:aa:84:83:df:74:c6:43:0c:4a:
                    bd:c2:95:fd:43:e5:44:36:85:e3:0c:bb:e7:f9:8e:
                    da:96:0e:90:ea:06:8e:84:7d:28:61:3a:db:26:cc:
                    66:cf:e5:e9:69:70:f6:a3:8f:f7:32:2f:3d:5c:84:
                    5c:3e:e2:12:60:79:f4:5e:ac:c6:4f:88:a8:28:9b:
                    af:17:8b:50:84:d4:9d:8a:97:b9:c0:38:8e:1d:e8:
                    14:e7:fb:bd:60:0c:5b:05:dd:05:4d:5d:0a:60:aa:
                    f1:f1:63:ea:ac:7d:17:1a:0e:c4:14:80:c1:2b:1e:
                    f1:06:2d:72:57:77:05:c6:05:04:cb:37:4b:03:54:
                    6a:72:a0:83:fe:e6:f5:6d:2d:60:11:76:51:a2:a7:
                    83:14:3f:5b:14:87:5e:1c:65:d5:23:f4:95:09:50:
                    2d:0a:0c:5c:48:4f:8d:20:dc:8c:a6:c5:a0:ea:75:
                    2c:f5:e9:4c:d0:bc:8f:e6:82:ba:2a:4e:e5:72:f2:
                    3e:c7:10:58:59:db:01:32:af:b3:41:7c:55:56:b5:
                    51:09:e8:8a:92:be:c9:a7:3b:c8:8b:d8:38:df:3e:
                    32:92:02:c7:e4:ea:e2:12:d8:1b:e4:bb:ec:60:61:
                    c2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5A:39:10:EF:B6:AF:66:0A:BF:1C:21:F6:08:C5:6C:12:D4:1F:FD
            X509v3 Authority Key Identifier:
                keyid:34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/e5b00567101291f33e9a1013d337145cba582b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.128.0/17
                  186.15.0.0-186.15.183.255
                  186.15.192.0/18
                  186.64.128.0/17
                  186.159.128.0-186.159.217.255
                  186.159.220.0-186.159.255.255
                IPv6:
                  2803:6000::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:35:f9:b1:85:af:a9:bc:cb:6b:31:61:24:47:94:43:19:12:
         1a:6d:bb:4e:99:5b:f3:a0:bb:a9:1f:75:fd:b0:d3:77:b4:a3:
         fc:e0:ef:f9:56:34:44:dc:06:58:14:f1:64:0c:7b:98:9f:65:
         0a:27:59:15:63:78:d7:97:ed:a4:71:32:f8:e9:2a:40:2d:fd:
         23:9d:07:0a:ea:95:df:b7:47:0f:f6:de:e1:a0:6d:6f:d2:79:
         bb:c0:df:9d:e2:5f:21:07:a0:1d:4d:44:ba:f4:33:88:43:62:
         ba:a5:c3:09:a4:8f:d1:17:de:fa:72:b1:84:39:0c:07:2d:f3:
         ad:28:6c:05:e6:ad:4c:69:a3:c4:b2:56:b2:93:df:ac:54:49:
         9c:24:6e:f4:2d:9c:11:44:d7:bf:66:fc:a3:a2:91:fc:53:ea:
         02:44:32:73:f3:ef:22:f8:42:83:83:23:4f:5c:65:9c:dd:c9:
         de:3b:b1:c5:79:94:9a:45:3c:ee:8b:65:bd:7b:85:32:b6:5b:
         2a:79:c9:6f:76:63:94:20:0d:47:cb:a0:e7:6c:7c:d3:03:fb:
         f0:c6:07:58:11:26:3e:63:87:45:02:c1:3c:15:cd:fb:1e:ed:
         b3:60:0b:8b:dc:55:8b:a2:70:7e:57:e4:88:33:ea:c1:8e:36:
         43:a8:4e:91
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIDJ4oQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdk
NjY2ZmM5NmM4N2I3MTNjMWYxZmM2YjI4OWU1MWZhZTI5OGE5ZmYwHhcNMjQwMTI3
MDU1NjIyWhcNMjYwMTI3MDU1NjIyWjAzMTEwLwYDVQQDEyhlNWIwMDU2NzEwMTI5
MWYzM2U5YTEwMTNkMzM3MTQ1Y2JhNTgyYjgzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqZHGmsaI+AS1hWyFqI3VGpkLWRWqhIPfdMZDDEq9wpX9Q+VE
NoXjDLvn+Y7alg6Q6gaOhH0oYTrbJsxmz+XpaXD2o4/3Mi89XIRcPuISYHn0XqzG
T4ioKJuvF4tQhNSdipe5wDiOHegU5/u9YAxbBd0FTV0KYKrx8WPqrH0XGg7EFIDB
Kx7xBi1yV3cFxgUEyzdLA1RqcqCD/ub1bS1gEXZRoqeDFD9bFIdeHGXVI/SVCVAt
CgxcSE+NINyMpsWg6nUs9elM0LyP5oK6Kk7lcvI+xxBYWdsBMq+zQXxVVrVRCeiK
kr7JpzvIi9g43z4ykgLH5OriEtgb5LvsYGHCqwIDAQABo4ICnjCCApowHQYDVR0O
BBYEFI1aORDvtq9mCr8cIfYIxWwS1B/9MB8GA1UdIwQYMBaAFDRGFVM9N+d+5XHJ
0pVIYegs/s8mMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2Q2NjZm
Yzk2Yzg3YjcxM2MxZjFmYzZiMjg5ZTUxZmFlMjk4YTlmZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjUwNTRjMGYtMTk4YS00N2M2LWIxMTItMTUyZTM0
NjAyMzhjL2U1YjAwNTY3MTAxMjkxZjMzZTlhMTAxM2QzMzcxNDVjYmE1ODJiODMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNTA1NGMwZi0xOThhLTQ3YzYtYjExMi0xNTJl
MzQ2MDIzOGMvN2Q2NjZmYzk2Yzg3YjcxM2MxZjFmYzZiMjg5ZTUxZmFlMjk4YTlm
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBiBggrBgEFBQcBBwEB/wRT
MFEwQAQCAAEwOgMEB7MygDALAwMAug8DBAO6D7ADBAa6D8ADBAe6QIAwDAMEB7qf
gAMEAbqf2DALAwQCup/cAwMFuoAwDQQCAAIwBwMFACgDYAAwDQYJKoZIhvcNAQEL
BQADggEBAF81+bGFr6m8y2sxYSRHlEMZEhptu06ZW/Ogu6kfdf2w03e0o/zg7/lW
NETcBlgU8WQMe5ifZQonWRVjeNeX7aRxMvjpKkAt/SOdBwrqld+3Rw/23uGgbW/S
ebvA353iXyEHoB1NRLr0M4hDYrqlwwmkj9EX3vpysYQ5DAct860obAXmrUxpo8Sy
VrKT36xUSZwkbvQtnBFE179m/KOikfxT6gJEMnPz7yL4QoODI09cZZzdyd47scV5
lJpFPO6LZb17hTK2Wyp5yW92Y5QgDUfLoOdsfNMD+/DGB1gRJj5jh0UCwTwVzfse
7bNgC4vcVYuicH5X5Igz6sGONkOoTpE=
-----END CERTIFICATE-----
Generated at Thu Feb 1 00:36:23 2024 by rpki-client on console-ams.rpki-client.org