Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e302e302f31372d3137203d3e20323632313937.roa
File:                     3138362e3137362e302e302f31372d3137203d3e20323632313937.roa (raw, json)
Hash identifier:          I2YT6mar2eo1kyHPNY9ix7YrRbjBKe7vSjPmqNkOGZw=
Subject key identifier:   FA:BA:43:98:9A:C1:5B:55:EB:58:08:E1:CF:E0:72:B5:B2:77:C8:F2
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       52B86E684060F7F62FE98AE805695888CD8C3ACE
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e302e302f31372d3137203d3e20323632313937.roa
Signing time:             Tue 05 Mar 2024 17:59:58 +0000
ROA not before:           Tue 05 Mar 2024 17:54:58 +0000
ROA not after:            Tue 04 Mar 2025 17:59:58 +0000
asID:                     262197
IP address blocks:        186.176.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Wed 08 May 2024 20:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b8:6e:68:40:60:f7:f6:2f:e9:8a:e8:05:69:58:88:cd:8c:3a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:58 2024 GMT
            Not After : Mar  4 17:59:58 2025 GMT
        Subject: CN=FABA43989AC15B55EB5808E1CFE072B5B277C8F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:34:ca:4c:a9:8b:44:c4:dc:0d:46:c4:e0:4f:
                    aa:24:1b:af:b1:ae:8b:00:79:b2:36:80:f8:8f:44:
                    5b:79:55:ec:78:50:df:d0:1a:3a:1e:71:7f:39:6e:
                    a7:2b:a4:00:bf:3d:05:9e:0d:c5:b1:77:af:96:57:
                    b0:82:a4:2b:08:81:c5:05:57:8d:a2:8b:58:85:9e:
                    fb:21:4b:a9:40:27:38:f9:c5:5d:52:65:ba:50:c4:
                    12:62:da:c6:0a:4c:c7:ed:4e:54:d6:45:e9:5e:bb:
                    e7:fd:de:1b:96:47:a9:2e:ce:c2:7f:9e:2c:c9:40:
                    35:19:5a:31:9c:c2:95:3e:76:39:17:a8:35:14:2b:
                    a5:b5:82:ae:9d:ff:82:0b:b3:ea:cc:17:f5:14:7a:
                    7a:8e:96:51:1d:a1:77:6a:22:3f:c7:27:45:d4:cf:
                    b6:4e:7b:0a:80:ba:d4:30:ae:a2:9f:a5:de:c5:0f:
                    7a:58:82:90:9b:50:34:7c:12:ed:e0:ef:8e:4e:d8:
                    2f:73:3a:1e:73:1c:73:18:a1:dc:ea:7c:e5:1e:52:
                    e5:a8:34:a4:07:75:8a:e2:51:c9:b4:c8:f9:1b:ee:
                    2f:13:15:dd:15:0a:a2:c9:5a:da:47:d4:69:2d:4b:
                    a6:b3:2b:66:9c:fe:6c:5c:ea:fc:ef:2a:17:9a:5b:
                    8c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BA:43:98:9A:C1:5B:55:EB:58:08:E1:CF:E0:72:B5:B2:77:C8:F2
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e302e302f31372d3137203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.176.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         dd:d1:83:16:7a:07:ee:50:7c:bb:01:26:91:fd:a2:91:8a:b0:
         49:7d:64:fe:7c:45:12:76:c7:af:a4:5a:25:8a:5a:c6:a3:0f:
         7e:73:60:9b:ed:76:11:2b:09:a0:44:74:84:21:99:d2:7e:c3:
         3a:d6:26:f0:b4:9c:65:a2:22:c0:e0:b9:b6:a8:c9:da:81:23:
         99:84:97:e4:97:36:72:67:02:81:b0:f0:dd:ea:76:84:2d:30:
         ce:16:09:76:3e:af:03:07:9c:b0:b0:e4:95:50:4b:6e:81:c3:
         9d:d1:04:10:30:83:4e:0b:e9:4d:40:5e:63:14:ee:65:69:a7:
         83:59:c4:76:78:a4:3b:3f:7a:61:99:cb:c1:6d:f7:f6:51:0e:
         58:6f:44:4c:1c:00:6b:0a:54:e2:23:c2:1b:9a:d4:2a:7b:71:
         d0:1e:2c:9c:86:d2:49:3a:27:a0:47:d3:70:3c:41:e8:e2:2a:
         5e:11:de:2e:2c:d7:67:51:67:3e:df:3b:16:57:45:00:7d:3b:
         22:d7:bf:e9:2e:06:76:a7:6c:78:bf:79:1c:52:4a:5a:5c:6b:
         cc:de:cd:83:44:56:e6:cb:88:fb:77:0f:83:7b:90:c9:9e:75:
         60:a8:a9:0a:1e:ad:e5:4b:ef:c8:f1:07:96:86:01:00:f3:57:
         5a:54:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----