Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e302e302f31372d3234203d3e203230323939.roa
File:                     3138362e3137362e302e302f31372d3234203d3e203230323939.roa (raw, json)
Hash identifier:          iWO5gm72tLQokbVmyXIVGTd4Lo9TFPmGlMPVyhG8glQ=
Subject key identifier:   BD:21:A0:D3:1B:EE:36:3A:F7:ED:89:9B:61:6C:9E:98:B0:3E:2C:3B
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       3837128302E6E5D544CB76551E5497C2AB7938D1
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e302e302f31372d3234203d3e203230323939.roa
Signing time:             Tue 05 Mar 2024 17:59:49 +0000
ROA not before:           Tue 05 Mar 2024 17:54:49 +0000
ROA not after:            Tue 04 Mar 2025 17:59:49 +0000
asID:                     20299
IP address blocks:        186.176.0.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 May 2024 20:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:37:12:83:02:e6:e5:d5:44:cb:76:55:1e:54:97:c2:ab:79:38:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:49 2024 GMT
            Not After : Mar  4 17:59:49 2025 GMT
        Subject: CN=BD21A0D31BEE363AF7ED899B616C9E98B03E2C3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:8d:30:98:d5:19:9b:d5:74:f9:64:4c:8b:
                    b4:2e:ef:d5:a0:57:c2:1c:2e:1a:40:74:a4:bf:02:
                    35:d0:86:f6:80:f0:e0:fa:56:86:d4:26:06:2a:99:
                    d4:2f:02:2a:1f:c5:23:83:fa:c9:e9:8f:78:8b:1c:
                    b4:0f:1a:bb:21:09:d7:7c:26:3f:3d:e7:9c:73:28:
                    68:45:ba:ca:c7:5a:d0:1e:08:98:cf:c1:86:20:74:
                    33:bc:27:99:fd:d1:76:d2:87:ea:3d:88:3e:25:9d:
                    0a:b6:20:b8:df:63:87:09:d9:a9:c6:37:e2:c2:2f:
                    b1:53:bd:7d:89:26:9b:70:c8:46:70:eb:52:dc:10:
                    eb:2a:ab:ff:92:63:88:ef:2a:3d:21:2e:f2:fc:86:
                    85:4a:50:b2:74:c1:d5:d6:76:e3:fb:5c:a7:43:2f:
                    c6:5c:7a:c0:bb:1d:73:45:a9:4e:65:87:7f:95:bd:
                    3e:e9:23:ec:4b:53:7e:0a:95:b9:87:85:a9:40:04:
                    65:9a:16:f8:75:2d:a6:b3:fd:00:00:ad:47:1b:fe:
                    aa:a8:ec:05:7b:b0:5d:dc:47:1a:91:fe:fe:70:42:
                    40:24:ca:d1:72:0b:bc:f6:ca:8c:1a:49:4e:14:16:
                    51:88:60:2d:99:1d:f0:b7:79:3f:61:49:a5:12:fc:
                    87:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:21:A0:D3:1B:EE:36:3A:F7:ED:89:9B:61:6C:9E:98:B0:3E:2C:3B
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e302e302f31372d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.176.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         94:8f:4b:03:8c:79:4d:aa:07:79:0f:0f:a0:92:c8:55:58:01:
         78:92:a7:34:b9:f6:90:41:b7:88:2b:1a:d2:cf:c4:cf:da:a7:
         3c:7a:0c:c8:78:d1:51:9c:f7:0f:40:37:43:bd:c6:0d:f4:c4:
         99:74:7d:dc:d3:e6:25:3a:5e:43:2e:91:59:12:91:a5:bb:4d:
         f3:ac:9b:e3:eb:1b:84:c9:9b:12:cc:a7:56:a1:85:09:e7:6a:
         9d:3e:08:20:fd:db:36:7a:0b:6a:01:92:0c:df:30:76:4d:d8:
         d7:f5:36:3b:3c:d1:09:7f:0e:41:3d:d3:8b:db:e1:b9:1d:c5:
         31:a7:cf:ce:8f:61:b4:a4:ab:9b:71:43:1f:d7:53:16:8e:1e:
         77:3a:50:74:af:8c:71:67:0a:21:41:42:51:02:59:6c:26:94:
         e3:28:fc:22:25:3b:c2:f7:78:a4:5d:d1:ed:b0:f3:67:ba:9f:
         d7:85:37:76:85:79:f4:f0:f2:eb:fe:9a:74:98:9b:70:3e:2b:
         34:24:7d:5c:aa:26:0f:a7:34:47:11:5f:14:ff:d0:27:0f:e7:
         c9:c6:1d:49:f0:29:03:3c:c2:2e:e5:d3:b5:cf:2a:35:16:10:
         3c:fd:e8:af:72:0e:d1:d4:ba:29:25:09:53:fc:0c:79:0a:cc:
         3c:59:a8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 23:03:51 2024 by rpki-client on console-ams.rpki-client.org