Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e302e302f31372d3234203d3e20323632313937.roa
File:                     3138362e3137362e302e302f31372d3234203d3e20323632313937.roa (raw, json)
Hash identifier:          VIGQXb/oVE0MPiItpDYVDqbTyvFEn8AhdIETebDWPFo=
Subject key identifier:   BD:9B:50:2F:83:ED:13:31:0E:CE:5E:E1:CF:42:EA:B3:E8:BC:45:47
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       69A51BBCFF947A502838016F6FCE9C8B8A8D9511
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e302e302f31372d3234203d3e20323632313937.roa
Signing time:             Tue 05 Mar 2024 17:59:52 +0000
ROA not before:           Tue 05 Mar 2024 17:54:52 +0000
ROA not after:            Tue 04 Mar 2025 17:59:52 +0000
asID:                     262197
IP address blocks:        186.176.0.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 May 2024 20:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a5:1b:bc:ff:94:7a:50:28:38:01:6f:6f:ce:9c:8b:8a:8d:95:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:52 2024 GMT
            Not After : Mar  4 17:59:52 2025 GMT
        Subject: CN=BD9B502F83ED13310ECE5EE1CF42EAB3E8BC4547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:72:f0:ac:70:c3:d6:7e:a5:f7:3e:fa:f4:f8:
                    ef:69:b0:08:98:14:c5:5a:cd:51:9f:c5:8e:18:10:
                    77:bf:ba:d8:5d:2d:c6:f9:ef:b0:87:39:15:c2:29:
                    24:53:2f:1b:f0:f2:06:5a:4b:73:e4:f2:40:b2:6a:
                    fc:a9:24:51:00:29:31:e0:9d:fb:4c:4c:83:0c:f8:
                    cb:3a:12:99:b6:05:fb:27:99:e6:06:93:48:a5:39:
                    87:74:02:56:bd:0f:2c:b9:a9:84:7d:44:cb:70:e7:
                    11:9a:11:b8:26:19:89:59:e1:16:31:61:9d:d2:c6:
                    fc:5e:d9:e0:cc:28:f1:9c:4e:8d:8e:4e:e5:23:e9:
                    8c:c8:fc:a6:b4:92:d5:95:23:90:17:4e:f4:00:61:
                    1f:65:47:d5:ae:2b:08:7b:ae:aa:13:b6:bc:62:af:
                    52:e5:40:8d:ba:8e:ce:fa:2e:77:50:3e:03:67:f6:
                    66:1f:21:b9:ee:ba:cc:da:94:a9:9d:13:04:23:87:
                    b9:76:58:be:f0:68:47:7d:9c:8d:5b:97:6c:41:c4:
                    3c:32:51:aa:99:b7:60:c3:9b:49:ff:d4:f4:56:67:
                    0b:fe:b1:a8:0c:f4:97:9a:bf:1c:1a:9a:a8:3a:15:
                    70:3f:d1:65:9c:c2:c5:a7:34:f1:8b:da:78:e3:3f:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9B:50:2F:83:ED:13:31:0E:CE:5E:E1:CF:42:EA:B3:E8:BC:45:47
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e302e302f31372d3234203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.176.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a2:7d:fd:40:aa:fe:91:75:70:21:eb:0e:19:56:1a:f7:84:f9:
         36:05:c4:50:ef:90:62:7d:ca:06:0d:26:03:68:ba:c8:b2:0b:
         b1:7c:c8:4c:e7:66:d0:c9:3f:8f:72:4a:07:9a:32:f0:ca:bb:
         0a:53:7f:2c:7a:df:a9:27:76:a0:d3:8d:6e:e0:a2:ce:51:70:
         12:d5:38:07:c9:d7:06:71:b5:07:d5:43:dd:80:8b:96:08:cf:
         7b:5a:76:18:f9:99:4e:25:26:f5:87:c2:f1:76:b1:2a:13:93:
         69:ef:27:8e:87:30:27:d9:ce:30:7b:bc:29:cd:e5:55:9c:8d:
         9c:bd:30:aa:0e:c2:84:3b:fd:e9:ec:e0:f9:ad:ce:4d:53:78:
         4a:04:56:ae:44:6e:02:bc:60:f5:a7:4b:d7:83:33:17:e7:c2:
         88:d0:14:6c:31:02:ee:a1:7b:8a:f4:2d:6d:34:55:a8:77:19:
         e8:15:88:92:3e:31:56:e7:05:5a:bd:61:d2:94:bf:d1:11:c6:
         17:7e:14:24:27:7a:22:7a:89:16:3d:af:2b:92:81:32:a6:f2:
         63:94:8b:b0:87:1c:da:31:51:9b:cc:33:ca:ef:19:a4:d5:18:
         1a:e3:30:ed:ac:d6:9c:31:c9:9a:fa:01:67:29:6a:61:6e:2f:
         41:a1:4f:12
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUaaUbvP+UelAoOAFvb86ci4qNlREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBNTUxMEM3RkNEOTY2RTAyNDg2RDMyNTcyQkY2QkNC
MUI4RkYyRTAeFw0yNDAzMDUxNzU0NTJaFw0yNTAzMDQxNzU5NTJaMDMxMTAvBgNV
BAMTKEJEOUI1MDJGODNFRDEzMzEwRUNFNUVFMUNGNDJFQUIzRThCQzQ1NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDocvCscMPWfqX3Pvr0+O9psAiY
FMVazVGfxY4YEHe/uthdLcb577CHORXCKSRTLxvw8gZaS3Pk8kCyavypJFEAKTHg
nftMTIMM+Ms6Epm2BfsnmeYGk0ilOYd0Ala9Dyy5qYR9RMtw5xGaEbgmGYlZ4RYx
YZ3Sxvxe2eDMKPGcTo2OTuUj6YzI/Ka0ktWVI5AXTvQAYR9lR9WuKwh7rqoTtrxi
r1LlQI26js76LndQPgNn9mYfIbnuuszalKmdEwQjh7l2WL7waEd9nI1bl2xBxDwy
UaqZt2DDm0n/1PRWZwv+sagM9Jeavxwamqg6FXA/0WWcwsWnNPGL2njjP6ylAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUvZtQL4PtEzEOzl7hz0Lqs+i8RUcwHwYDVR0j
BBgwFoAU5aVRDH/Nlm4CSG0yVyv2vLG4/y4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MkU3MDg2ODkwNENFRTdCQUNDNDgzNzlBQTNGMkUyNjkz
QUUxMzI5MTQxMUM1OEYzMzlCNDI3RjMzMEE5OEJGLzAvRTVBNTUxMEM3RkNEOTY2
RTAyNDg2RDMyNTcyQkY2QkNCMUI4RkYyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUE1NTEwQzdGQ0Q5NjZFMDI0
ODZEMzI1NzJCRjZCQ0IxQjhGRjJFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTJFNzA4Njg5MDRDRUU3QkFDQzQ4Mzc5QUEzRjJFMjY5M0FFMTMyOTE0
MTFDNThGMzM5QjQyN0YzMzBBOThCRi8wLzMxMzgzNjJlMzEzNzM2MmUzMDJlMzAy
ZjMxMzcyZDMyMzQyMDNkM2UyMDMyMzYzMjMxMzkzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB7qwADAN
BgkqhkiG9w0BAQsFAAOCAQEAon39QKr+kXVwIesOGVYa94T5NgXEUO+QYn3KBg0m
A2i6yLILsXzITOdm0Mk/j3JKB5oy8Mq7ClN/LHrfqSd2oNONbuCizlFwEtU4B8nX
BnG1B9VD3YCLlgjPe1p2GPmZTiUm9YfC8XaxKhOTae8njocwJ9nOMHu8Kc3lVZyN
nL0wqg7ChDv96ezg+a3OTVN4SgRWrkRuArxg9adL14MzF+fCiNAUbDEC7qF7ivQt
bTRVqHcZ6BWIkj4xVucFWr1h0pS/0RHGF34UJCd6InqJFj2vK5KBMqbyY5SLsIcc
2jFRm8wzyu8ZpNUYGuMw7azWnDHJmvoBZylqYW4vQaFPEg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org