Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3132382e302f31372d3234203d3e203230323939.roa
File:                     3138362e3137362e3132382e302f31372d3234203d3e203230323939.roa (raw, json)
Hash identifier:          FI15on6d1hgVqMoNAApXMjKRisSnaeR6U+aHLw4JCKw=
Subject key identifier:   88:F4:20:05:24:C7:D8:FF:52:44:3A:C6:40:0C:9E:CB:84:A2:DD:0F
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       5C8AEB551AFF2DF85A4A10FE205ABF0F9479314C
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3132382e302f31372d3234203d3e203230323939.roa
Signing time:             Tue 05 Mar 2024 17:59:51 +0000
ROA not before:           Tue 05 Mar 2024 17:54:51 +0000
ROA not after:            Tue 04 Mar 2025 17:59:51 +0000
asID:                     20299
IP address blocks:        186.176.128.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 May 2024 20:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8a:eb:55:1a:ff:2d:f8:5a:4a:10:fe:20:5a:bf:0f:94:79:31:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:51 2024 GMT
            Not After : Mar  4 17:59:51 2025 GMT
        Subject: CN=88F4200524C7D8FF52443AC6400C9ECB84A2DD0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:cf:78:f3:43:5f:a8:1f:34:7b:d3:6a:38:
                    c4:b0:2a:a9:1b:b7:65:75:0c:3a:7d:e9:27:d8:48:
                    8b:9c:53:bd:2b:ec:4a:ae:f3:3e:d7:f7:36:34:ae:
                    cc:55:84:39:ad:cb:a0:96:5d:f4:48:22:dd:81:6b:
                    f8:e4:4e:4b:4f:3f:62:1c:df:51:28:5a:28:b8:cb:
                    17:5a:1a:20:23:0b:01:49:84:f4:ba:61:36:e8:5b:
                    f3:0b:9b:fe:d8:7e:a0:b1:bc:94:0f:54:3c:b4:68:
                    d1:b8:00:39:c0:20:e2:75:5e:3e:6f:9f:c8:be:09:
                    83:b5:a7:5f:59:17:d2:c6:f8:e5:11:21:2c:03:a0:
                    20:fe:f0:67:f3:83:34:30:10:b6:01:b3:0c:58:00:
                    2f:07:cf:42:ba:24:10:a5:fc:3f:ed:9a:4d:3d:8a:
                    73:3a:a6:01:af:7f:bd:02:f1:ed:2f:ec:42:5d:f8:
                    a8:e4:06:86:de:b9:93:15:60:61:82:21:c1:44:10:
                    35:99:1d:6b:0e:bc:b9:11:70:6e:32:b3:0a:f9:e4:
                    b2:02:8a:61:74:ad:0b:1f:36:1d:f7:88:c2:2b:bb:
                    8c:9a:6e:39:0e:72:7d:bd:a2:9c:8d:74:d5:ba:d6:
                    83:d7:3e:ad:b2:92:23:73:98:30:59:0d:88:00:28:
                    5f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F4:20:05:24:C7:D8:FF:52:44:3A:C6:40:0C:9E:CB:84:A2:DD:0F
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3132382e302f31372d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.176.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         47:f5:d9:c9:cc:ff:99:74:ff:cb:f0:c7:60:af:28:e4:79:49:
         3e:6f:ea:36:db:dd:ce:0f:44:dc:06:35:42:27:5f:fc:75:8c:
         4d:a4:4a:cf:3c:4d:b3:ed:58:92:16:01:4d:2b:83:f5:90:94:
         24:ae:54:27:bf:ce:dd:63:c6:a4:b0:f6:66:15:ba:84:b4:cc:
         99:9c:51:18:c1:84:24:64:b8:e5:57:64:2a:c2:38:dd:1a:e6:
         d4:f0:ad:cf:f5:5f:38:df:d9:54:94:0e:68:fb:4d:ba:75:f6:
         a7:00:0f:0a:56:e8:ee:83:1b:dd:12:07:9b:30:b9:62:72:9c:
         be:b9:58:b1:73:50:d2:b5:64:53:03:e6:7e:33:62:a5:cc:39:
         22:12:b5:2f:31:50:9f:28:cc:23:84:7c:d4:51:9e:a7:54:3c:
         ea:78:75:dc:3d:21:47:2c:9b:55:7d:14:45:53:99:e2:fe:c4:
         de:7f:68:63:e5:e5:db:7f:f9:fa:08:53:cd:47:83:ca:01:8b:
         24:8e:0d:c2:36:3d:32:60:1f:01:06:18:d8:13:3e:af:f4:03:
         19:e1:aa:82:93:d0:8c:9d:77:c5:cb:9c:ef:af:61:ad:4c:a0:
         98:ff:44:e8:48:98:4b:81:c9:a3:d0:f8:da:40:50:b1:90:f1:
         48:b0:f1:3f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXIrrVRr/LfhaShD+IFq/D5R5MUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBNTUxMEM3RkNEOTY2RTAyNDg2RDMyNTcyQkY2QkNC
MUI4RkYyRTAeFw0yNDAzMDUxNzU0NTFaFw0yNTAzMDQxNzU5NTFaMDMxMTAvBgNV
BAMTKDg4RjQyMDA1MjRDN0Q4RkY1MjQ0M0FDNjQwMEM5RUNCODRBMkREMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Z89480NfqB80e9NqOMSwKqkb
t2V1DDp96SfYSIucU70r7Equ8z7X9zY0rsxVhDmty6CWXfRIIt2Ba/jkTktPP2Ic
31EoWii4yxdaGiAjCwFJhPS6YTboW/MLm/7YfqCxvJQPVDy0aNG4ADnAIOJ1Xj5v
n8i+CYO1p19ZF9LG+OURISwDoCD+8GfzgzQwELYBswxYAC8Hz0K6JBCl/D/tmk09
inM6pgGvf70C8e0v7EJd+KjkBobeuZMVYGGCIcFEEDWZHWsOvLkRcG4yswr55LIC
imF0rQsfNh33iMIru4yabjkOcn29opyNdNW61oPXPq2ykiNzmDBZDYgAKF85AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUiPQgBSTH2P9SRDrGQAyey4Si3Q8wHwYDVR0j
BBgwFoAU5aVRDH/Nlm4CSG0yVyv2vLG4/y4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MkU3MDg2ODkwNENFRTdCQUNDNDgzNzlBQTNGMkUyNjkz
QUUxMzI5MTQxMUM1OEYzMzlCNDI3RjMzMEE5OEJGLzAvRTVBNTUxMEM3RkNEOTY2
RTAyNDg2RDMyNTcyQkY2QkNCMUI4RkYyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUE1NTEwQzdGQ0Q5NjZFMDI0
ODZEMzI1NzJCRjZCQ0IxQjhGRjJFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTJFNzA4Njg5MDRDRUU3QkFDQzQ4Mzc5QUEzRjJFMjY5M0FFMTMyOTE0
MTFDNThGMzM5QjQyN0YzMzBBOThCRi8wLzMxMzgzNjJlMzEzNzM2MmUzMTMyMzgy
ZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMjMwMzIzOTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHurCA
MA0GCSqGSIb3DQEBCwUAA4IBAQBH9dnJzP+ZdP/L8MdgryjkeUk+b+o2293OD0Tc
BjVCJ1/8dYxNpErPPE2z7ViSFgFNK4P1kJQkrlQnv87dY8aksPZmFbqEtMyZnFEY
wYQkZLjlV2QqwjjdGubU8K3P9V8439lUlA5o+026dfanAA8KVujugxvdEgebMLli
cpy+uVixc1DStWRTA+Z+M2KlzDkiErUvMVCfKMwjhHzUUZ6nVDzqeHXcPSFHLJtV
fRRFU5ni/sTef2hj5eXbf/n6CFPNR4PKAYskjg3CNj0yYB8BBhjYEz6v9AMZ4aqC
k9CMnXfFy5zvr2GtTKCY/0ToSJhLgcmj0PjaQFCxkPFIsPE/
-----END CERTIFICATE-----
Generated at Thu May 9 00:00:30 2024 by rpki-client on console-fra.rpki-client.org