Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3132382e302f31372d3234203d3e20323632313937.roa
File:                     3138362e3137362e3132382e302f31372d3234203d3e20323632313937.roa (raw, json)
Hash identifier:          qhrQqE3Yri+Y93w4WyLB1W1R07GqmQVl5D/Y2/2DHtA=
Subject key identifier:   33:1C:28:78:77:F6:FA:24:BA:98:E4:1A:42:A1:3F:A9:19:F8:77:21
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       1358B42CA99A16C377BE277DD64FBCA08A95D4B1
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3132382e302f31372d3234203d3e20323632313937.roa
Signing time:             Tue 05 Mar 2024 18:00:05 +0000
ROA not before:           Tue 05 Mar 2024 17:55:05 +0000
ROA not after:            Tue 04 Mar 2025 18:00:05 +0000
asID:                     262197
IP address blocks:        186.176.128.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 May 2024 20:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:58:b4:2c:a9:9a:16:c3:77:be:27:7d:d6:4f:bc:a0:8a:95:d4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:55:05 2024 GMT
            Not After : Mar  4 18:00:05 2025 GMT
        Subject: CN=331C287877F6FA24BA98E41A42A13FA919F87721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:20:f4:fc:c8:7f:61:c1:f2:90:ee:1a:e0:b9:
                    9a:57:2d:2e:03:55:fc:e5:8a:50:f3:46:1a:13:ac:
                    63:02:5e:0c:d2:8a:6c:d1:0b:96:0c:16:96:f0:98:
                    4f:67:6c:cc:7d:9d:4a:1a:c7:47:64:60:00:83:5b:
                    01:99:90:78:cd:92:c0:7b:44:a7:bb:66:5b:13:9b:
                    ae:5a:19:c4:93:39:15:f3:07:f2:3a:38:76:75:44:
                    4a:d7:34:a2:8f:c3:c6:68:5a:35:7b:85:74:8f:80:
                    7b:a0:3e:de:d1:73:0d:dc:21:91:80:64:eb:fb:d3:
                    09:d5:e4:24:6f:10:47:e5:4b:31:2d:f2:4f:93:5e:
                    63:a2:90:92:69:98:06:df:d8:18:d6:02:3b:ac:b3:
                    c5:46:3e:11:65:f0:ad:ee:2a:66:a8:14:76:a0:9a:
                    b8:2d:ef:75:69:22:d7:b1:52:98:51:fa:5b:2b:23:
                    53:c0:1e:22:97:34:dc:88:59:89:72:24:b1:cf:57:
                    7c:fc:63:fe:ba:89:90:cd:55:96:20:50:dc:73:0f:
                    4b:b3:ab:7f:33:00:5b:5d:f6:3c:55:74:58:76:bc:
                    32:ee:23:d1:75:e4:1e:3b:bb:5b:10:8e:4e:d7:8d:
                    32:f1:b4:40:bc:95:a3:da:1d:69:9a:a4:76:8e:00:
                    28:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1C:28:78:77:F6:FA:24:BA:98:E4:1A:42:A1:3F:A9:19:F8:77:21
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3132382e302f31372d3234203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.176.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         d9:fc:d3:17:99:d6:4b:d7:7e:d6:96:e2:c1:34:a8:46:dc:1f:
         76:bd:87:19:2f:f2:43:c1:2c:c7:48:ed:0a:be:fb:69:e2:61:
         c2:03:dc:1b:92:3e:79:dc:c3:97:44:ae:0d:df:21:fa:6a:40:
         f1:10:9d:27:c3:6c:0b:45:fe:2d:6f:2a:86:68:8e:12:a5:08:
         a5:dc:f9:9e:59:e0:e9:1c:e6:f9:b8:10:86:86:ec:36:e5:58:
         25:a7:cb:75:08:5b:7d:f8:80:a6:a2:13:ff:5a:65:91:ba:32:
         06:6c:90:cb:62:a2:33:b0:57:79:6b:c7:f5:fd:5b:9c:de:ca:
         55:09:f7:34:77:1c:64:81:5d:58:20:37:ce:6a:91:65:aa:49:
         57:29:c7:b1:87:22:b1:0a:be:d4:38:86:8d:bc:8d:97:a1:7c:
         68:a3:a7:b9:76:5a:db:3d:0b:a1:c3:ff:a7:13:af:bb:fd:3e:
         de:87:44:73:fd:36:89:cb:46:56:8d:b4:12:25:06:d7:59:6e:
         2b:dd:bc:45:70:16:68:fa:fa:87:a9:ac:5e:32:a7:19:d8:51:
         64:d7:aa:16:a7:96:1c:a1:90:f2:3a:b9:38:15:a7:74:a2:d8:
         df:45:11:c3:d5:ed:16:1a:d6:98:ef:89:1c:f6:2b:24:57:9e:
         7a:ca:9b:ea
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUE1i0LKmaFsN3vid91k+8oIqV1LEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBNTUxMEM3RkNEOTY2RTAyNDg2RDMyNTcyQkY2QkNC
MUI4RkYyRTAeFw0yNDAzMDUxNzU1MDVaFw0yNTAzMDQxODAwMDVaMDMxMTAvBgNV
BAMTKDMzMUMyODc4NzdGNkZBMjRCQTk4RTQxQTQyQTEzRkE5MTlGODc3MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1IPT8yH9hwfKQ7hrguZpXLS4D
VfzlilDzRhoTrGMCXgzSimzRC5YMFpbwmE9nbMx9nUoax0dkYACDWwGZkHjNksB7
RKe7ZlsTm65aGcSTORXzB/I6OHZ1RErXNKKPw8ZoWjV7hXSPgHugPt7Rcw3cIZGA
ZOv70wnV5CRvEEflSzEt8k+TXmOikJJpmAbf2BjWAjuss8VGPhFl8K3uKmaoFHag
mrgt73VpItexUphR+lsrI1PAHiKXNNyIWYlyJLHPV3z8Y/66iZDNVZYgUNxzD0uz
q38zAFtd9jxVdFh2vDLuI9F15B47u1sQjk7XjTLxtEC8laPaHWmapHaOACjPAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUMxwoeHf2+iS6mOQaQqE/qRn4dyEwHwYDVR0j
BBgwFoAU5aVRDH/Nlm4CSG0yVyv2vLG4/y4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MkU3MDg2ODkwNENFRTdCQUNDNDgzNzlBQTNGMkUyNjkz
QUUxMzI5MTQxMUM1OEYzMzlCNDI3RjMzMEE5OEJGLzAvRTVBNTUxMEM3RkNEOTY2
RTAyNDg2RDMyNTcyQkY2QkNCMUI4RkYyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUE1NTEwQzdGQ0Q5NjZFMDI0
ODZEMzI1NzJCRjZCQ0IxQjhGRjJFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTJFNzA4Njg5MDRDRUU3QkFDQzQ4Mzc5QUEzRjJFMjY5M0FFMTMyOTE0
MTFDNThGMzM5QjQyN0YzMzBBOThCRi8wLzMxMzgzNjJlMzEzNzM2MmUzMTMyMzgy
ZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM5Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAe6
sIAwDQYJKoZIhvcNAQELBQADggEBANn80xeZ1kvXftaW4sE0qEbcH3a9hxkv8kPB
LMdI7Qq++2niYcID3BuSPnncw5dErg3fIfpqQPEQnSfDbAtF/i1vKoZojhKlCKXc
+Z5Z4Okc5vm4EIaG7DblWCWny3UIW334gKaiE/9aZZG6MgZskMtiojOwV3lrx/X9
W5zeylUJ9zR3HGSBXVggN85qkWWqSVcpx7GHIrEKvtQ4ho28jZehfGijp7l2Wts9
C6HD/6cTr7v9Pt6HRHP9NonLRlaNtBIlBtdZbivdvEVwFmj6+oeprF4ypxnYUWTX
qhanlhyhkPI6uTgVp3Si2N9FEcPV7RYa1pjviRz2KyRXnnrKm+o=
-----END CERTIFICATE-----
Generated at Wed May 8 23:03:51 2024 by rpki-client on console-ams.rpki-client.org