Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137372e302e302f31372d3137203d3e20323632313937.roa
File:                     3138362e3137372e302e302f31372d3137203d3e20323632313937.roa (raw, json)
Hash identifier:          5qFnUNEdlxUdJ10FGH4KGVbeGst1r+t/DR8kuV6Ac+k=
Subject key identifier:   AC:98:C9:51:9A:57:BB:43:F1:C4:6A:56:79:A0:80:4C:BB:66:12:4C
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       71A3FECB52E18E7CFD992642CCD5D7D0CF464952
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137372e302e302f31372d3137203d3e20323632313937.roa
Signing time:             Tue 05 Mar 2024 17:59:56 +0000
ROA not before:           Tue 05 Mar 2024 17:54:56 +0000
ROA not after:            Tue 04 Mar 2025 17:59:56 +0000
asID:                     262197
IP address blocks:        186.177.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Wed 08 May 2024 20:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a3:fe:cb:52:e1:8e:7c:fd:99:26:42:cc:d5:d7:d0:cf:46:49:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:56 2024 GMT
            Not After : Mar  4 17:59:56 2025 GMT
        Subject: CN=AC98C9519A57BB43F1C46A5679A0804CBB66124C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1c:f5:e3:49:42:c0:25:30:54:9d:65:4c:65:
                    c8:5b:eb:ff:07:6e:62:5f:e1:35:94:53:4e:2f:44:
                    3a:e3:d5:10:8b:6c:2b:e2:cd:dc:c7:d4:34:d8:fa:
                    50:5f:fa:a3:0e:48:15:e6:8d:f4:ec:1c:5d:88:aa:
                    fb:be:58:33:4d:57:68:64:7b:83:67:49:47:98:8d:
                    47:f2:f2:a7:fd:81:b8:7a:1f:92:87:31:80:30:d9:
                    11:41:15:29:8d:7d:b5:d6:f6:3c:c9:13:cc:e2:e4:
                    99:19:af:8a:77:fa:5b:b1:d7:58:82:df:7f:de:2e:
                    91:40:d8:36:78:d7:fc:62:6a:29:d7:ed:22:53:78:
                    13:e0:b0:2d:bd:3a:ac:62:af:dd:3f:0b:9e:ee:07:
                    11:cb:f0:9b:46:58:7d:be:b1:85:7e:68:25:0b:78:
                    a7:53:96:04:24:e5:f5:c1:1d:14:e2:d8:6a:f2:2f:
                    a4:a0:27:43:48:bf:49:20:84:b5:a1:86:b7:26:cd:
                    95:a8:b9:57:d1:db:9a:0e:14:16:d7:62:19:7e:a1:
                    3f:92:13:14:4e:13:eb:3d:77:ac:11:a7:02:55:31:
                    a1:b8:2e:b4:d9:ee:13:43:ee:7a:13:71:e4:fc:ff:
                    ec:ad:09:c1:2b:bd:cc:a2:d3:0f:57:09:28:83:f8:
                    9d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:98:C9:51:9A:57:BB:43:F1:C4:6A:56:79:A0:80:4C:BB:66:12:4C
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137372e302e302f31372d3137203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3a:ee:62:6d:54:83:2e:e1:4e:3c:7f:60:f9:2a:1a:56:1c:16:
         1f:18:31:6d:e4:b0:f5:09:e1:e7:79:0f:6d:df:2c:06:3a:09:
         29:56:16:02:3e:c3:b3:bf:48:aa:f3:ca:ca:68:f0:7a:c0:72:
         f3:c7:07:ec:15:c2:ed:a2:e0:79:27:da:ee:48:f0:92:a3:76:
         db:49:90:66:1c:90:f9:a6:29:bb:1a:23:9c:d0:25:8d:4e:7e:
         f8:28:91:b9:3c:35:51:b4:e2:de:27:2d:5c:8a:4b:a6:96:8c:
         b0:82:13:b6:26:0d:38:46:d1:b1:2b:16:ab:cd:30:3f:c4:8b:
         c8:b6:45:4e:94:24:71:b3:e7:8d:dc:43:39:0a:e7:2a:66:ff:
         f0:71:f9:14:af:2a:23:48:fe:ec:13:c7:71:27:1a:f0:10:be:
         27:1d:cc:e5:3e:d8:79:bd:b0:be:46:bd:72:af:b0:e1:c8:2c:
         07:3e:3a:b1:a3:ed:25:78:74:fc:55:7d:e8:eb:43:28:1e:0d:
         cc:cb:31:3a:c5:d5:21:0c:19:48:2d:da:13:f5:df:0b:bc:a5:
         01:9b:8b:88:ab:8d:bf:b6:a8:e9:43:e7:51:c9:60:37:c4:93:
         51:32:e6:0b:ab:2a:0a:65:6e:23:c3:df:d7:c7:1c:2a:9e:b9:
         a7:60:24:ad
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUcaP+y1Lhjnz9mSZCzNXX0M9GSVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBNTUxMEM3RkNEOTY2RTAyNDg2RDMyNTcyQkY2QkNC
MUI4RkYyRTAeFw0yNDAzMDUxNzU0NTZaFw0yNTAzMDQxNzU5NTZaMDMxMTAvBgNV
BAMTKEFDOThDOTUxOUE1N0JCNDNGMUM0NkE1Njc5QTA4MDRDQkI2NjEyNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFHPXjSULAJTBUnWVMZchb6/8H
bmJf4TWUU04vRDrj1RCLbCvizdzH1DTY+lBf+qMOSBXmjfTsHF2Iqvu+WDNNV2hk
e4NnSUeYjUfy8qf9gbh6H5KHMYAw2RFBFSmNfbXW9jzJE8zi5JkZr4p3+lux11iC
33/eLpFA2DZ41/xiainX7SJTeBPgsC29Oqxir90/C57uBxHL8JtGWH2+sYV+aCUL
eKdTlgQk5fXBHRTi2GryL6SgJ0NIv0kghLWhhrcmzZWouVfR25oOFBbXYhl+oT+S
ExROE+s9d6wRpwJVMaG4LrTZ7hND7noTceT8/+ytCcErvcyi0w9XCSiD+J25AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUrJjJUZpXu0PxxGpWeaCATLtmEkwwHwYDVR0j
BBgwFoAU5aVRDH/Nlm4CSG0yVyv2vLG4/y4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MkU3MDg2ODkwNENFRTdCQUNDNDgzNzlBQTNGMkUyNjkz
QUUxMzI5MTQxMUM1OEYzMzlCNDI3RjMzMEE5OEJGLzAvRTVBNTUxMEM3RkNEOTY2
RTAyNDg2RDMyNTcyQkY2QkNCMUI4RkYyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUE1NTEwQzdGQ0Q5NjZFMDI0
ODZEMzI1NzJCRjZCQ0IxQjhGRjJFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTJFNzA4Njg5MDRDRUU3QkFDQzQ4Mzc5QUEzRjJFMjY5M0FFMTMyOTE0
MTFDNThGMzM5QjQyN0YzMzBBOThCRi8wLzMxMzgzNjJlMzEzNzM3MmUzMDJlMzAy
ZjMxMzcyZDMxMzcyMDNkM2UyMDMyMzYzMjMxMzkzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB7qxADAN
BgkqhkiG9w0BAQsFAAOCAQEAOu5ibVSDLuFOPH9g+SoaVhwWHxgxbeSw9Qnh53kP
bd8sBjoJKVYWAj7Ds79IqvPKymjwesBy88cH7BXC7aLgeSfa7kjwkqN220mQZhyQ
+aYpuxojnNAljU5++CiRuTw1UbTi3ictXIpLppaMsIITtiYNOEbRsSsWq80wP8SL
yLZFTpQkcbPnjdxDOQrnKmb/8HH5FK8qI0j+7BPHcSca8BC+Jx3M5T7Yeb2wvka9
cq+w4cgsBz46saPtJXh0/FV96OtDKB4NzMsxOsXVIQwZSC3aE/XfC7ylAZuLiKuN
v7ao6UPnUclgN8STUTLmC6sqCmVuI8Pf18ccKp65p2AkrQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org