Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e302e302f31382d3138203d3e20323632313937.roa
File:                     3138362e33322e302e302f31382d3138203d3e20323632313937.roa (raw, json)
Hash identifier:          t6PvCp+i1cPNPqgna9kcJ8vxw6XWziqpU3BaQa+srhE=
Subject key identifier:   29:8C:DE:DD:2E:6B:6D:D6:50:71:FC:2D:ED:06:E9:24:FA:0E:9B:F1
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       6271D418743ECFC9079598876942D651D5FB3D40
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e302e302f31382d3138203d3e20323632313937.roa
Signing time:             Tue 05 Mar 2024 17:59:53 +0000
ROA not before:           Tue 05 Mar 2024 17:54:53 +0000
ROA not after:            Tue 04 Mar 2025 17:59:53 +0000
asID:                     262197
IP address blocks:        186.32.0.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Wed 08 May 2024 20:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:71:d4:18:74:3e:cf:c9:07:95:98:87:69:42:d6:51:d5:fb:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:53 2024 GMT
            Not After : Mar  4 17:59:53 2025 GMT
        Subject: CN=298CDEDD2E6B6DD65071FC2DED06E924FA0E9BF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:fd:a7:c7:67:bc:21:1a:76:f4:e4:0f:86:
                    94:d5:ea:a4:e4:d2:cc:20:7d:a5:8c:68:11:b4:b8:
                    7a:3a:61:42:b0:6a:d6:8a:bd:4a:03:d2:2e:88:58:
                    45:c5:06:97:bb:6e:77:7d:ab:c2:af:32:5a:34:81:
                    a9:39:a5:39:0a:bf:82:c7:13:1b:cb:d4:c9:cd:76:
                    7e:4a:67:8c:4a:4e:89:f6:36:fd:fc:2a:de:bc:51:
                    10:eb:99:36:17:26:f1:ad:6b:4c:35:4e:88:37:73:
                    e7:3d:11:07:26:f5:62:57:1c:bc:a6:60:e0:11:ed:
                    ce:3e:f6:24:32:9a:ce:78:2e:8b:e4:7d:4e:75:7c:
                    d2:28:fe:84:f2:ce:2c:04:7c:03:9c:25:18:af:2e:
                    a8:df:ed:1d:3b:09:02:9c:fb:51:30:0c:e9:b9:65:
                    e4:b6:52:70:be:f8:65:d8:7a:b9:07:b6:50:28:ff:
                    c4:fd:be:62:37:aa:e4:72:14:3b:0e:f9:45:c6:a6:
                    4c:02:6a:e0:a9:2d:2b:e4:5b:33:bd:64:22:3b:2c:
                    bd:ee:1e:81:50:c4:52:a8:6a:84:26:8e:cf:b8:75:
                    52:cf:78:05:2c:a7:43:e8:7b:67:d4:ac:bb:db:5a:
                    5d:68:b9:5b:52:36:ce:3e:3d:c9:49:ac:ec:e3:22:
                    50:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8C:DE:DD:2E:6B:6D:D6:50:71:FC:2D:ED:06:E9:24:FA:0E:9B:F1
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e302e302f31382d3138203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8c:0e:47:da:25:34:2e:12:2c:c7:5c:c6:40:6e:e6:e1:9f:d9:
         3c:3e:e7:db:88:e7:13:38:32:48:cf:7b:a7:0b:05:29:38:ec:
         e4:6b:91:68:f2:a6:1d:c0:7f:5e:15:c1:92:49:61:b5:5c:91:
         59:ad:ef:37:40:23:42:bc:54:5b:07:f8:17:8d:2c:9b:8d:19:
         a6:df:8a:b7:c6:3a:55:41:f7:c7:0d:b3:a8:c9:24:89:09:95:
         30:a5:53:08:c4:89:9f:b3:34:62:11:b2:c0:cb:1e:71:17:89:
         3d:7d:7f:f9:f6:ea:d3:3c:03:f9:24:25:1c:4e:af:1b:38:8b:
         4b:04:1c:ba:0a:2d:53:b1:69:03:70:19:7c:6e:b3:6d:27:49:
         73:d1:0c:db:f0:24:a8:25:30:5f:0d:33:23:05:d2:b5:b7:fb:
         fb:cb:8d:14:97:2f:26:79:eb:27:da:ee:9d:8d:0c:a3:39:27:
         5e:e1:65:77:ce:17:1d:93:0d:53:4a:6b:91:a7:75:3a:31:5a:
         69:3d:62:12:aa:a4:60:5d:05:65:96:49:64:ab:0c:12:5b:e4:
         91:7d:d2:50:e3:ec:74:5b:71:89:9f:09:31:2c:63:f7:6d:df:
         ab:53:4d:75:db:0d:cf:6f:b4:16:74:bc:a3:53:c6:45:e1:ae:
         84:8e:3b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org