Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e302e302f32342d3234203d3e20323632323036.roa
File:                     3138362e33322e302e302f32342d3234203d3e20323632323036.roa (raw, json)
Hash identifier:          mXM/D/g98QReob/3ql80VdQuLnRr8lPEVRlcmzeXxDo=
Subject key identifier:   00:28:12:EE:76:B5:B0:A6:0F:0D:96:C8:CB:E0:D2:1C:A0:D0:4E:8D
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       6BA75261DA66E67150487C0F531580FC6A44D363
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e302e302f32342d3234203d3e20323632323036.roa
Signing time:             Tue 05 Mar 2024 17:59:54 +0000
ROA not before:           Tue 05 Mar 2024 17:54:54 +0000
ROA not after:            Tue 04 Mar 2025 17:59:54 +0000
asID:                     262206
IP address blocks:        186.32.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 May 2024 20:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a7:52:61:da:66:e6:71:50:48:7c:0f:53:15:80:fc:6a:44:d3:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:54 2024 GMT
            Not After : Mar  4 17:59:54 2025 GMT
        Subject: CN=002812EE76B5B0A60F0D96C8CBE0D21CA0D04E8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:a9:a2:46:70:60:7f:8a:d7:db:34:ef:17:
                    8d:17:10:cb:b1:92:22:df:d7:d0:7c:bd:91:83:b8:
                    9a:1d:b9:fe:68:dc:f2:81:a9:1f:ab:7b:9c:ee:93:
                    77:71:36:2c:bd:20:04:30:c8:c9:18:c6:c6:19:a3:
                    0e:82:80:b0:f4:8b:32:85:cc:22:7f:fc:ff:b3:57:
                    2e:f9:07:c9:9e:f3:23:3b:c8:55:95:6e:1e:3a:72:
                    3e:c9:7e:0a:2b:4c:e9:94:ad:02:6b:b6:6a:f7:b6:
                    5a:b0:7c:c9:22:7a:4f:f5:f7:44:a9:cb:7c:c9:ef:
                    62:42:a7:2b:18:4f:d8:a4:86:3a:8d:11:d2:ea:44:
                    b8:5e:e9:d3:71:29:e5:d7:6f:f0:8d:1c:27:19:d3:
                    78:f0:eb:9d:9e:00:b5:1f:53:8a:9d:ad:12:2a:e8:
                    2f:43:df:f7:32:56:af:cc:f1:42:c6:3b:5c:1a:69:
                    44:5b:76:54:63:de:12:2b:15:67:35:55:f0:8e:81:
                    6d:e4:c7:60:87:03:33:98:61:2a:67:f6:cb:94:cc:
                    69:fd:7e:f5:ba:6e:43:b2:9d:52:94:05:0d:6e:2c:
                    99:fa:53:3d:34:44:21:45:1c:31:78:a9:12:20:f4:
                    14:ff:3a:44:0a:47:56:db:f8:95:f4:eb:78:ae:37:
                    b4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:28:12:EE:76:B5:B0:A6:0F:0D:96:C8:CB:E0:D2:1C:A0:D0:4E:8D
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e302e302f32342d3234203d3e20323632323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:c2:ab:e3:cc:bd:c5:48:a8:8c:be:97:e4:72:f9:b1:28:34:
         45:eb:18:3c:19:2c:0d:ae:4d:59:05:e6:82:d6:e7:88:48:b1:
         5f:ef:70:c0:68:52:5d:b4:48:52:ba:95:2b:94:19:40:a0:7d:
         aa:67:d0:c0:8c:a3:d3:42:e4:4e:f5:00:68:d1:03:a3:1b:c6:
         1b:48:f0:0c:a5:fd:74:d7:e9:13:d9:c0:30:cb:60:01:42:a5:
         d2:28:9f:18:fe:53:9d:43:85:92:9b:4a:fc:8e:77:4e:b6:9f:
         c9:6c:64:5e:1a:45:45:22:c8:7a:7b:c7:41:43:64:ca:86:02:
         00:ca:34:cb:cc:11:0a:09:42:fd:19:04:39:74:3a:2c:76:20:
         67:92:9e:a0:ac:b8:a2:b4:e7:b2:af:f2:83:bb:11:4c:4c:00:
         94:86:09:b0:73:51:df:1f:0e:72:32:94:db:4f:7a:b4:aa:c6:
         4c:00:3b:a2:31:1d:08:cd:f4:78:e5:51:92:66:d6:b1:cb:a2:
         37:a9:d4:80:49:f3:97:e4:da:cc:50:fb:ee:0f:20:8f:85:f8:
         a9:71:15:0c:1e:2e:75:29:ca:2e:fc:73:96:5b:b8:e4:02:75:
         e9:c5:7e:6c:b7:1e:e2:8a:3e:70:86:a1:38:36:71:43:d9:2a:
         7c:b7:ae:b3
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUa6dSYdpm5nFQSHwPUxWA/GpE02MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBNTUxMEM3RkNEOTY2RTAyNDg2RDMyNTcyQkY2QkNC
MUI4RkYyRTAeFw0yNDAzMDUxNzU0NTRaFw0yNTAzMDQxNzU5NTRaMDMxMTAvBgNV
BAMTKDAwMjgxMkVFNzZCNUIwQTYwRjBEOTZDOENCRTBEMjFDQTBEMDRFOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwt6miRnBgf4rX2zTvF40XEMux
kiLf19B8vZGDuJoduf5o3PKBqR+re5zuk3dxNiy9IAQwyMkYxsYZow6CgLD0izKF
zCJ//P+zVy75B8me8yM7yFWVbh46cj7JfgorTOmUrQJrtmr3tlqwfMkiek/190Sp
y3zJ72JCpysYT9ikhjqNEdLqRLhe6dNxKeXXb/CNHCcZ03jw652eALUfU4qdrRIq
6C9D3/cyVq/M8ULGO1waaURbdlRj3hIrFWc1VfCOgW3kx2CHAzOYYSpn9suUzGn9
fvW6bkOynVKUBQ1uLJn6Uz00RCFFHDF4qRIg9BT/OkQKR1bb+JX063iuN7QPAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUACgS7na1sKYPDZbIy+DSHKDQTo0wHwYDVR0j
BBgwFoAU5aVRDH/Nlm4CSG0yVyv2vLG4/y4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MkU3MDg2ODkwNENFRTdCQUNDNDgzNzlBQTNGMkUyNjkz
QUUxMzI5MTQxMUM1OEYzMzlCNDI3RjMzMEE5OEJGLzAvRTVBNTUxMEM3RkNEOTY2
RTAyNDg2RDMyNTcyQkY2QkNCMUI4RkYyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUE1NTEwQzdGQ0Q5NjZFMDI0
ODZEMzI1NzJCRjZCQ0IxQjhGRjJFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTJFNzA4Njg5MDRDRUU3QkFDQzQ4Mzc5QUEzRjJFMjY5M0FFMTMyOTE0
MTFDNThGMzM5QjQyN0YzMzBBOThCRi8wLzMxMzgzNjJlMzMzMjJlMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMjMwMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC6IAAwDQYJ
KoZIhvcNAQELBQADggEBAInCq+PMvcVIqIy+l+Ry+bEoNEXrGDwZLA2uTVkF5oLW
54hIsV/vcMBoUl20SFK6lSuUGUCgfapn0MCMo9NC5E71AGjRA6MbxhtI8Ayl/XTX
6RPZwDDLYAFCpdIonxj+U51DhZKbSvyOd062n8lsZF4aRUUiyHp7x0FDZMqGAgDK
NMvMEQoJQv0ZBDl0Oix2IGeSnqCsuKK057Kv8oO7EUxMAJSGCbBzUd8fDnIylNtP
erSqxkwAO6IxHQjN9HjlUZJm1rHLojep1IBJ85fk2sxQ++4PII+F+KlxFQweLnUp
yi78c5ZbuOQCdenFfmy3HuKKPnCGoTg2cUPZKny3rrM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org