Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3136302e302f31392d3139203d3e20323632313937.roa
File:                     3138362e33322e3136302e302f31392d3139203d3e20323632313937.roa (raw, json)
Hash identifier:          tXVNTehwioefKyM1lrDoR0CIAJlSF/zWWiGrrNhz5E8=
Subject key identifier:   DA:EF:87:03:7E:82:CF:3F:10:30:76:95:4F:F4:14:8E:40:15:FB:80
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       379AE85BF19991C98918A08D7C30CFF35147B1AB
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3136302e302f31392d3139203d3e20323632313937.roa
Signing time:             Tue 05 Mar 2024 17:59:55 +0000
ROA not before:           Tue 05 Mar 2024 17:54:55 +0000
ROA not after:            Tue 04 Mar 2025 17:59:55 +0000
asID:                     262197
IP address blocks:        186.32.160.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Wed 08 May 2024 20:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9a:e8:5b:f1:99:91:c9:89:18:a0:8d:7c:30:cf:f3:51:47:b1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:55 2024 GMT
            Not After : Mar  4 17:59:55 2025 GMT
        Subject: CN=DAEF87037E82CF3F103076954FF4148E4015FB80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1e:ce:30:ae:be:bb:c6:a2:79:da:27:31:73:
                    66:0f:cd:9a:4d:8d:da:10:20:7e:ee:ae:b9:14:06:
                    c0:3f:37:7a:9c:ff:eb:e3:cf:66:12:30:6c:0b:92:
                    ec:ac:9a:82:c5:91:d7:9e:57:eb:3e:3a:fa:5f:18:
                    08:d2:f6:a0:45:47:e3:bf:ae:50:40:a2:3c:6c:09:
                    4b:fa:3f:14:bf:3e:b0:c8:2c:ea:63:d7:7d:ad:d3:
                    87:6f:c9:b6:fe:22:10:bb:aa:ac:30:30:3f:a1:f7:
                    a7:a7:46:16:ad:6c:76:9b:1e:8b:62:95:70:bf:97:
                    ed:1a:10:6a:73:4a:32:41:4f:c9:24:84:3e:25:6f:
                    d7:ca:dd:f8:e5:fd:b1:0b:10:22:74:e4:0b:79:18:
                    e0:2f:d1:22:18:43:d0:ac:ee:7e:8c:5f:15:30:f0:
                    20:7a:b3:fe:45:b8:8b:d7:c5:00:c0:27:2b:71:12:
                    dc:2f:8b:e8:57:e1:61:92:5e:24:45:28:68:8d:fa:
                    66:7e:f4:3f:ad:d6:39:87:9c:15:9a:3c:0e:45:63:
                    3e:f6:c6:af:15:8c:94:2e:7a:fe:34:90:06:cd:a7:
                    e2:16:0b:7d:a7:e9:33:58:e5:8b:63:79:46:26:e5:
                    03:c2:78:4b:97:26:a7:ba:5a:20:3d:c2:1d:49:60:
                    14:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EF:87:03:7E:82:CF:3F:10:30:76:95:4F:F4:14:8E:40:15:FB:80
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3136302e302f31392d3139203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ac:e5:11:e9:d5:e5:13:c3:23:75:46:a0:d4:4c:16:60:e7:42:
         aa:a7:1f:d2:19:bd:ca:96:dd:4f:a5:87:86:f4:f6:43:f3:cb:
         9f:99:34:0f:f1:76:de:4c:14:9a:30:ea:ba:b0:b0:52:28:fd:
         c7:b0:5c:29:82:80:5e:cb:f4:78:d0:9c:42:85:16:9a:3c:a1:
         ac:a3:3a:1d:21:67:03:f7:c0:8a:8a:4a:a9:62:52:2f:52:38:
         0b:40:24:d5:06:80:5e:a8:f2:e7:76:db:c6:50:bb:53:c7:8d:
         53:2b:67:e9:57:8d:97:7c:c7:ca:18:20:b3:67:e8:dd:73:a7:
         f7:55:59:9b:d8:ad:f6:d4:a0:d3:2d:18:86:f0:39:6e:06:d7:
         c4:5e:e1:02:3f:8c:30:43:cd:d6:6d:66:a0:6e:57:f7:bc:23:
         aa:57:45:de:de:ea:6d:f3:1f:26:27:af:7e:03:b4:41:c7:00:
         e2:fb:37:3e:ee:4e:c8:84:f7:0a:c3:71:60:62:59:ad:25:98:
         5a:9d:4b:e4:37:99:4b:49:9e:f8:d6:8e:bc:ce:51:e8:be:0a:
         24:26:e5:c2:c8:2d:2a:90:0a:28:a5:d6:f2:8d:b0:70:25:3d:
         f2:06:d9:5f:6e:39:d7:91:23:78:5d:49:5a:2f:60:04:98:28:
         d3:10:f3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org