Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3139322e302f31392d3139203d3e20323632313937.roa
File:                     3138362e33322e3139322e302f31392d3139203d3e20323632313937.roa (raw, json)
Hash identifier:          s61L16pGkTovDooAP48v4kLhmgrnSOnod4IwMkYzYW4=
Subject key identifier:   04:7C:9A:6D:75:F1:7E:3A:9A:C5:01:EF:63:8F:FC:09:11:89:13:76
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       61BE272DC31E9ADDDB7BCDDECE039EF93154B096
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3139322e302f31392d3139203d3e20323632313937.roa
Signing time:             Tue 05 Mar 2024 17:59:56 +0000
ROA not before:           Tue 05 Mar 2024 17:54:56 +0000
ROA not after:            Tue 04 Mar 2025 17:59:56 +0000
asID:                     262197
IP address blocks:        186.32.192.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Wed 08 May 2024 20:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:be:27:2d:c3:1e:9a:dd:db:7b:cd:de:ce:03:9e:f9:31:54:b0:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:56 2024 GMT
            Not After : Mar  4 17:59:56 2025 GMT
        Subject: CN=047C9A6D75F17E3A9AC501EF638FFC0911891376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ce:55:48:59:50:6e:26:b6:d5:09:16:a4:76:
                    9c:da:e9:53:40:2e:da:bd:92:92:c7:f8:14:ae:b8:
                    ae:78:f7:d2:f6:da:77:81:dc:c0:46:58:44:5c:f2:
                    70:8d:f7:3b:c5:50:74:cb:e9:53:2c:58:fe:e1:8b:
                    51:41:5d:44:bf:86:5b:60:fd:96:90:13:7b:01:72:
                    b5:5c:31:e6:4f:d1:3d:58:f9:4b:cd:79:bb:41:5e:
                    d7:b8:f3:f7:fb:d8:a8:24:b4:ae:c3:6c:c6:c3:5a:
                    ee:d4:9e:1e:12:ec:b7:55:a1:fa:e1:6a:aa:a1:11:
                    61:fd:e1:b2:d0:e8:6e:5c:fb:16:d6:5b:0b:53:ae:
                    ab:b2:64:b7:e6:5d:54:36:61:a5:21:a2:93:00:2d:
                    39:ad:69:d7:79:51:95:4f:4a:5b:e6:83:db:c4:2e:
                    e9:ef:7e:32:77:ec:ac:7d:b9:5d:ac:d5:12:db:b5:
                    e0:ed:a5:ad:c3:c0:16:83:04:00:b3:2d:bd:fd:ba:
                    fa:e0:d0:b2:3b:c2:a9:c2:47:e7:99:c3:fb:4a:07:
                    2a:f0:96:a8:18:4d:a1:62:ec:62:5f:61:eb:e6:4a:
                    d3:e2:0d:91:6d:c1:89:42:35:fa:73:67:86:27:cc:
                    52:f5:6f:70:46:20:44:36:bb:55:c7:71:1b:ed:e1:
                    b2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7C:9A:6D:75:F1:7E:3A:9A:C5:01:EF:63:8F:FC:09:11:89:13:76
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3139322e302f31392d3139203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         42:c7:72:d1:e4:e0:fb:d2:f0:83:9d:6c:d3:b9:57:dc:b9:b4:
         95:8c:3e:ce:e9:2e:2a:28:9c:7d:13:ff:57:da:76:72:8a:d9:
         f8:be:c7:21:37:23:a8:e1:fb:ff:53:55:65:a7:66:be:f1:a1:
         36:8f:b4:4b:8d:13:d7:ba:3f:69:b4:7b:38:25:1c:da:db:5e:
         55:44:69:74:b0:aa:23:92:0b:81:d3:1c:c8:bd:b5:d8:27:b1:
         09:76:36:b1:7e:6f:46:c9:36:cb:37:37:f6:e5:22:3a:94:9b:
         a6:c6:c0:85:a0:a2:25:54:2a:49:dc:38:57:3e:7a:60:b4:1a:
         28:49:df:7a:03:10:dc:7e:f0:01:f4:92:5b:13:15:de:13:e5:
         72:71:46:c5:54:50:7e:e1:b8:a6:af:a1:e1:0d:99:76:ac:37:
         22:c8:7b:fb:2f:a8:79:fc:ca:52:66:f6:90:d0:1b:eb:d5:fa:
         6d:e3:1c:a4:dc:5e:8c:ab:e4:32:6c:f6:6a:e7:99:d4:ac:5d:
         d3:a1:cf:3f:d1:9a:3b:30:6c:21:14:0b:40:f5:9d:20:68:30:
         76:01:d2:03:3c:9f:90:ab:7d:dc:c6:38:ad:44:90:8b:1c:4d:
         d8:ec:5a:56:78:c7:ac:04:5a:98:61:70:a3:9f:98:c1:7e:bd:
         25:6d:bb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org