Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3139322e302f32332d3233203d3e203532323531.roa
File:                     3138312e3232352e3139322e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          Gm9Se3jUkRISSZJys5AP26F9K+MdWQ0OR26ji1XxdYQ=
Subject key identifier:   9F:02:AE:96:26:23:A2:9C:12:50:23:82:83:F9:F8:69:BF:19:04:90
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       5A77503DF40D618C5D13F7202BC045854A6B3F92
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3139322e302f32332d3233203d3e203532323531.roa
Signing time:             Fri 26 Apr 2024 19:10:00 +0000
ROA not before:           Fri 26 Apr 2024 19:05:00 +0000
ROA not after:            Fri 25 Apr 2025 19:10:00 +0000
asID:                     52251
IP address blocks:        181.225.192.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:77:50:3d:f4:0d:61:8c:5d:13:f7:20:2b:c0:45:85:4a:6b:3f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Apr 26 19:05:00 2024 GMT
            Not After : Apr 25 19:10:00 2025 GMT
        Subject: CN=9F02AE962623A29C1250238283F9F869BF190490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4f:b1:77:f3:8e:88:bd:91:4d:58:32:ce:4c:
                    98:99:18:36:61:39:b7:5a:a4:67:e3:aa:a8:03:6b:
                    87:82:cc:a2:cf:43:68:72:40:1a:b4:53:be:46:95:
                    5a:e2:13:a4:ff:37:f5:e6:41:a1:eb:d4:3c:b9:54:
                    c4:76:3f:8b:3d:b7:30:da:7f:cd:99:d3:2d:3a:4d:
                    7f:09:24:bd:df:ae:54:0c:61:f8:7a:8f:bb:38:58:
                    ca:cc:0d:58:60:45:50:c8:51:0f:3d:22:eb:04:9c:
                    25:57:67:6e:be:2c:47:2b:67:71:c0:14:3d:1a:60:
                    32:bc:d0:dc:e8:30:c6:0b:bb:ea:16:4d:46:57:f2:
                    b4:e4:08:4f:1c:98:68:1d:3c:a1:39:9d:20:c2:e7:
                    e7:b6:3f:4a:38:36:86:ec:a1:1f:b8:d0:b8:58:ed:
                    c6:da:a1:e8:c2:9f:24:f9:40:25:81:06:8b:c4:88:
                    42:f0:54:65:e2:4e:fd:15:da:61:f3:46:f3:cc:fa:
                    2d:2f:57:f3:a0:c1:d1:a3:64:4b:dd:a1:8f:a4:45:
                    d3:50:cd:92:8e:2f:63:ec:dc:f5:e3:cc:68:12:b2:
                    b5:5c:3d:25:a4:d2:5c:0b:1a:f4:b1:ba:92:ab:5b:
                    03:e4:26:b5:ac:b9:18:13:0c:4b:6d:59:e9:db:23:
                    be:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:02:AE:96:26:23:A2:9C:12:50:23:82:83:F9:F8:69:BF:19:04:90
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3139322e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:20:f1:23:56:08:43:10:f2:f1:43:0f:18:7c:67:e4:56:92:
         71:90:09:88:a2:85:30:17:ee:b1:31:68:c1:2d:92:31:06:44:
         aa:ea:1f:ba:c4:0d:a1:9c:e2:23:5c:df:ec:7a:2b:67:b3:5a:
         d1:6b:28:11:3b:93:4a:9d:78:17:90:c0:65:5f:7d:d4:57:96:
         59:e4:44:f2:8e:66:15:a4:eb:92:b1:13:0f:0e:2e:1a:17:02:
         89:6b:a1:e0:32:1d:a3:91:b7:d0:cb:99:ed:1a:1c:89:23:f5:
         08:50:e2:cb:13:20:be:18:ff:f5:f6:28:23:8e:c7:78:bf:d4:
         a0:df:8d:63:be:38:9c:b0:04:af:45:5a:8f:42:bd:43:b8:68:
         35:14:19:59:67:a2:1d:59:57:fa:df:02:1c:e8:c9:f7:a3:48:
         5b:8a:12:e7:8a:e5:86:1c:fe:6c:f3:18:e5:c7:1f:e2:e4:b7:
         49:52:8b:b3:fb:dc:5f:98:f1:03:45:e0:ba:9d:31:de:77:a2:
         a2:ab:22:79:37:2c:de:4f:17:d0:37:e2:47:de:d2:82:26:6d:
         83:77:37:f5:db:58:e6:7d:bf:4c:8f:53:4b:c2:2e:3a:73:61:
         9a:d3:31:df:b6:b9:07:56:64:df:b8:a7:28:a6:70:45:f7:79:
         47:82:ce:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----