Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3139342e302f32332d3233203d3e203532323531.roa
File:                     3138312e3232352e3139342e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          xeIZvLD7vuD03gxT9Yq1I+ps7z2PvXA5Pm3eRxkL91Y=
Subject key identifier:   A6:5D:6C:88:43:A5:FA:52:1A:A2:8C:1F:C0:E6:9F:F8:96:CA:D0:06
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       1C8A20CDAA3B4E778EE24240A007B1161B2C19EA
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3139342e302f32332d3233203d3e203532323531.roa
Signing time:             Fri 26 Apr 2024 19:20:01 +0000
ROA not before:           Fri 26 Apr 2024 19:15:01 +0000
ROA not after:            Fri 25 Apr 2025 19:20:01 +0000
asID:                     52251
IP address blocks:        181.225.194.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8a:20:cd:aa:3b:4e:77:8e:e2:42:40:a0:07:b1:16:1b:2c:19:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Apr 26 19:15:01 2024 GMT
            Not After : Apr 25 19:20:01 2025 GMT
        Subject: CN=A65D6C8843A5FA521AA28C1FC0E69FF896CAD006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:05:88:36:e3:17:a5:70:73:84:aa:92:c2:b4:
                    96:3e:c1:71:96:07:c2:d2:ec:98:e9:a7:78:fe:59:
                    b4:e6:23:7f:b9:ae:55:46:57:7b:1b:19:77:67:d6:
                    e8:ef:91:17:4c:b1:10:75:a7:30:20:18:2c:6a:34:
                    db:f9:65:dd:fc:80:63:4a:e8:1e:62:9e:70:30:e7:
                    52:fb:5d:14:89:dd:b0:8e:bb:5c:11:dc:8e:07:30:
                    0f:bc:f4:82:1e:cf:91:99:e4:ab:2b:87:5a:c2:7b:
                    3b:d5:40:a2:e2:b2:23:4f:aa:58:cb:7e:0b:07:3e:
                    ed:18:f8:5e:f4:55:78:42:5c:d7:94:c6:64:fe:70:
                    71:e5:70:19:c3:3e:8a:dc:db:10:30:bf:d7:fb:69:
                    d1:78:37:19:2a:59:c9:75:4a:ed:73:0b:d2:6e:86:
                    1f:51:75:96:5f:92:ed:26:c3:f8:e8:76:c1:b2:96:
                    9e:4e:4c:8c:7e:68:b4:d9:c1:40:89:41:51:20:ef:
                    8b:55:9b:5a:38:1d:92:a7:92:d5:de:cf:4a:66:4e:
                    26:3e:87:89:4c:0c:b4:f1:05:a2:b9:6a:86:29:91:
                    96:77:9d:70:01:70:dc:9f:10:4b:77:e8:48:02:35:
                    d1:e0:80:4a:83:f0:3e:3e:0a:66:2b:96:f5:bd:4e:
                    36:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5D:6C:88:43:A5:FA:52:1A:A2:8C:1F:C0:E6:9F:F8:96:CA:D0:06
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3139342e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:20:a6:56:b2:6c:f4:96:15:2e:41:c8:2e:a4:10:64:d5:6e:
         23:1d:b1:85:f1:16:12:57:b3:79:06:34:44:35:dd:5f:13:2d:
         de:70:ef:72:bf:a0:2d:3f:1f:30:65:0e:4c:2a:ff:19:bc:87:
         33:d5:77:bb:59:3e:0b:73:c0:3d:f7:ff:1f:17:75:8d:4c:a5:
         0b:32:df:27:1c:68:96:a5:67:9a:b4:92:8b:33:0e:6c:36:bc:
         5e:bd:30:61:49:1d:dd:e9:2e:cd:88:d3:7f:2b:3c:ff:35:d8:
         8f:fa:64:4e:bb:fe:e5:db:46:e5:c8:a5:43:d1:bb:0e:e2:c6:
         2e:89:fd:d9:aa:92:a9:6e:3b:73:2e:de:77:53:7b:09:de:b7:
         8b:07:0c:74:d6:fa:89:2a:09:62:f5:e6:d2:2e:de:43:67:5d:
         54:b9:9f:94:16:fd:71:7d:b1:a4:b8:69:46:02:aa:af:98:d6:
         16:42:46:b1:32:68:8b:bc:4f:44:50:f9:c9:57:54:ad:20:4e:
         7f:58:6b:27:77:7a:29:5c:cc:fc:b8:fe:61:92:1f:5f:d1:cf:
         f2:1e:0d:f4:0d:94:e7:36:d5:48:7d:2e:31:30:1f:74:db:3e:
         99:d0:25:c3:db:e8:ee:56:12:e4:21:28:e5:f6:4e:76:7c:31:
         07:ca:c7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----