Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3230342e302f32332d3233203d3e203532323531.roa
File:                     3138312e3232352e3230342e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          uCvtPZgnBbqqQsyt2Cd6TWBAE+ErsY9xOv//hC8NNIc=
Subject key identifier:   56:AC:F5:16:48:A4:3A:7C:2B:6A:CF:25:74:97:DC:EA:62:0A:06:13
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       77BF9ED8F86D50EEB48EB0ACEE9CD6C2FBCE614F
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3230342e302f32332d3233203d3e203532323531.roa
Signing time:             Fri 26 Apr 2024 19:20:02 +0000
ROA not before:           Fri 26 Apr 2024 19:15:02 +0000
ROA not after:            Fri 25 Apr 2025 19:20:02 +0000
asID:                     52251
IP address blocks:        181.225.204.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:bf:9e:d8:f8:6d:50:ee:b4:8e:b0:ac:ee:9c:d6:c2:fb:ce:61:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Apr 26 19:15:02 2024 GMT
            Not After : Apr 25 19:20:02 2025 GMT
        Subject: CN=56ACF51648A43A7C2B6ACF257497DCEA620A0613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1f:3e:ec:2b:19:2a:d6:b8:df:df:b2:d7:c9:
                    ec:3f:51:5f:bb:76:ec:87:6c:bc:79:e2:65:b0:f1:
                    a6:88:1c:4c:73:dc:ed:78:57:fe:24:76:98:cd:b8:
                    7d:2c:a1:bb:1f:bd:4a:85:de:09:1d:97:46:18:48:
                    0a:40:b6:ff:8f:fa:8e:36:43:b3:db:11:0e:13:20:
                    4b:b8:c8:7f:26:32:e5:26:b9:bc:de:d0:9b:f6:9d:
                    3e:9a:56:eb:3d:23:a4:08:70:a0:af:26:c2:6f:e0:
                    53:19:27:ab:5d:d9:96:33:0c:d1:fc:48:2c:6c:88:
                    27:c3:79:f6:ed:c7:2a:d2:83:b6:c2:0c:5c:90:ab:
                    50:88:d4:61:39:0e:19:e1:d4:09:aa:79:ed:22:33:
                    1c:a3:50:c0:20:49:65:dd:8a:1c:eb:bf:2f:27:d2:
                    b1:91:b2:37:a9:fc:4f:5a:7b:1e:d7:e1:4b:34:90:
                    06:26:8f:fa:ff:8c:70:bb:8e:c6:b7:43:f9:ba:ae:
                    3a:5c:87:b8:3d:31:76:f7:08:4f:6e:97:f3:d5:25:
                    fe:e7:aa:3c:ff:59:f6:6b:9e:b5:3b:55:e8:83:7d:
                    ba:b8:bc:20:26:62:8b:06:5d:6c:b7:17:27:c5:da:
                    89:0d:e3:3a:72:cb:dc:1d:02:07:68:1b:f4:d1:07:
                    48:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AC:F5:16:48:A4:3A:7C:2B:6A:CF:25:74:97:DC:EA:62:0A:06:13
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3230342e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:ed:cc:e1:cb:fe:1f:b9:54:ef:24:41:0e:59:8a:b9:2b:6d:
         93:a0:d9:29:66:f4:e6:84:08:a4:4e:ad:f7:af:3b:9a:6d:6c:
         3e:89:1f:35:36:78:7a:bb:bc:e8:ff:1c:87:97:62:0b:52:44:
         8e:73:1c:c1:fd:0c:e0:3c:7e:62:7c:5c:5f:8f:99:5b:91:16:
         89:bc:09:26:bb:3f:2d:0c:3b:43:01:d7:9d:f7:e5:08:25:4f:
         d8:27:3c:ab:06:58:e8:e1:04:3d:4b:86:92:9d:93:f6:89:e0:
         0c:aa:34:fd:bb:a9:46:a0:4b:5b:a9:31:3c:cf:73:7d:1b:21:
         c2:a8:e5:09:8a:7a:79:6c:c5:3f:01:e4:10:fd:d8:ef:9d:28:
         ae:66:ba:e3:26:64:ad:64:a3:01:b6:14:25:d1:50:b4:97:71:
         fb:f7:6d:14:c1:28:1d:01:90:ea:9c:32:82:e4:30:6f:cb:03:
         a9:d4:55:41:f8:eb:95:45:8b:30:a9:91:60:8a:0d:0e:ac:76:
         7f:1e:ae:80:24:3d:d2:f6:5a:71:91:35:36:50:dd:dd:7e:ac:
         2c:72:e5:55:09:18:51:93:15:51:11:b8:0e:04:a7:b9:25:c0:
         ca:16:9f:25:e1:84:b5:55:f7:fc:8f:85:26:42:da:57:2c:31:
         9d:1f:71:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----