Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3230362e302f32332d3233203d3e203532323531.roa
File:                     3138312e3232352e3230362e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          BxZhCiLy6VRhJX+3cVycWOLn8vHrnljrdgZfN5NaDkE=
Subject key identifier:   7C:47:2F:14:EF:50:3A:1E:9F:EF:C3:0E:72:6B:10:66:3E:9B:CE:E2
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       31F3F9428F5B1BAA72F56A29DCA02F9239A9FB3E
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3230362e302f32332d3233203d3e203532323531.roa
Signing time:             Fri 26 Apr 2024 19:20:03 +0000
ROA not before:           Fri 26 Apr 2024 19:15:03 +0000
ROA not after:            Fri 25 Apr 2025 19:20:03 +0000
asID:                     52251
IP address blocks:        181.225.206.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f3:f9:42:8f:5b:1b:aa:72:f5:6a:29:dc:a0:2f:92:39:a9:fb:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Apr 26 19:15:03 2024 GMT
            Not After : Apr 25 19:20:03 2025 GMT
        Subject: CN=7C472F14EF503A1E9FEFC30E726B10663E9BCEE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:c2:af:b3:a7:98:a0:b0:ed:c2:3c:58:0f:
                    c1:29:7a:56:d6:10:9f:8d:31:c4:03:d2:3f:a4:1c:
                    4c:91:43:02:f9:58:96:8f:7f:02:b7:cb:08:98:ea:
                    ee:fd:d2:1f:2d:57:8f:b1:d4:9c:bf:03:34:14:a0:
                    43:53:fa:47:d3:65:3c:69:66:61:21:20:dd:e1:d4:
                    81:c3:9e:43:56:43:65:ac:a8:96:e3:b8:11:3f:b5:
                    dc:94:88:eb:fb:fc:18:8a:a8:96:b8:41:44:7a:03:
                    7d:e4:b8:0b:7f:07:d6:dc:d8:62:ae:46:ed:78:74:
                    74:d5:7f:e4:ca:72:aa:4f:14:c1:55:71:0f:e4:3f:
                    09:80:77:75:fc:7e:7f:3c:6b:56:02:4a:db:0b:7f:
                    e1:7f:74:6b:8f:08:84:93:76:72:60:8a:ee:06:56:
                    33:ae:64:59:22:1d:69:44:d2:5c:2e:53:97:cd:16:
                    d2:50:fc:06:4a:52:a9:af:c8:c3:1d:58:76:dc:7a:
                    cc:4f:7d:0d:0e:aa:66:1f:75:0e:16:ac:31:8a:1a:
                    c7:ec:3f:ae:c7:a2:aa:fc:f4:38:90:bf:0c:6e:38:
                    47:67:18:f8:b3:71:c2:63:0e:e3:b7:01:86:aa:ce:
                    dc:35:68:8c:5b:7a:ce:41:e1:13:b6:24:a8:ec:c4:
                    af:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:47:2F:14:EF:50:3A:1E:9F:EF:C3:0E:72:6B:10:66:3E:9B:CE:E2
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3230362e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:93:da:36:fa:9f:22:a6:90:2e:ea:dc:4a:c1:95:8e:58:df:
         6a:2b:95:b3:6b:5c:62:43:d2:61:94:eb:1f:12:b9:b2:e9:e9:
         38:78:52:34:03:7e:40:eb:1b:fd:de:dd:52:ff:16:45:4d:ba:
         0f:bc:a3:49:8a:0b:4f:f0:cc:4b:cc:b0:47:6c:9d:37:48:05:
         c0:35:63:fe:04:13:f9:c9:7b:2d:fb:53:2c:9a:47:38:44:19:
         20:8d:f5:cd:70:f7:40:bf:b4:de:ed:81:43:96:f5:30:ef:bf:
         b6:00:a8:0c:82:d7:6a:55:f9:06:05:e1:b5:8b:cf:5b:d5:f9:
         f7:4c:7f:8b:ac:28:77:4b:e8:b8:40:9d:ac:20:09:9a:43:8a:
         bd:c7:fb:7b:92:1a:f9:0d:ba:6a:73:5a:94:5e:d8:59:6e:6f:
         17:0c:6e:3a:de:ac:62:9d:56:fe:0f:35:b6:ab:2b:f3:e7:46:
         83:78:bf:19:59:41:7e:42:de:51:7c:92:f0:56:f3:ab:23:74:
         f4:cc:12:d3:4f:a9:df:d0:73:71:99:fd:02:d1:15:af:a1:9d:
         4b:fe:e5:aa:1a:0f:8b:b9:36:fa:c2:d8:59:f6:38:78:38:cd:
         98:7d:25:77:a3:27:07:dd:9b:54:2e:48:c8:71:78:35:9d:98:
         3e:3d:84:ca
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMfP5Qo9bG6py9Wop3KAvkjmp+z4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcyNkJEQjA2NjAwOUU0NTczQkEzNUQ1RkVBRkNDQjQz
MTMzMENENzAeFw0yNDA0MjYxOTE1MDNaFw0yNTA0MjUxOTIwMDNaMDMxMTAvBgNV
BAMTKDdDNDcyRjE0RUY1MDNBMUU5RkVGQzMwRTcyNkIxMDY2M0U5QkNFRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc7cKvs6eYoLDtwjxYD8EpelbW
EJ+NMcQD0j+kHEyRQwL5WJaPfwK3ywiY6u790h8tV4+x1Jy/AzQUoENT+kfTZTxp
ZmEhIN3h1IHDnkNWQ2WsqJbjuBE/tdyUiOv7/BiKqJa4QUR6A33kuAt/B9bc2GKu
Ru14dHTVf+TKcqpPFMFVcQ/kPwmAd3X8fn88a1YCStsLf+F/dGuPCISTdnJgiu4G
VjOuZFkiHWlE0lwuU5fNFtJQ/AZKUqmvyMMdWHbcesxPfQ0OqmYfdQ4WrDGKGsfs
P67Hoqr89DiQvwxuOEdnGPizccJjDuO3AYaqztw1aIxbes5B4RO2JKjsxK/PAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfEcvFO9QOh6f78MOcmsQZj6bzuIwHwYDVR0j
BBgwFoAUlya9sGYAnkVzujXV/q/MtDEzDNcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zOUJDNzE1QzU3NUY3RDUzRDE1MDNERDgyMzZFNTE5NzMx
OEQxODkyNkJCRTRDNzdDQjY1RERFQjEzMDQ4RkI3LzAvOTcyNkJEQjA2NjAwOUU0
NTczQkEzNUQ1RkVBRkNDQjQzMTMzMENENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzI2QkRCMDY2MDA5RTQ1NzNC
QTM1RDVGRUFGQ0NCNDMxMzMwQ0Q3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzlCQzcxNUM1NzVGN0Q1M0QxNTAzREQ4MjM2RTUxOTczMThEMTg5MjZC
QkU0Qzc3Q0I2NURERUIxMzA0OEZCNy8wLzMxMzgzMTJlMzIzMjM1MmUzMjMwMzYy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMyMzIzNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBteHO
MA0GCSqGSIb3DQEBCwUAA4IBAQAik9o2+p8ippAu6txKwZWOWN9qK5Wza1xiQ9Jh
lOsfErmy6ek4eFI0A35A6xv93t1S/xZFTboPvKNJigtP8MxLzLBHbJ03SAXANWP+
BBP5yXst+1Msmkc4RBkgjfXNcPdAv7Te7YFDlvUw77+2AKgMgtdqVfkGBeG1i89b
1fn3TH+LrCh3S+i4QJ2sIAmaQ4q9x/t7khr5Dbpqc1qUXthZbm8XDG463qxinVb+
DzW2qyvz50aDeL8ZWUF+Qt5RfJLwVvOrI3T0zBLTT6nf0HNxmf0C0RWvoZ1L/uWq
Gg+LuTb6wthZ9jh4OM2YfSV3oycH3ZtULkjIcXg1nZg+PYTK
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org