Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3231302e302f32332d3233203d3e203532323531.roa
File:                     3138312e3232352e3231302e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          TIFYbjz4ls6tLi83yFNgclPptBqkcgv6HBJRgBzTdpA=
Subject key identifier:   4D:7F:FF:C4:2E:30:5E:C5:15:F4:97:F1:A5:17:A8:F0:D0:81:CD:1B
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       177C9FE499B14863A08BF3CEB16A0CF94201FA06
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3231302e302f32332d3233203d3e203532323531.roa
Signing time:             Fri 26 Apr 2024 19:20:02 +0000
ROA not before:           Fri 26 Apr 2024 19:15:02 +0000
ROA not after:            Fri 25 Apr 2025 19:20:02 +0000
asID:                     52251
IP address blocks:        181.225.210.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7c:9f:e4:99:b1:48:63:a0:8b:f3:ce:b1:6a:0c:f9:42:01:fa:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Apr 26 19:15:02 2024 GMT
            Not After : Apr 25 19:20:02 2025 GMT
        Subject: CN=4D7FFFC42E305EC515F497F1A517A8F0D081CD1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:50:d0:7f:6f:ff:1d:4d:e4:5e:4b:a2:40:
                    79:27:7e:fe:c6:42:46:56:41:f2:83:6b:9d:45:88:
                    f8:9c:6d:2e:ce:d7:20:8c:b5:91:91:67:f3:f9:12:
                    64:f2:fc:1c:98:a6:3b:1f:5a:5e:dc:0f:09:60:10:
                    16:b0:75:d5:2c:11:4d:cf:5f:8f:50:81:c4:f9:4f:
                    80:c8:37:d8:68:4e:82:91:03:c8:3f:56:ce:01:9b:
                    01:c2:71:c2:d0:a9:30:e7:eb:84:bb:89:27:5e:6f:
                    a3:20:11:ba:be:58:75:b1:91:09:6a:4d:75:20:8e:
                    73:1c:10:99:48:a4:8f:fb:41:29:56:38:43:d4:a8:
                    53:a8:77:fe:74:10:8a:d3:21:18:23:fc:aa:3a:1a:
                    ea:0a:10:d8:47:9a:ad:c6:9d:a4:63:43:df:77:a3:
                    06:be:31:26:eb:1c:64:57:27:43:1c:3e:96:fc:d1:
                    ca:49:d0:c4:ec:4b:3e:14:49:62:25:47:cc:08:4c:
                    14:77:47:fe:e2:dc:96:3e:4a:44:9b:e7:da:c6:2f:
                    86:c3:cd:8b:01:e2:f2:81:50:8e:4f:75:5e:f2:56:
                    9e:7d:e2:a0:32:ed:04:8e:b8:c5:bf:2e:12:af:d2:
                    bf:e7:68:c4:8c:84:47:51:6b:37:4a:85:27:0d:60:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7F:FF:C4:2E:30:5E:C5:15:F4:97:F1:A5:17:A8:F0:D0:81:CD:1B
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3231302e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:fa:c5:ee:78:0b:73:6d:9b:02:5a:50:2e:76:d2:41:3d:c3:
         a2:18:e6:d9:0d:01:09:a6:70:d2:78:cb:49:54:d3:b5:94:a2:
         e8:30:9d:87:d6:a9:d6:18:f4:bd:8b:36:48:38:00:fd:b7:7f:
         93:51:2d:21:da:d5:eb:81:60:83:37:99:4c:5f:19:27:38:4d:
         3a:bf:58:99:c5:10:af:a6:c0:0a:62:c1:c1:3c:ea:bc:70:a1:
         d9:fe:41:3f:5d:9f:06:d2:1e:ee:35:3a:9b:c8:17:3f:69:96:
         bd:7f:5a:1a:3a:9f:5b:e7:c2:a8:f8:11:de:05:01:46:7d:4d:
         4f:43:fe:47:50:68:8e:04:bc:75:b6:54:64:66:54:05:82:e2:
         85:05:e1:66:c2:73:f1:bd:b2:06:9c:cb:c7:33:8a:45:51:55:
         c7:df:36:f3:32:b8:50:d7:28:cf:eb:63:7d:ed:c0:ef:a1:aa:
         d4:41:a5:12:77:63:0a:71:64:bf:2f:f5:7a:22:1b:ad:9d:ef:
         00:ef:c5:bd:0d:bb:9e:da:c1:8e:a1:1e:33:11:09:0f:c0:30:
         0d:3d:db:45:df:f9:81:d1:ae:09:ea:48:a8:bd:95:ce:b8:e6:
         5c:7c:ce:54:ca:42:08:88:9a:b4:6d:ba:7d:d9:6b:fe:3b:22:
         30:e6:d0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----