Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3231342e302f32332d3233203d3e203532323531.roa
File:                     3138312e3232352e3231342e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          DJkzW0rbilyv56lWdhQpiIAChULXHVe4MNXOqL7Wobo=
Subject key identifier:   A0:68:AC:20:7D:BD:9F:67:25:14:CD:48:63:C8:48:AD:8F:0B:E8:76
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       4CDEF6D0F6A29BFE8E27770E09B44F2DC2AB4B42
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3231342e302f32332d3233203d3e203532323531.roa
Signing time:             Fri 26 Apr 2024 19:20:03 +0000
ROA not before:           Fri 26 Apr 2024 19:15:03 +0000
ROA not after:            Fri 25 Apr 2025 19:20:03 +0000
asID:                     52251
IP address blocks:        181.225.214.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:de:f6:d0:f6:a2:9b:fe:8e:27:77:0e:09:b4:4f:2d:c2:ab:4b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Apr 26 19:15:03 2024 GMT
            Not After : Apr 25 19:20:03 2025 GMT
        Subject: CN=A068AC207DBD9F672514CD4863C848AD8F0BE876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ec:06:a2:e0:df:a2:0c:9d:b4:06:90:3c:06:
                    14:1a:63:1b:7b:53:0f:24:2b:9a:76:40:16:67:f1:
                    43:c6:32:03:8c:ab:8f:73:c8:bb:06:ee:aa:43:2b:
                    06:b1:56:e9:e2:31:7c:ae:82:4d:5a:a6:52:3b:35:
                    cc:50:7b:63:c2:f5:55:16:eb:f6:41:ad:48:be:0b:
                    4a:f9:19:6d:1f:36:64:89:56:2b:1c:44:c5:bd:ed:
                    81:17:e1:c7:c9:d5:ee:42:eb:f0:48:dd:cc:06:59:
                    94:81:84:69:f3:0e:ad:6a:09:66:8c:4f:00:e4:99:
                    cc:ab:a1:e4:a8:b3:80:b7:26:0d:9a:dc:c1:a8:ca:
                    de:be:f5:1c:5f:9f:d7:01:27:77:6f:42:16:6e:96:
                    fd:62:2a:2e:36:16:1a:6c:31:c1:b7:79:23:4e:ac:
                    c4:e2:35:4d:da:5b:55:8a:a3:ba:b3:55:f5:df:93:
                    73:9c:da:3a:a2:0a:d1:0f:30:20:72:79:51:b0:08:
                    c5:cd:ff:8f:b9:6a:d3:70:c1:8f:8b:c2:a9:29:4c:
                    ba:cd:cb:e7:c9:1a:d5:9f:44:79:93:a4:ca:60:5a:
                    78:18:e0:61:96:e8:4f:ce:a5:b2:da:a1:c8:d8:cf:
                    21:19:bf:a4:90:86:44:de:8c:48:f2:3d:2a:cf:64:
                    3b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:68:AC:20:7D:BD:9F:67:25:14:CD:48:63:C8:48:AD:8F:0B:E8:76
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3231342e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:80:61:e0:91:7d:40:20:8d:d2:4a:18:60:de:bc:7b:a5:30:
         31:60:5c:dd:dd:d8:4b:55:32:2f:a5:b9:08:d0:62:15:71:3b:
         a2:d6:58:66:20:5c:f4:1b:f9:a3:f1:f0:23:fe:9e:2f:1f:02:
         9e:29:7d:9d:7e:81:a0:83:74:99:d2:1e:8c:fb:ae:92:60:52:
         17:25:71:10:71:60:90:e8:e8:15:13:62:d5:30:41:92:a2:e8:
         c0:29:c7:f6:76:93:9b:11:0a:66:72:90:d6:f0:e0:6d:fe:78:
         42:75:8d:f0:72:7d:88:3d:62:3c:1b:fe:36:d6:7d:e6:e1:c2:
         c5:08:ce:c1:1e:26:ed:80:29:c6:72:dc:ed:40:d0:ca:17:30:
         31:9b:22:2c:2d:cc:e8:76:b0:80:f8:26:1c:ba:03:fb:14:39:
         d3:f3:bb:4e:7e:4b:b3:48:46:ab:a1:cc:ab:a7:f9:ed:08:06:
         62:b5:55:99:d9:a0:20:eb:23:cf:72:65:d7:fc:49:02:38:90:
         4e:72:86:81:5a:60:ec:13:4a:61:15:f1:b5:0c:38:44:a7:e1:
         55:83:0a:6b:9a:1c:6d:43:87:a5:91:54:3f:e5:c9:32:b3:08:
         f5:16:46:18:43:e2:40:1c:79:76:18:a8:50:50:7e:4a:56:cd:
         f8:3f:aa:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----