Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3231362e302f32332d3233203d3e203532323531.roa
File:                     3138312e3232352e3231362e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          x3SM8ftBKB0gkAvKd8Muu7oNv2oS2R0ojFkzs+ep60U=
Subject key identifier:   53:7C:A8:6C:5D:16:78:58:8B:1D:94:E3:9C:21:CC:0F:DC:15:A0:09
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       601C3DFB52D83CBF677284996CF0F24FAFEFCB8E
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3231362e302f32332d3233203d3e203532323531.roa
Signing time:             Fri 26 Apr 2024 19:20:04 +0000
ROA not before:           Fri 26 Apr 2024 19:15:04 +0000
ROA not after:            Fri 25 Apr 2025 19:20:04 +0000
asID:                     52251
IP address blocks:        181.225.216.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1c:3d:fb:52:d8:3c:bf:67:72:84:99:6c:f0:f2:4f:af:ef:cb:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Apr 26 19:15:04 2024 GMT
            Not After : Apr 25 19:20:04 2025 GMT
        Subject: CN=537CA86C5D1678588B1D94E39C21CC0FDC15A009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c1:b3:96:48:a6:59:c2:27:b7:59:70:14:3d:
                    27:4f:a0:ee:b2:aa:f1:94:a7:83:53:70:17:8b:ef:
                    ba:ef:23:87:6d:2e:e9:44:e9:f3:77:ec:e3:29:db:
                    cc:8d:31:6f:65:49:47:c1:c3:70:30:6f:5f:31:c7:
                    66:6f:dc:71:9a:b8:28:9d:37:43:eb:12:12:7c:09:
                    2c:a2:c3:e1:75:c7:b9:2c:29:86:b4:4d:39:89:a4:
                    8d:f5:25:a4:dd:1b:6e:02:cc:21:aa:c0:77:78:b7:
                    1c:93:f8:07:f0:36:f4:49:e4:ca:0c:9b:ae:09:91:
                    bb:38:0d:81:46:a1:f3:2e:11:04:65:27:b5:29:21:
                    58:61:23:a3:77:19:cd:aa:d2:ad:4f:5b:14:c6:65:
                    8e:98:b2:f1:77:a1:45:9b:0f:cf:1b:78:d0:f4:a2:
                    0c:41:b4:9b:45:d3:42:8e:e8:51:66:cc:fd:eb:2c:
                    22:a4:bd:0d:71:4b:c8:bc:8b:d5:cc:a4:fd:6b:d0:
                    25:fe:1e:de:b2:06:c5:6d:44:84:e6:2d:d5:cd:19:
                    a7:24:52:37:03:a4:a4:d7:89:aa:72:91:01:02:90:
                    f2:60:85:95:ac:a4:03:fe:a4:a1:01:fd:2b:e2:54:
                    ba:a3:31:27:e5:27:33:63:a7:f0:7f:87:6c:0b:5f:
                    d6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7C:A8:6C:5D:16:78:58:8B:1D:94:E3:9C:21:CC:0F:DC:15:A0:09
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3231362e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:d1:6b:70:89:ce:b5:f0:36:13:5a:49:64:a5:7f:f0:67:fe:
         b5:0b:46:8f:23:e5:21:9e:a1:ff:03:e6:48:ac:a1:7a:78:02:
         00:f6:7d:aa:aa:d7:ac:df:14:32:7e:ae:37:b1:cc:c7:f8:73:
         31:3b:4d:28:11:72:e0:4b:c9:fc:c7:78:bf:7a:ff:ce:a0:6c:
         2b:3d:17:bb:c5:06:be:77:c9:5e:b5:18:5f:a7:ae:2b:76:95:
         31:11:2d:64:55:f8:77:7c:24:2e:15:d7:de:17:db:a5:0e:b5:
         f5:b3:45:a8:83:1d:d7:88:27:b0:82:6c:6f:f2:91:a0:49:79:
         a0:4b:59:c3:ea:d5:84:01:5b:d6:a4:d3:c3:33:6c:b5:1c:49:
         27:99:5d:05:19:e5:42:de:46:95:c4:b0:f5:47:82:a0:5d:81:
         ba:e5:18:34:d6:84:32:5b:dc:3a:a0:09:9d:8d:33:b8:68:40:
         9f:ed:80:26:d5:ce:52:b0:23:23:b0:8c:e8:9b:69:59:1d:dc:
         33:c3:2d:49:00:9b:9c:db:ba:e7:08:f8:e4:52:75:3e:ca:82:
         48:88:28:7c:52:1e:c9:59:ca:c7:71:3b:6b:4c:70:ff:b1:15:
         1a:ed:53:6b:fe:c3:89:d4:b3:49:38:26:29:55:2a:96:98:9c:
         13:9d:af:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----