Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3231382e302f32332d3233203d3e203532323531.roa
File:                     3138312e3232352e3231382e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          A3ysvUAbUxQi0i5k0xrEkJ5sdKAaaHwzW13Xar36KbY=
Subject key identifier:   8A:BE:51:C6:EB:86:2B:27:5A:BD:0A:28:DC:40:55:21:B5:44:FA:D0
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       4A1A6323CD4DD9B6E8C93775A8D81725F41B93A6
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3231382e302f32332d3233203d3e203532323531.roa
Signing time:             Fri 26 Apr 2024 19:20:00 +0000
ROA not before:           Fri 26 Apr 2024 19:15:00 +0000
ROA not after:            Fri 25 Apr 2025 19:20:00 +0000
asID:                     52251
IP address blocks:        181.225.218.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1a:63:23:cd:4d:d9:b6:e8:c9:37:75:a8:d8:17:25:f4:1b:93:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Apr 26 19:15:00 2024 GMT
            Not After : Apr 25 19:20:00 2025 GMT
        Subject: CN=8ABE51C6EB862B275ABD0A28DC405521B544FAD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:c2:a9:e4:fb:d8:c3:97:4b:20:0b:c8:3f:
                    a1:81:cf:b8:8f:5e:66:34:32:bf:95:c3:4a:42:69:
                    ea:f4:17:00:4f:c6:6e:d7:09:66:57:29:04:5c:85:
                    f2:40:c2:be:77:d2:cd:a7:3c:00:e7:2d:88:87:06:
                    6d:55:73:b5:f0:41:2e:4c:31:2c:88:51:c4:6e:25:
                    32:75:29:7c:39:ed:8d:51:b0:d3:24:b6:29:c3:88:
                    df:3f:fe:2c:c4:05:fe:3a:69:70:34:4b:44:93:b9:
                    3e:33:96:48:5b:12:2d:f7:42:b5:5e:d4:13:03:7d:
                    1e:b2:ea:cc:2b:db:07:2a:1d:d2:50:25:41:63:56:
                    b5:df:f6:07:69:22:7a:28:16:4c:df:37:c7:cd:b7:
                    b5:f1:6e:65:9c:1a:7a:54:12:d2:23:6b:8a:ca:0a:
                    3a:d6:12:80:24:bc:0d:fc:b3:5a:d1:3f:c9:4d:ab:
                    02:78:55:1f:36:8a:0f:4b:eb:03:c6:b7:79:23:11:
                    23:8e:83:6c:9d:6d:12:29:41:f7:c5:44:f9:7b:84:
                    e8:cb:bf:d1:e9:7c:ff:d1:2e:27:20:30:56:82:eb:
                    15:75:60:4f:3b:6c:dc:e0:46:59:b2:0f:64:e6:51:
                    73:59:db:b7:4a:7d:4b:7c:69:ec:f8:74:df:53:46:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BE:51:C6:EB:86:2B:27:5A:BD:0A:28:DC:40:55:21:B5:44:FA:D0
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3231382e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:25:f9:c5:46:79:da:99:35:69:65:5a:01:ec:e1:c7:63:50:
         dd:f9:79:1e:14:c8:fc:08:22:da:bd:c9:ed:d2:ac:84:25:d3:
         04:ed:64:25:92:01:c9:65:65:42:b7:03:88:88:e8:cb:ab:e8:
         cf:82:84:3d:7d:9e:83:55:37:81:0a:cd:21:f3:fa:b0:2f:21:
         a9:d1:73:58:fa:27:a4:6f:4d:89:ea:53:21:c0:dc:4a:35:64:
         19:7e:1f:84:9c:e1:e3:fa:c8:a0:12:2a:44:ce:2d:19:ce:05:
         8b:ca:60:1c:1d:60:be:5e:11:a2:26:f9:8d:06:cd:12:25:cf:
         f1:69:0a:d2:50:80:d5:59:3f:ca:b0:c2:ca:15:23:d9:be:b6:
         1a:2a:bb:46:10:e0:d6:bd:6b:2d:45:26:93:04:3b:53:b3:f7:
         00:64:99:d7:6d:ab:21:5b:b8:6b:69:1b:9b:59:56:2c:70:5a:
         d9:ec:9c:98:40:4e:ad:dd:5f:9b:fe:97:0c:b4:92:d4:f9:98:
         ce:88:ff:f5:67:27:1d:84:fa:4e:51:bc:0d:58:81:da:89:a8:
         ed:f5:d4:80:33:ca:09:49:09:70:31:88:d3:b7:78:27:4d:d0:
         c1:b5:6c:e9:8a:88:f2:08:ce:49:19:b0:0a:92:f0:47:9a:6e:
         9c:88:ee:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----