Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3232302e302f32332d3233203d3e203532323531.roa
File:                     3138312e3232352e3232302e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          53BBLu7tPvu6z3Qgll5slLGW0/lxLeGWD60ncrFPdFQ=
Subject key identifier:   F3:89:F7:BA:82:FE:51:83:69:9C:D3:B5:DF:70:15:CA:1F:86:0C:A8
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       5633290F23737450F639F5FEFE9B97FB3F338450
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3232302e302f32332d3233203d3e203532323531.roa
Signing time:             Fri 26 Apr 2024 19:20:04 +0000
ROA not before:           Fri 26 Apr 2024 19:15:04 +0000
ROA not after:            Fri 25 Apr 2025 19:20:04 +0000
asID:                     52251
IP address blocks:        181.225.220.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:33:29:0f:23:73:74:50:f6:39:f5:fe:fe:9b:97:fb:3f:33:84:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Apr 26 19:15:04 2024 GMT
            Not After : Apr 25 19:20:04 2025 GMT
        Subject: CN=F389F7BA82FE5183699CD3B5DF7015CA1F860CA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ea:eb:9a:57:35:62:23:57:3b:11:54:a6:48:
                    5c:30:db:c8:b4:78:c0:6d:82:ed:1c:67:fd:c4:60:
                    35:0d:ca:df:bb:09:70:24:e7:c1:e1:60:a9:99:47:
                    9b:06:79:8e:c4:40:d4:e6:89:ee:cf:63:ea:34:1f:
                    bf:a4:96:71:26:af:09:c7:c3:d6:96:06:3e:bc:47:
                    62:3b:b2:9e:73:d3:b7:91:ac:c1:ba:57:74:5a:48:
                    95:19:90:bb:e0:0b:20:1b:5b:d5:58:81:26:2d:af:
                    27:8e:09:14:78:7a:c8:b3:0a:5c:19:7d:97:e3:d4:
                    77:d7:c9:1a:ff:a8:0b:37:70:7d:0a:4b:f9:45:7a:
                    7d:d5:55:d9:e1:e8:bd:e0:76:88:cd:d1:9e:01:2e:
                    bf:d1:d1:0f:23:4d:8f:74:b7:ac:0e:c4:cd:f6:eb:
                    9e:30:16:af:23:3a:fb:67:2e:41:12:ca:21:cb:07:
                    8e:78:50:a8:55:c5:03:61:66:14:78:33:02:f4:03:
                    7b:21:2b:54:31:58:37:08:cd:bd:68:90:3b:8f:71:
                    57:55:82:22:e1:6a:a2:17:79:10:5c:a2:60:33:c6:
                    ef:08:5e:cf:e9:57:96:b7:6e:44:44:57:db:bc:f1:
                    4d:45:47:69:e0:af:1b:c2:bd:0d:74:cf:8b:6d:a3:
                    bd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:89:F7:BA:82:FE:51:83:69:9C:D3:B5:DF:70:15:CA:1F:86:0C:A8
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3232302e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:bd:19:71:38:5c:6c:d9:1b:b3:40:25:0d:b0:a8:ff:0d:f9:
         8d:55:34:a8:c1:86:97:54:0e:69:23:ed:51:b8:2b:d3:c1:ff:
         d4:42:dd:56:ae:2f:ba:84:d3:88:45:b5:08:ee:13:3f:32:1f:
         19:8a:45:9e:b7:0f:d9:f4:80:58:79:b7:38:0f:a8:61:55:8d:
         ff:45:12:9a:36:e5:f3:20:50:08:bf:b0:c8:f3:49:6e:ac:11:
         13:6f:fb:25:e8:a4:3e:aa:e9:e7:40:a9:64:eb:c4:99:23:8b:
         9f:5d:f8:5a:49:cf:5b:a6:25:7e:16:a7:63:c4:a8:92:0e:e0:
         a4:ad:62:bc:1b:a9:be:23:54:3b:8d:8d:4c:b3:1d:4e:f9:b2:
         e4:0e:6c:59:56:54:07:2a:82:15:ba:83:34:01:0f:d1:a2:93:
         51:e7:9b:7f:2f:4b:53:41:4e:7d:b2:6c:1e:ae:11:09:2d:6c:
         9c:91:b9:2f:38:58:95:82:d3:d6:97:09:d4:f6:f7:94:fd:d3:
         97:88:c6:22:46:9e:55:4d:26:46:08:7c:f6:2b:61:b0:66:2a:
         9a:e0:88:ad:fa:d5:d0:fa:c2:98:f4:6b:d3:50:bc:5b:0e:8c:
         01:9e:3d:32:a5:43:56:e8:65:c1:09:ee:c0:d4:13:99:5b:b8:
         d7:0b:c4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----