Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3130302e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e3130302e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          TduCtao5VT7M6kAV4uV0ghMS0fn08HZWd/ReZkJ9R6w=
Subject key identifier:   73:8D:BA:CF:AD:5E:75:79:5B:F3:74:72:41:CE:A4:1D:3A:CC:F7:90
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       6D4D3849B7AB1F15E77DA7BF507E24DE276AB12F
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3130302e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:03 +0000
ROA not before:           Thu 02 May 2024 14:20:03 +0000
ROA not after:            Thu 01 May 2025 14:25:03 +0000
asID:                     52251
IP address blocks:        190.181.100.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4d:38:49:b7:ab:1f:15:e7:7d:a7:bf:50:7e:24:de:27:6a:b1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:03 2024 GMT
            Not After : May  1 14:25:03 2025 GMT
        Subject: CN=738DBACFAD5E75795BF3747241CEA41D3ACCF790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:ee:67:bf:53:8c:6b:15:fa:ab:85:7f:b5:
                    8d:ac:49:ff:cd:8e:4d:f0:7a:c5:92:21:ee:11:d3:
                    3e:ab:99:88:09:a4:0b:2d:58:82:36:8c:73:ff:39:
                    45:09:03:65:73:71:b8:2c:ef:7d:b1:2a:fc:87:f0:
                    3f:e7:23:d8:87:f7:72:73:7d:b4:fc:2e:4e:be:75:
                    ed:57:0d:19:59:32:d3:bd:e1:31:63:2c:06:96:e1:
                    60:ef:81:6a:2a:05:f5:3e:bd:9a:58:5e:50:bc:f0:
                    e6:08:9c:8f:0b:45:e4:8f:66:cf:8a:1a:cd:19:1b:
                    a7:10:12:d0:cd:b8:76:6f:b8:27:77:c7:71:9b:7f:
                    a5:5b:ef:91:08:00:f7:60:69:f6:dc:00:d2:a6:f8:
                    0d:08:08:79:e3:de:c0:11:6e:05:ef:13:0d:6c:97:
                    9c:72:3e:3a:db:72:64:f0:60:f8:d2:95:01:fd:5e:
                    90:55:fb:dd:5e:2f:19:89:a5:ed:de:ba:f9:a8:42:
                    2b:60:85:fb:24:1d:29:27:f0:8c:84:ed:ac:14:4e:
                    a0:a4:ee:95:aa:d2:4f:e5:fb:f9:39:ec:eb:ee:af:
                    63:07:ae:ec:ee:bc:d4:df:ec:35:20:97:b1:80:52:
                    54:37:ff:b6:63:11:54:6d:4d:d3:7d:92:58:dd:68:
                    bc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8D:BA:CF:AD:5E:75:79:5B:F3:74:72:41:CE:A4:1D:3A:CC:F7:90
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3130302e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:32:e0:d6:0e:c5:c7:f3:e9:1b:27:0b:59:fa:9a:ef:64:c5:
         44:88:65:25:ce:b2:a0:06:81:b3:f5:00:fc:28:03:fa:48:a9:
         61:7a:89:d2:22:42:3c:de:94:16:ef:79:54:54:39:8a:16:ec:
         c1:ee:ae:c9:8a:b0:f8:86:af:9c:31:a4:bc:92:c5:f7:91:66:
         c7:e1:0b:4f:fe:1c:c2:ae:b5:77:65:70:c7:44:6a:77:78:66:
         d3:70:53:bc:8d:df:9b:66:7d:d2:3e:9a:98:fc:a2:07:7e:5b:
         d5:d7:9c:1d:49:d1:1d:f1:e6:14:93:c4:a0:77:08:29:99:e1:
         4f:32:02:a5:d2:9d:30:3b:a1:82:7a:a2:b8:ef:3e:e4:ef:62:
         08:ad:55:ce:ca:8c:d0:dc:e4:81:dc:84:ab:e7:0b:ef:64:13:
         b8:29:22:79:93:d1:9e:02:de:b8:7c:1b:14:48:cd:f5:b9:84:
         bc:b1:0a:6f:ce:62:d2:8b:ba:b3:e7:28:e7:86:f5:48:2d:0e:
         9d:da:81:24:2c:db:22:0b:bd:4c:5e:62:a7:40:7e:ea:d3:e0:
         bd:c5:42:af:e3:1c:4e:9a:0e:20:20:6b:85:d4:88:47:6e:79:
         fc:64:c9:03:df:d6:4f:ca:02:40:ee:90:24:a8:99:e2:51:ef:
         5f:d0:ca:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org