Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3130322e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e3130322e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          1vTJQUAKEFxJg3L7rqxvVo6zyIbwRm3TKsW4ppmP06Y=
Subject key identifier:   DA:2F:B0:DB:01:A9:1D:15:37:5C:5A:49:9A:84:6E:82:B7:3C:C1:8A
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       4593D5583B82D6B6C68C3D2384B96846425992BA
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3130322e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:00 +0000
ROA not before:           Thu 02 May 2024 14:20:00 +0000
ROA not after:            Thu 01 May 2025 14:25:00 +0000
asID:                     52251
IP address blocks:        190.181.102.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:93:d5:58:3b:82:d6:b6:c6:8c:3d:23:84:b9:68:46:42:59:92:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:00 2024 GMT
            Not After : May  1 14:25:00 2025 GMT
        Subject: CN=DA2FB0DB01A91D15375C5A499A846E82B73CC18A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e6:61:79:f5:ee:d6:93:4d:27:3c:33:4e:b1:
                    9c:35:0e:6a:4f:0d:58:ca:27:26:1f:a2:df:72:af:
                    6b:11:42:93:fd:be:bb:9e:6f:9a:b0:79:49:e4:78:
                    49:3f:4b:0e:7e:40:1f:73:50:97:69:fd:72:94:b3:
                    fa:92:f4:34:38:f3:69:29:b7:f0:56:96:a1:7b:b1:
                    58:ec:56:06:e5:e7:12:9f:9a:44:62:5f:d3:bf:c4:
                    44:8a:8d:5b:d8:a0:88:9b:5d:9e:fa:8f:d4:41:7e:
                    7d:7b:0d:55:51:c5:1c:28:e9:cc:db:0c:9e:05:2d:
                    4d:47:a8:ee:62:f2:13:58:40:aa:22:5c:05:d6:e2:
                    ce:e9:d0:ad:3c:dd:dd:3b:90:eb:40:9d:fb:40:54:
                    59:5b:b4:5e:9e:54:c5:08:93:c4:04:71:91:51:1d:
                    1b:08:dd:3f:50:7a:3d:f0:0e:a7:77:8b:05:76:ea:
                    f1:b8:00:52:6c:c0:d7:b7:5b:dc:90:99:6f:e1:e9:
                    60:65:ae:64:68:6b:d0:01:a9:0f:3a:f7:08:8b:49:
                    72:c7:50:36:0a:89:6f:11:21:d0:bf:6b:68:b6:97:
                    42:a2:6a:46:bf:3a:40:c8:70:8a:4c:a1:93:70:23:
                    54:f4:de:04:75:3c:0d:6f:a3:e1:de:14:96:27:e2:
                    d1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2F:B0:DB:01:A9:1D:15:37:5C:5A:49:9A:84:6E:82:B7:3C:C1:8A
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3130322e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:1f:d8:d8:7d:15:14:77:39:c7:0b:6e:1d:54:ed:c2:c3:7b:
         f5:7d:da:4b:61:d2:86:1f:ff:00:b2:60:f0:b2:b0:ca:4a:88:
         01:81:7e:5d:7f:83:b6:f2:5e:4a:06:91:77:a8:dc:2a:05:f7:
         80:7b:60:d7:00:fc:13:94:e1:73:52:1b:0f:82:e7:f3:83:16:
         0a:2d:62:7e:05:78:c7:69:fe:cc:db:e5:cc:7e:ba:89:2b:87:
         df:dd:bf:e3:89:10:24:69:95:e5:aa:70:dd:dd:66:02:2e:a6:
         73:f7:27:a0:d7:09:fd:a6:20:c4:95:bd:b3:10:0f:88:1b:b8:
         3f:22:15:bc:a2:be:03:da:ee:6e:b2:59:ae:dc:a4:a4:74:ec:
         1a:5e:3f:52:37:52:9a:33:bb:3a:19:a9:ef:66:98:ca:2c:40:
         86:f3:93:ac:b5:92:1d:ff:b9:c0:5e:06:4e:1a:03:db:f0:a5:
         e9:a6:ae:04:8e:bc:56:56:55:8f:2d:99:70:91:67:4e:a9:51:
         97:de:3d:3d:52:01:b2:ec:77:f3:ca:12:89:2a:cd:78:4c:0f:
         11:db:cf:e9:0e:b7:9d:ed:a3:ea:b1:1f:5f:70:9b:e1:49:06:
         9f:19:54:3b:d8:e3:7d:8c:9b:9c:7a:27:30:e0:16:4b:8b:b6:
         48:09:52:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-ams.rpki-client.org