Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3130342e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e3130342e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          B8bfyy9vxc8HFy3/eSqKJuyYFKCy1o3CWSxmrjrLRJA=
Subject key identifier:   BD:D0:62:08:9F:05:83:35:DC:C9:7A:BD:CA:D7:0F:AE:A5:C2:D7:BB
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       63D6B3C5ADD210BDBE02344DC3DBA5AE7859D4E2
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3130342e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:11 +0000
ROA not before:           Thu 02 May 2024 14:20:11 +0000
ROA not after:            Thu 01 May 2025 14:25:11 +0000
asID:                     52251
IP address blocks:        190.181.104.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d6:b3:c5:ad:d2:10:bd:be:02:34:4d:c3:db:a5:ae:78:59:d4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:11 2024 GMT
            Not After : May  1 14:25:11 2025 GMT
        Subject: CN=BDD062089F058335DCC97ABDCAD70FAEA5C2D7BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:4d:59:ad:15:d0:9b:0a:b9:c5:e7:d8:78:
                    8f:26:81:ab:c3:f3:84:0f:2f:85:3e:c6:05:36:34:
                    d8:ba:48:ab:58:20:cd:ca:1d:47:f5:66:aa:e9:a6:
                    98:db:f6:a7:49:ad:ec:b4:00:1e:ff:2d:22:24:62:
                    64:03:79:56:5b:fa:5c:1c:28:35:21:d4:a0:0e:3d:
                    0e:00:f8:42:19:e9:31:28:30:69:af:85:cf:11:27:
                    f4:3d:2a:6e:28:3a:40:f1:15:8b:51:16:1d:26:74:
                    2b:57:cc:b2:3c:df:ef:25:9e:1c:72:aa:1c:d2:16:
                    0b:f4:e6:70:c7:8d:37:b4:8b:56:bb:02:32:6a:3b:
                    87:1d:64:67:b3:f4:09:e1:f9:a4:12:e3:e7:18:4f:
                    f9:c6:18:a3:8b:71:a8:17:b2:f6:23:22:dc:26:be:
                    88:a8:61:12:8b:16:60:e2:ab:98:f9:35:b9:d6:24:
                    bf:b5:bd:d5:6c:2c:6d:2f:f7:6f:93:04:16:f5:ca:
                    2c:03:4b:5a:dc:d8:9c:7c:b8:0b:57:fd:8d:16:9c:
                    49:22:ee:ec:58:b9:7b:89:37:73:29:6d:8b:e2:ca:
                    f1:4e:a5:4a:0d:93:8e:d6:d2:e1:1e:94:eb:de:a2:
                    61:63:02:58:7e:e1:26:2f:7a:46:fb:18:c6:50:ae:
                    be:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D0:62:08:9F:05:83:35:DC:C9:7A:BD:CA:D7:0F:AE:A5:C2:D7:BB
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3130342e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:c0:ed:8a:8f:48:fd:f3:c9:b5:29:6c:be:2d:11:5f:3c:61:
         bd:e4:6e:44:07:86:09:b0:51:b8:72:65:ff:6e:8d:31:93:7e:
         ab:de:ac:92:9f:61:ad:61:e7:6f:5b:7d:58:bf:65:bb:b0:e5:
         5a:68:40:85:25:8e:ad:2e:39:aa:f3:c2:2d:51:0c:1d:bd:3b:
         16:de:ce:3b:de:62:06:3d:10:2a:b3:40:f6:55:a4:6d:39:66:
         48:08:ae:2c:5c:69:7e:d1:09:cd:e9:b2:7b:2b:a2:47:45:d9:
         7e:f5:43:25:0c:6c:78:18:f7:a2:8e:90:f8:32:50:99:6a:d9:
         b2:53:9f:28:48:8e:ac:12:12:70:f5:f4:5f:f7:2d:2e:ba:30:
         a6:ec:93:7c:3b:ac:2c:d7:d8:3c:3a:fe:e8:4f:de:75:d7:79:
         1c:23:1f:ff:a7:92:47:5f:13:5d:09:d0:cf:cc:c2:8b:07:4a:
         d7:2e:5b:44:4e:cd:45:01:42:f4:40:1f:c7:73:30:a6:ff:f6:
         76:0b:f1:63:ba:a2:71:bd:98:6b:2c:b6:b9:04:33:4a:c8:0f:
         5a:f6:e5:b8:ce:00:e7:de:3e:f6:c9:6e:96:1d:e3:44:cb:d0:
         b8:34:ce:05:05:c4:db:3b:f3:25:17:cd:3f:29:d5:d2:61:ff:
         ff:05:4f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-ams.rpki-client.org