Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3130362e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e3130362e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          x1SoeirPv87i7xVCfJ3InQVWGV1LPls854HYc4ca/LI=
Subject key identifier:   EF:2E:19:2B:23:9C:92:7F:E2:1A:9B:ED:5C:78:2C:12:AE:CB:A1:87
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       3AA7AE630CEADA9B6B1D5DB041FB3203A9D9C591
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3130362e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:06 +0000
ROA not before:           Thu 02 May 2024 14:20:06 +0000
ROA not after:            Thu 01 May 2025 14:25:06 +0000
asID:                     52251
IP address blocks:        190.181.106.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a7:ae:63:0c:ea:da:9b:6b:1d:5d:b0:41:fb:32:03:a9:d9:c5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:06 2024 GMT
            Not After : May  1 14:25:06 2025 GMT
        Subject: CN=EF2E192B239C927FE21A9BED5C782C12AECBA187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:59:08:08:03:0c:28:91:f3:f4:25:83:ac:
                    b7:e6:66:d3:2d:0a:69:0f:2d:cd:4d:5a:35:eb:b0:
                    77:70:33:c2:b5:04:89:ad:02:3e:33:40:e0:4c:94:
                    7c:1f:c5:f7:bb:03:72:66:91:cc:3f:16:58:6f:e4:
                    10:3f:24:62:2c:cf:8e:89:1b:cf:c7:78:92:be:bb:
                    a2:4c:3f:b2:5c:f8:84:be:62:4c:b7:cd:09:10:3f:
                    c1:4b:29:ca:91:ce:e1:66:43:0f:eb:04:4d:79:50:
                    01:47:eb:d9:84:5b:e9:77:70:ed:47:59:04:c2:50:
                    a1:e4:7c:8f:94:b5:c0:d5:6e:c1:dd:aa:8b:e7:3a:
                    ec:38:05:9b:19:48:00:eb:10:82:24:2e:9e:1c:9f:
                    0f:94:89:7b:ae:59:3c:3e:02:1e:71:aa:f2:76:4d:
                    a7:ee:6f:60:08:cf:90:bc:36:41:1d:21:98:6f:0a:
                    64:43:58:37:07:3d:24:f4:74:58:7b:e4:55:c7:a8:
                    43:60:9c:4a:11:b2:7d:9c:0a:ff:51:a1:b6:f0:3e:
                    e0:01:54:05:37:5d:2a:cb:b2:bc:f0:aa:74:4a:c8:
                    02:0f:e9:27:b6:26:8c:cc:01:4f:97:d4:71:c7:50:
                    53:5c:61:91:e9:c0:54:b1:63:1e:f7:db:be:69:8e:
                    1c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2E:19:2B:23:9C:92:7F:E2:1A:9B:ED:5C:78:2C:12:AE:CB:A1:87
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3130362e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:c7:7d:1f:d5:1d:01:89:c6:13:5a:54:aa:48:c7:e8:05:e1:
         99:a3:3f:86:e3:71:6e:3f:87:13:4f:ef:c8:c3:5a:d1:04:3a:
         03:c1:cd:90:f1:cb:74:9b:5b:c2:ff:db:a2:26:3f:c9:15:4c:
         87:72:79:6d:67:d8:f0:d9:3e:ca:a6:60:59:ef:4b:ae:63:2b:
         e6:5c:7f:02:c7:44:69:cd:b7:4c:b4:02:88:45:38:78:28:32:
         89:b2:b2:1f:25:de:20:1d:82:3d:15:73:65:b3:97:57:12:ce:
         a6:6c:5a:26:c5:af:60:69:a6:f3:3e:51:f4:14:7e:54:31:30:
         ab:25:35:cb:22:0a:9a:43:96:95:41:f2:48:d0:12:96:b8:02:
         35:5f:4d:85:33:f7:41:ac:ac:04:34:a2:cf:33:8f:f7:c4:68:
         d7:43:b6:15:2e:a3:b4:2d:a1:44:7a:0b:f3:1d:c7:65:30:a9:
         e9:89:05:0c:06:24:9a:a2:fb:92:1f:6f:bb:35:df:bb:38:42:
         34:36:26:59:92:3d:0f:65:75:a0:fa:a7:15:72:65:26:21:49:
         a3:2e:08:f7:9a:ee:d9:13:e0:5e:a1:53:95:72:98:72:17:6e:
         6e:45:6d:ea:7d:53:76:9f:46:d6:b0:34:2a:5d:bc:be:13:d0:
         93:bc:87:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org