Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3130382e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e3130382e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          ItzQ+RNhzkqvctdaoq/OMNyzZw5vdJdwdC9PJgEpoUY=
Subject key identifier:   7F:C1:AD:BD:B8:80:2F:1B:50:58:E0:AB:03:AD:23:00:B2:45:EF:95
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       0B23B7FD089A5E30A2C8E290A1190781D86C8485
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3130382e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:08 +0000
ROA not before:           Thu 02 May 2024 14:20:08 +0000
ROA not after:            Thu 01 May 2025 14:25:08 +0000
asID:                     52251
IP address blocks:        190.181.108.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:23:b7:fd:08:9a:5e:30:a2:c8:e2:90:a1:19:07:81:d8:6c:84:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:08 2024 GMT
            Not After : May  1 14:25:08 2025 GMT
        Subject: CN=7FC1ADBDB8802F1B5058E0AB03AD2300B245EF95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1d:2f:f2:64:5f:fa:22:04:a2:60:e3:bf:b2:
                    cc:40:80:ef:59:0a:3c:62:08:9f:28:3d:ae:69:d8:
                    54:7a:33:ac:b8:b7:fe:a4:c7:70:15:41:78:fe:88:
                    7a:6a:0d:69:f2:b0:b6:28:bd:90:11:94:84:02:62:
                    7b:72:ab:f2:18:65:6b:9f:9b:cc:14:b8:e9:55:41:
                    5e:6a:d3:fa:73:c9:dc:bc:3c:71:1e:73:c6:3c:d0:
                    ad:7e:47:9e:64:2d:b8:9f:35:01:ac:d7:f9:91:4a:
                    d0:ab:06:b5:40:03:12:d7:ea:5c:90:87:18:31:6a:
                    df:5c:06:63:01:05:fa:ac:3f:64:e5:e0:bc:11:45:
                    64:ba:37:ba:88:6d:70:b8:e9:55:96:a2:03:45:71:
                    2c:37:a5:e4:1e:c8:c6:0b:98:9c:7a:f5:57:c2:aa:
                    ee:cf:07:b9:c6:97:18:32:74:61:80:ae:81:19:83:
                    8c:16:bd:d2:f6:8b:30:30:02:f3:22:47:0d:1c:a9:
                    af:e9:c2:09:fc:89:65:e4:16:2d:bf:7b:6f:c5:fe:
                    c6:a7:b0:a2:5d:74:6d:6f:6d:01:4c:a5:77:b6:61:
                    75:85:1b:6b:e8:81:e3:22:14:cd:db:09:93:88:65:
                    65:90:d3:44:e2:20:c0:62:61:73:11:9f:79:2a:bf:
                    d6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C1:AD:BD:B8:80:2F:1B:50:58:E0:AB:03:AD:23:00:B2:45:EF:95
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3130382e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:ea:9e:9c:b9:83:4e:30:6d:71:e7:5d:e9:a4:f7:f0:5c:43:
         b2:aa:7e:7b:1a:bd:18:73:43:49:7f:c3:2f:c4:f3:bf:13:b4:
         eb:85:2b:bf:08:d2:6c:30:5c:1d:13:23:66:9f:4e:d5:bd:5b:
         8b:d5:d3:79:46:5c:12:9a:25:e9:ff:f8:5d:6d:ee:6c:68:61:
         01:d6:42:d4:05:25:35:ad:b1:f8:5a:ab:30:ef:4d:bc:d5:ec:
         8a:82:1d:8d:23:88:07:4e:67:31:28:00:17:d1:ec:5a:54:d7:
         d4:e9:54:22:6a:64:55:92:b2:01:70:09:63:28:59:c0:eb:0b:
         2b:d0:cc:b1:c7:26:c9:59:8f:9a:f0:a1:15:19:70:ca:69:2a:
         f1:c9:85:a2:93:be:69:9e:b9:68:d1:b8:59:ff:be:cb:fd:ad:
         4c:7f:43:41:f1:77:fb:d7:7e:6b:eb:e1:2a:95:84:7f:17:f4:
         67:a2:ca:f0:dc:b6:12:49:45:9a:25:d6:57:02:db:cd:15:19:
         55:03:9e:d0:dc:6d:98:5e:66:5c:fe:52:3d:f4:8d:05:9e:56:
         d2:fe:d4:d4:b3:cc:16:02:6a:ac:92:a5:46:97:77:e5:9b:b4:
         74:0c:fd:9e:ea:ba:9f:ec:cf:83:b4:64:af:d4:9a:1c:a8:3c:
         ce:09:53:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-ams.rpki-client.org