Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3131322e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e3131322e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          sFEymGnuVDW5sfQEo/57CpouXC2RXcO+K6FyV5cxn2A=
Subject key identifier:   0D:D8:B3:D3:13:44:51:DE:6C:0F:C6:69:59:B0:7E:EE:7B:25:03:91
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       70ABFCF962052ACFA3CA35368BA0C6D2FD2ACF4A
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3131322e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:05 +0000
ROA not before:           Thu 02 May 2024 14:20:05 +0000
ROA not after:            Thu 01 May 2025 14:25:05 +0000
asID:                     52251
IP address blocks:        190.181.112.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ab:fc:f9:62:05:2a:cf:a3:ca:35:36:8b:a0:c6:d2:fd:2a:cf:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:05 2024 GMT
            Not After : May  1 14:25:05 2025 GMT
        Subject: CN=0DD8B3D3134451DE6C0FC66959B07EEE7B250391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:ca:1a:f0:49:00:27:a3:e8:6d:06:94:45:
                    8a:e3:22:ce:e2:7d:fe:5e:99:9e:ba:3e:1c:79:27:
                    45:38:58:8b:ba:af:10:60:07:ab:80:e0:50:19:34:
                    e0:40:44:75:8b:f7:2b:6a:12:8f:3f:4b:ed:e1:53:
                    6d:27:1c:17:5d:ce:4f:c5:9a:04:97:97:b8:4a:f6:
                    e5:d0:c5:73:d5:d1:28:1a:1d:9e:6e:30:8c:4e:e7:
                    5c:6b:94:36:d6:42:2b:a6:2b:1c:fd:ba:b7:49:ca:
                    61:c5:17:68:77:3b:57:6b:4c:70:5b:7d:6e:bc:c5:
                    5d:75:55:0c:fb:b4:8b:e5:37:47:8d:8c:a0:dc:af:
                    f4:fb:40:ce:12:a4:ef:00:93:e0:16:ad:ef:92:54:
                    cd:8b:59:51:7e:33:6d:c1:51:27:4e:a9:dc:9c:4f:
                    61:22:ff:f8:d4:8f:52:e8:4f:65:36:15:db:fe:74:
                    b9:aa:31:22:3c:03:e1:de:12:18:05:7c:7d:a0:97:
                    22:ee:5b:41:1b:76:af:21:4d:90:a5:d9:16:27:5c:
                    f6:0f:96:27:af:c9:73:0f:c1:ac:ab:3d:14:ec:11:
                    e2:fa:27:7e:07:5c:52:77:0d:d2:9a:c6:ee:91:5a:
                    59:36:a1:c9:55:83:28:40:32:50:38:a2:6b:62:1d:
                    6b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D8:B3:D3:13:44:51:DE:6C:0F:C6:69:59:B0:7E:EE:7B:25:03:91
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3131322e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:63:97:fc:eb:32:67:47:47:f9:8c:a4:c3:43:76:cb:d8:76:
         7a:f7:cd:82:0d:33:3b:12:4c:3c:fa:d2:bc:95:41:d3:0f:e6:
         5f:18:7d:a3:00:47:ea:d1:97:13:7e:29:30:fe:8b:b2:58:04:
         a6:5a:87:08:80:72:85:cf:bd:e4:b4:62:c9:9c:10:5c:1e:0c:
         17:8b:80:05:b3:c4:af:42:40:de:86:8f:84:1f:cd:fd:98:ce:
         9f:0d:d1:4f:97:4d:5b:a9:04:96:81:24:6d:c4:ef:59:25:b1:
         4f:fb:a4:66:b5:06:0b:e1:c8:de:51:22:9c:03:37:9c:a0:76:
         5d:5a:73:6c:df:ed:35:c8:06:d1:5b:29:fd:18:a7:d6:aa:85:
         ca:4c:16:d3:5c:70:12:49:85:7a:09:fe:23:bc:39:8c:41:08:
         77:96:cc:97:17:36:91:48:d1:74:05:ba:11:77:7c:22:fc:f8:
         eb:b7:cd:04:69:7a:3b:78:7e:52:37:d9:3d:6e:5d:09:d1:0b:
         de:86:6b:01:c9:83:cc:84:58:b3:ae:4d:86:32:cf:86:86:b0:
         50:9a:b6:e2:c2:e0:c2:1c:96:76:5f:15:30:5f:12:e1:c3:89:
         b7:5c:ec:cf:37:2b:ba:1b:73:f8:a2:eb:3b:8b:70:95:6f:eb:
         01:80:7a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org