Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3131342e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e3131342e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          uxFqJcn3qWoe1EiWD4hXfObEEzlRt2LeyJ5b9HIfBdE=
Subject key identifier:   53:20:6D:A6:2C:72:30:18:7C:52:D3:2E:6A:CC:54:BC:4D:FC:E3:8D
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       69716C53158B381D77E9EECF378D158028B51A13
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3131342e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:09 +0000
ROA not before:           Thu 02 May 2024 14:20:09 +0000
ROA not after:            Thu 01 May 2025 14:25:09 +0000
asID:                     52251
IP address blocks:        190.181.114.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:71:6c:53:15:8b:38:1d:77:e9:ee:cf:37:8d:15:80:28:b5:1a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:09 2024 GMT
            Not After : May  1 14:25:09 2025 GMT
        Subject: CN=53206DA62C7230187C52D32E6ACC54BC4DFCE38D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:99:b3:99:a5:7b:72:c6:f5:b3:8d:38:e7:34:
                    d9:8b:6c:41:97:e5:5d:63:6c:1c:2c:ed:93:2c:be:
                    c2:9a:22:d1:44:b0:b6:1e:63:47:57:e5:8e:11:3a:
                    bd:23:c1:a3:5a:ca:6c:a6:3a:93:d1:64:59:58:04:
                    09:48:2d:37:5a:a8:5c:25:eb:9c:37:4b:90:d6:01:
                    e1:9b:ca:04:f8:52:4b:fe:2b:0c:e0:72:ac:c4:15:
                    d5:8b:f3:ef:66:07:9b:bd:68:e7:a9:96:0c:d3:50:
                    30:32:b7:d1:11:4b:e3:3b:26:4c:e8:36:74:8d:94:
                    36:89:8c:47:ce:06:a8:36:5c:60:0b:48:32:7d:41:
                    53:c5:db:5d:7c:b5:e7:ac:43:30:7d:e8:a4:b4:5d:
                    e2:97:60:e5:6e:52:87:f9:da:f2:bd:41:19:b7:45:
                    29:57:5f:fb:8a:d3:59:b8:f5:28:d6:a7:19:83:e0:
                    ec:ae:cd:ff:91:14:a7:d2:b0:3c:8b:bf:95:fd:70:
                    17:ac:fd:25:f6:4a:83:d2:e5:b9:e4:6e:51:d2:8e:
                    c6:37:a2:a6:3b:b4:71:8d:b0:8d:62:d2:ad:ba:a7:
                    a2:1c:12:aa:97:c0:bb:75:74:4d:78:84:37:b3:e0:
                    f2:8d:a9:1e:50:00:ee:9d:81:50:6a:d8:fb:b2:5e:
                    69:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:20:6D:A6:2C:72:30:18:7C:52:D3:2E:6A:CC:54:BC:4D:FC:E3:8D
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3131342e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:ed:de:01:6c:85:6d:04:8c:77:06:47:71:43:56:97:e1:cb:
         47:23:47:58:ec:69:71:bf:28:b6:12:ef:aa:79:03:15:e8:bb:
         b5:36:cf:16:68:de:6a:40:e5:20:e1:bc:1a:87:23:72:7c:b1:
         75:30:f6:06:1a:41:b8:7b:04:bb:4f:8c:60:34:51:58:9c:73:
         db:54:13:60:df:11:15:29:5a:35:47:1e:a3:50:69:98:47:99:
         e0:a8:5b:c2:d1:96:58:d9:68:24:88:5e:8e:56:dd:25:ba:a9:
         10:1f:98:ac:65:6d:9a:6c:99:d2:99:1f:f5:a1:25:a5:b3:b0:
         9b:e6:db:ab:f0:96:b1:c9:0d:df:3b:9d:0c:9a:6d:13:6a:8b:
         27:6a:8d:8c:e6:17:b2:75:c1:6e:ec:12:fb:36:9f:1f:b9:86:
         d5:11:93:f6:b5:d0:d4:a7:d4:54:12:c3:77:d6:f9:cb:2e:3e:
         cd:ed:6f:04:ac:8a:a6:6e:6e:a4:81:86:13:c6:dd:46:db:8a:
         4b:39:5a:c3:2b:c0:c6:cd:53:bf:0e:5f:2b:a5:6c:f5:ba:e3:
         a6:53:50:e9:3b:5e:a6:a7:aa:21:a4:60:59:78:72:c6:ff:df:
         eb:10:07:d4:fa:96:6e:ec:7d:2f:a7:d9:36:51:28:1b:78:a9:
         5d:1d:75:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org