Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3132302e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e3132302e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          l8Y+UNX2uj4MWOv/76J1PILvI4kgzaE6VzJIxoN80Y0=
Subject key identifier:   58:1D:15:98:54:F8:F4:C6:4A:FD:AF:C2:E0:5D:49:DD:98:1E:50:52
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       19D24AD931DC603E8C9B21B6435BF0EE20E78097
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3132302e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:08 +0000
ROA not before:           Thu 02 May 2024 14:20:08 +0000
ROA not after:            Thu 01 May 2025 14:25:08 +0000
asID:                     52251
IP address blocks:        190.181.120.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d2:4a:d9:31:dc:60:3e:8c:9b:21:b6:43:5b:f0:ee:20:e7:80:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:08 2024 GMT
            Not After : May  1 14:25:08 2025 GMT
        Subject: CN=581D159854F8F4C64AFDAFC2E05D49DD981E5052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c5:8c:f8:23:89:fe:a4:8c:0d:68:93:7a:f6:
                    e9:1a:9d:99:2b:fa:b3:21:2c:a8:2a:c7:f5:07:05:
                    1e:4d:72:47:f6:e5:92:6f:f6:88:92:54:14:61:36:
                    aa:a4:de:5e:4d:b6:a5:b8:3b:ef:69:c4:ed:f2:8b:
                    05:65:44:3d:69:c8:77:a0:74:bd:b0:dc:97:7e:e6:
                    22:68:6b:66:79:5f:59:71:73:1d:e5:cc:c7:c7:4f:
                    1d:6f:c2:10:ab:97:3e:a2:e5:87:6a:ba:b8:e9:2e:
                    eb:f5:64:71:e5:0b:5b:4a:69:fc:3b:e1:cf:67:f2:
                    18:bc:a4:8e:1e:8e:4c:64:1e:cf:ba:ac:2c:8f:2e:
                    59:ad:16:ed:cb:91:c8:b8:d0:b4:11:22:47:33:6f:
                    a9:a8:ca:64:67:f9:9c:2a:33:b4:b0:16:30:7a:5e:
                    17:d0:0b:74:a9:96:00:29:a0:74:98:b7:0a:e0:02:
                    04:89:0d:de:02:fc:83:66:0d:af:7f:40:df:0e:3c:
                    76:82:d9:36:e0:b4:53:87:07:18:9f:40:4c:42:46:
                    9b:39:55:91:54:f3:90:9f:0b:13:86:73:e8:d0:75:
                    8c:58:da:97:b5:88:e7:f9:16:a3:df:aa:f2:27:5d:
                    0e:26:b6:11:f6:d4:e0:21:99:76:96:0f:f4:3d:75:
                    98:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1D:15:98:54:F8:F4:C6:4A:FD:AF:C2:E0:5D:49:DD:98:1E:50:52
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3132302e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:0b:db:5d:ae:52:c1:33:9c:e2:2c:d6:f3:98:df:a9:e2:1e:
         35:d9:12:9a:05:aa:7c:0e:0c:b9:82:44:37:4f:21:51:f3:0f:
         91:fc:d9:56:6b:76:7b:8c:44:b1:10:d9:4d:b4:e7:9c:b7:99:
         0c:da:06:11:c5:3b:96:16:d2:1f:2e:a6:ae:85:ef:1a:47:df:
         bd:a9:2e:3b:66:2a:d8:ba:4b:27:08:27:e7:88:76:69:4a:4c:
         2a:e7:5a:65:c4:4b:07:8b:e7:ae:57:85:bb:df:01:c9:a7:7e:
         fc:79:aa:8d:83:4d:29:e0:5c:bb:6e:6e:d8:95:87:f9:a0:cf:
         d4:6d:96:5b:36:2d:de:90:29:02:26:dc:e6:94:33:9d:e4:0a:
         d9:f5:8c:0c:89:24:3c:a2:1b:43:d2:11:02:b3:65:8b:8d:52:
         02:1e:1b:22:8d:9b:d0:fc:de:b7:e8:f6:d9:22:39:5d:13:48:
         98:bc:bf:96:f3:b9:e2:21:89:ba:5e:c1:8c:33:5c:19:a5:fb:
         b7:b8:6d:4e:c8:ee:00:0b:10:bb:2f:1c:6d:e1:87:38:05:a0:
         66:eb:15:cf:9f:11:ea:b1:52:eb:40:5a:3d:be:f7:5f:c7:1e:
         d4:63:12:63:52:17:67:02:49:9b:eb:6f:75:a6:9f:ee:5a:5e:
         a5:b5:bc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----