Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3132322e302f32332d3234203d3e203532343236.roa
File:                     3139302e3138312e3132322e302f32332d3234203d3e203532343236.roa (raw, json)
Hash identifier:          E4cbawDuHVp3n+FrTtufKTWQh6JNFjhHIXw4/nNKico=
Subject key identifier:   27:37:B4:75:6D:47:D2:86:33:85:05:07:6B:38:1E:11:BF:AC:25:A1
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       07A5E6B766C4890C008CE2AB31C1AEEABB3C5E3B
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3132322e302f32332d3234203d3e203532343236.roa
Signing time:             Fri 26 Apr 2024 12:40:00 +0000
ROA not before:           Fri 26 Apr 2024 12:35:00 +0000
ROA not after:            Fri 25 Apr 2025 12:40:00 +0000
asID:                     52426
IP address blocks:        190.181.122.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a5:e6:b7:66:c4:89:0c:00:8c:e2:ab:31:c1:ae:ea:bb:3c:5e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Apr 26 12:35:00 2024 GMT
            Not After : Apr 25 12:40:00 2025 GMT
        Subject: CN=2737B4756D47D286338505076B381E11BFAC25A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:7b:44:96:36:35:2d:7b:9a:15:ed:58:5b:
                    e2:75:c9:c3:88:04:46:94:16:e0:bb:32:b8:ed:11:
                    b6:96:25:79:00:6e:ad:d9:b4:73:9b:c8:2e:b6:ca:
                    8a:8f:71:b6:d3:84:a7:50:ef:64:64:4a:2f:42:d9:
                    5e:64:56:29:1e:35:2f:7a:7f:76:70:9c:2d:de:f2:
                    3e:9c:3d:8a:b3:0f:33:68:75:a3:d1:a7:2e:46:37:
                    1c:08:65:e1:db:a5:e3:28:67:a0:44:51:d6:ea:0b:
                    f2:a5:9f:5f:97:03:cf:74:98:8f:ee:e5:d6:13:42:
                    dd:d7:22:2d:d5:60:cf:07:7a:de:6b:e7:39:3b:d9:
                    e6:ad:95:1f:0c:83:6f:b8:dc:a4:30:11:7a:f6:88:
                    79:96:02:f9:76:24:06:96:1e:2e:06:27:09:8d:06:
                    43:a6:8d:ac:d3:4f:c7:fc:0c:ae:da:d0:99:6f:e7:
                    ce:13:ad:a2:c4:94:ff:c4:73:d6:da:dc:ad:e6:f5:
                    b8:1d:23:a9:c0:de:0d:e3:d1:3c:cf:2c:2a:a7:29:
                    f6:8a:0d:5e:3b:b3:45:67:a5:80:82:d5:86:28:82:
                    71:bb:0a:cb:12:71:c8:52:01:44:a4:ea:fc:dd:c2:
                    5b:06:26:e3:e0:f3:b7:76:69:d4:4b:b6:b0:1d:95:
                    f4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:37:B4:75:6D:47:D2:86:33:85:05:07:6B:38:1E:11:BF:AC:25:A1
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3132322e302f32332d3234203d3e203532343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:77:cc:a6:96:03:14:40:8c:81:9d:bd:a0:9d:66:51:3d:49:
         94:e4:21:fe:62:4f:87:de:7a:e3:64:5e:36:d6:3b:d5:93:c2:
         d5:56:68:06:9e:92:c2:56:8b:62:f7:5b:6a:59:20:60:b5:6e:
         89:06:c1:58:bb:ab:06:da:03:1a:9d:89:b5:a4:ca:62:81:e0:
         ec:73:3b:21:e4:0e:7c:2a:9e:0f:be:0a:ec:64:b8:d7:b2:4d:
         b9:c4:93:a5:e0:a1:c1:e4:d0:f5:fc:9e:3b:fb:7c:e1:48:27:
         db:dc:0c:1c:06:8b:42:da:ec:5d:51:b8:23:29:82:67:5c:95:
         ac:8e:4d:3e:dd:45:30:46:13:3d:c8:3a:a4:53:5a:75:27:4c:
         2e:53:f9:73:38:50:41:85:47:d1:17:4a:2a:ec:92:74:c3:34:
         d7:29:8b:2b:62:7e:9c:9f:be:4e:e8:17:c1:59:c6:95:60:45:
         24:98:c5:9a:69:1f:af:04:c0:19:22:5b:5b:c0:7d:b9:92:4a:
         48:c7:e0:79:a1:ed:04:7a:24:1a:8d:dd:6d:a4:b9:d4:a2:5f:
         24:17:d7:ca:27:cf:a6:d7:6a:91:2f:ef:b5:c2:9f:f5:fd:ef:
         70:a0:ad:b3:3b:b8:2c:a6:ae:ce:01:76:94:ec:9d:f1:43:bd:
         92:6d:fd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org