Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3132362e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e3132362e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          hn1A0g3zEMwzi/DCKh3PKB4RfEhdWphbeSdZPMaAoKE=
Subject key identifier:   63:CF:5D:A4:56:E7:A4:EA:FC:91:8B:15:3B:68:B7:1C:CE:6A:56:F7
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       3465499D3DD099996D518F25A0C86688D243BB93
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3132362e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:08 +0000
ROA not before:           Thu 02 May 2024 14:20:08 +0000
ROA not after:            Thu 01 May 2025 14:25:08 +0000
asID:                     52251
IP address blocks:        190.181.126.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:65:49:9d:3d:d0:99:99:6d:51:8f:25:a0:c8:66:88:d2:43:bb:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:08 2024 GMT
            Not After : May  1 14:25:08 2025 GMT
        Subject: CN=63CF5DA456E7A4EAFC918B153B68B71CCE6A56F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:db:ba:34:d1:0a:9e:0f:41:35:17:2c:ce:9a:
                    ef:04:36:0f:04:56:96:06:e4:17:af:ca:9d:07:d5:
                    d1:00:84:70:be:e6:d0:a6:4d:23:c6:a0:3a:b2:f5:
                    8d:46:45:b9:6a:19:31:db:eb:0f:4b:05:40:c3:7c:
                    ef:57:73:9c:21:57:c8:15:5d:8e:99:6e:c2:49:c0:
                    ee:73:ca:85:8c:19:b3:bc:1f:0e:a9:59:28:ed:d0:
                    8a:fc:89:da:2c:10:e9:5a:2b:78:b6:15:e4:06:47:
                    28:80:2e:09:1b:79:1c:bb:6f:00:3d:8e:48:88:b1:
                    e8:0d:33:32:e6:85:1b:2c:ce:af:1f:08:f5:bb:56:
                    b4:fe:5e:e4:ab:c3:ef:6f:05:01:02:f9:eb:06:57:
                    c2:ea:eb:eb:12:a6:2a:8a:d6:e2:6e:f4:bd:97:15:
                    fc:82:25:d0:e5:c6:fd:70:62:e3:fa:dd:1f:51:fb:
                    fc:24:77:50:20:bf:d3:9a:04:96:f1:95:0f:ad:99:
                    24:d7:c4:a9:46:47:04:28:c7:03:92:bc:d3:69:a4:
                    b7:fc:38:75:18:ee:89:c8:90:51:11:fe:91:98:48:
                    94:2f:a6:44:52:75:88:d8:3b:bc:75:73:15:73:87:
                    c7:52:02:9d:11:99:38:08:94:00:94:6b:8b:f4:ca:
                    5f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CF:5D:A4:56:E7:A4:EA:FC:91:8B:15:3B:68:B7:1C:CE:6A:56:F7
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3132362e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:b7:7b:f5:f3:8b:9f:0e:6b:de:7b:0d:91:de:04:e8:47:3c:
         4e:f2:47:84:e5:49:aa:77:d0:3f:0d:62:e0:16:e1:64:37:f8:
         24:47:8a:29:57:47:c6:42:21:19:3a:0e:81:ad:46:bf:c7:04:
         9e:d4:81:ff:59:d0:de:ab:73:b2:3e:90:27:b4:be:ad:f7:c4:
         f1:a2:a2:72:b3:10:b2:47:6f:22:cc:27:36:1c:8c:58:b6:86:
         31:3d:5f:21:01:c6:b1:03:be:7b:7e:7c:a4:ac:bc:ed:53:6c:
         d0:66:7b:db:68:3d:01:38:d5:9c:b3:6d:48:3e:00:57:05:3e:
         b3:fc:d1:8c:09:68:e0:1e:2a:44:54:fc:77:58:d6:42:85:bd:
         27:e8:ba:4d:8f:69:10:39:18:93:fb:f0:47:64:30:64:eb:87:
         9f:5c:9b:3f:ba:33:e9:88:a0:b7:89:2f:cb:ed:6c:c6:9a:b5:
         d3:d0:49:66:e6:25:45:72:b1:15:4d:6f:8b:1f:cd:e8:15:08:
         5c:8d:05:9e:9d:7e:4c:16:4a:36:4c:e2:ec:88:f5:6f:91:2c:
         02:78:e7:e8:77:e0:c0:7f:1a:db:fc:b4:dc:d8:36:55:b9:a1:
         8f:df:65:0b:46:a7:2f:ba:64:4c:d6:86:f9:4a:bd:6f:06:17:
         86:76:bd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-ams.rpki-client.org