Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e36342e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e36342e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          jJNzXZv8bo8N0+V/ra5QReLvvEzgF8ZETz/YMYdmsdA=
Subject key identifier:   4E:58:E8:20:D8:B9:26:B3:93:E8:5E:B7:12:A9:F1:69:AF:B7:34:32
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       5E1B2EAE3A653F19B30EEFB5F55EC81EC2E5FF4E
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e36342e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:00 +0000
ROA not before:           Thu 02 May 2024 14:20:00 +0000
ROA not after:            Thu 01 May 2025 14:25:00 +0000
asID:                     52251
IP address blocks:        190.181.64.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1b:2e:ae:3a:65:3f:19:b3:0e:ef:b5:f5:5e:c8:1e:c2:e5:ff:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:00 2024 GMT
            Not After : May  1 14:25:00 2025 GMT
        Subject: CN=4E58E820D8B926B393E85EB712A9F169AFB73432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:2f:9d:df:f6:3f:a5:2f:7a:06:a9:84:ae:
                    e1:b5:76:bd:a0:e1:9e:e1:54:4b:88:3b:b4:cf:b4:
                    cb:af:47:8f:9c:5a:d2:79:3d:81:9d:98:ea:72:cb:
                    fb:bc:a3:c3:f1:9f:0c:ce:88:2e:e8:57:a0:d5:1e:
                    6c:93:69:c0:c5:08:a0:51:21:ae:6b:fd:4a:53:3c:
                    4e:a7:9d:e7:cd:9b:39:68:ed:10:92:25:75:5d:c9:
                    a5:89:3d:20:01:31:db:82:be:9f:6e:eb:23:c2:9c:
                    42:b6:9f:3d:68:c6:f7:33:f6:11:87:1e:7e:78:c6:
                    62:b2:81:92:f3:e0:17:2c:8e:48:1d:f7:cd:cc:79:
                    99:5d:d4:71:86:5b:ec:57:b0:14:b5:78:0b:90:3d:
                    c5:18:35:35:78:8a:88:a5:dc:77:d7:87:0c:4f:ce:
                    9c:b2:55:ba:fe:6a:2a:a9:d2:8f:c7:78:4f:5e:0e:
                    fc:2d:2d:53:7d:16:fa:5d:e1:2b:d6:74:d3:ac:ad:
                    d7:f2:2e:45:58:43:bf:83:81:8f:1b:dc:7a:c9:3f:
                    f8:40:d7:a3:6b:2f:dc:94:36:04:02:88:48:e0:d8:
                    18:87:ea:df:18:aa:d0:8a:21:53:da:68:71:23:ad:
                    46:bd:33:27:9d:05:0b:6b:e7:83:fb:dc:0a:2d:77:
                    38:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:58:E8:20:D8:B9:26:B3:93:E8:5E:B7:12:A9:F1:69:AF:B7:34:32
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e36342e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:a1:53:f7:93:ae:68:5b:35:bc:38:ec:40:e3:55:dc:c0:3d:
         0b:b3:d4:aa:20:ff:21:3d:3c:44:dd:ae:26:23:64:ad:b4:d5:
         67:48:c2:d1:0d:4b:3f:7b:68:08:3a:ee:b4:3f:a2:57:5c:c6:
         2f:52:a1:57:8b:7a:f3:34:ed:bf:9d:1f:f1:05:cd:48:88:c5:
         a0:2d:34:f5:ae:05:f1:88:a5:fd:15:07:71:25:00:df:de:bf:
         09:0c:ed:a7:18:0b:12:b5:a3:ec:1d:68:80:3a:f7:ab:15:51:
         39:32:b7:a2:4b:6f:a8:46:a2:b8:10:e7:05:e4:d2:2b:eb:1a:
         8a:21:b8:ee:b5:ed:2f:23:94:48:1b:b6:43:7f:ae:9f:79:eb:
         47:8b:e2:c8:a2:58:fa:92:2c:e8:b1:b7:34:c8:7d:40:69:f3:
         0b:2f:19:0e:86:28:f4:8a:41:58:08:99:ad:7f:e8:90:81:e9:
         17:d7:aa:63:eb:cb:4d:de:c6:1d:e9:48:d4:6e:3d:0a:44:5c:
         9c:94:28:84:28:4b:a7:9c:8d:ff:c8:8f:ba:0c:05:d1:e8:d3:
         06:a5:7c:04:dc:25:d1:9e:2d:0f:e3:12:6b:16:c9:4b:71:5b:
         78:51:42:ea:b1:d1:b1:79:79:76:39:19:ce:1f:a2:d2:9b:4d:
         dc:5e:35:b1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXhsurjplPxmzDu+19V7IHsLl/04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcyNkJEQjA2NjAwOUU0NTczQkEzNUQ1RkVBRkNDQjQz
MTMzMENENzAeFw0yNDA1MDIxNDIwMDBaFw0yNTA1MDExNDI1MDBaMDMxMTAvBgNV
BAMTKDRFNThFODIwRDhCOTI2QjM5M0U4NUVCNzEyQTlGMTY5QUZCNzM0MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzCy+d3/Y/pS96BqmEruG1dr2g
4Z7hVEuIO7TPtMuvR4+cWtJ5PYGdmOpyy/u8o8PxnwzOiC7oV6DVHmyTacDFCKBR
Ia5r/UpTPE6nnefNmzlo7RCSJXVdyaWJPSABMduCvp9u6yPCnEK2nz1oxvcz9hGH
Hn54xmKygZLz4Bcsjkgd983MeZld1HGGW+xXsBS1eAuQPcUYNTV4ioil3HfXhwxP
zpyyVbr+aiqp0o/HeE9eDvwtLVN9Fvpd4SvWdNOsrdfyLkVYQ7+DgY8b3HrJP/hA
16NrL9yUNgQCiEjg2BiH6t8YqtCKIVPaaHEjrUa9MyedBQtr54P73Aotdzg1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUTljoINi5JrOT6F63Eqnxaa+3NDIwHwYDVR0j
BBgwFoAUlya9sGYAnkVzujXV/q/MtDEzDNcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zOUJDNzE1QzU3NUY3RDUzRDE1MDNERDgyMzZFNTE5NzMx
OEQxODkyNkJCRTRDNzdDQjY1RERFQjEzMDQ4RkI3LzAvOTcyNkJEQjA2NjAwOUU0
NTczQkEzNUQ1RkVBRkNDQjQzMTMzMENENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzI2QkRCMDY2MDA5RTQ1NzNC
QTM1RDVGRUFGQ0NCNDMxMzMwQ0Q3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzlCQzcxNUM1NzVGN0Q1M0QxNTAzREQ4MjM2RTUxOTczMThEMTg5MjZC
QkU0Qzc3Q0I2NURERUIxMzA0OEZCNy8wLzMxMzkzMDJlMzEzODMxMmUzNjM0MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMjMyMzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAb61QDAN
BgkqhkiG9w0BAQsFAAOCAQEAg6FT95OuaFs1vDjsQONV3MA9C7PUqiD/IT08RN2u
JiNkrbTVZ0jC0Q1LP3toCDrutD+iV1zGL1KhV4t68zTtv50f8QXNSIjFoC009a4F
8Yil/RUHcSUA396/CQztpxgLErWj7B1ogDr3qxVROTK3oktvqEaiuBDnBeTSK+sa
iiG47rXtLyOUSBu2Q3+un3nrR4viyKJY+pIs6LG3NMh9QGnzCy8ZDoYo9IpBWAiZ
rX/okIHpF9eqY+vLTd7GHelI1G49CkRcnJQohChLp5yN/8iPugwF0ejTBqV8BNwl
0Z4tD+MSaxbJS3FbeFFC6rHRsXl5djkZzh+i0ptN3F41sQ==
-----END CERTIFICATE-----