Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e36382e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e36382e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          0tpLu6JEB5e9jCxlw2VWrT/QA7eI8AMDQkipOXFgO2M=
Subject key identifier:   51:D9:0B:6E:C1:78:34:01:A4:80:8F:6A:1F:9A:B9:94:D8:8B:44:72
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       4FD74703AB14123F34F1ADA58E65D8BE90A6AD49
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e36382e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:04 +0000
ROA not before:           Thu 02 May 2024 14:20:04 +0000
ROA not after:            Thu 01 May 2025 14:25:04 +0000
asID:                     52251
IP address blocks:        190.181.68.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d7:47:03:ab:14:12:3f:34:f1:ad:a5:8e:65:d8:be:90:a6:ad:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:04 2024 GMT
            Not After : May  1 14:25:04 2025 GMT
        Subject: CN=51D90B6EC1783401A4808F6A1F9AB994D88B4472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:8a:93:df:02:9c:f8:b4:02:9b:d7:2e:26:
                    7e:ed:f4:53:ff:51:96:d7:82:a4:ed:0b:b8:23:94:
                    a9:87:ad:0f:c7:1a:cc:7d:a8:2a:0e:4a:77:01:14:
                    5c:a1:ff:69:5b:95:e9:e6:63:8c:70:e9:0e:85:6b:
                    9c:fa:b6:f9:bc:68:e5:2b:67:08:49:aa:8d:0a:37:
                    a7:da:34:47:97:c5:61:2b:ec:79:e0:cc:d4:30:76:
                    cb:0b:72:e2:b4:73:90:8e:b5:75:67:b6:eb:42:37:
                    dc:65:2c:6e:fa:a2:0c:8c:2a:24:cb:6b:4b:03:d2:
                    f4:23:af:95:a5:60:0a:80:8b:1b:90:de:a9:d6:6c:
                    6e:18:dc:be:5d:be:a2:33:b1:78:cb:26:64:3a:53:
                    94:de:77:d2:2b:ee:6b:a5:5d:4d:04:9a:d7:47:19:
                    24:a6:d7:31:1c:f3:f0:2d:04:18:bf:95:1e:51:b4:
                    0f:03:42:80:0f:c2:7d:d6:04:67:64:13:f4:bd:95:
                    b9:6e:56:d6:1a:ae:ba:f9:6a:95:20:fb:ca:63:93:
                    f3:e1:04:16:b8:62:d4:5e:20:61:1d:92:d1:01:4e:
                    1f:97:0e:7e:0a:75:6f:3e:69:b6:ad:a9:33:21:1c:
                    0b:73:67:14:72:30:f9:50:de:77:8f:bb:29:f0:fb:
                    51:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D9:0B:6E:C1:78:34:01:A4:80:8F:6A:1F:9A:B9:94:D8:8B:44:72
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e36382e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:ac:8e:d3:0b:a6:6f:d7:00:e9:8c:55:53:f8:10:be:25:97:
         2e:8d:63:ca:82:7f:26:ce:b5:32:46:40:3d:a8:50:ad:67:83:
         07:ad:bf:5d:4e:75:fd:d2:2b:f4:49:5a:3b:1a:10:ee:b8:f6:
         17:58:6e:13:9c:e2:38:8f:61:6d:02:31:7c:a0:19:77:8c:d7:
         ed:cd:41:8c:f0:78:dc:9a:c6:c6:fc:bb:68:05:aa:ea:9a:8f:
         52:24:cc:5e:56:a2:27:aa:3a:f5:24:b9:1f:3e:26:8c:eb:5f:
         03:71:4e:54:1d:5b:38:db:9b:4f:bd:ca:db:8f:ce:7e:a9:f0:
         f9:01:c3:7b:7f:22:7b:5f:10:29:7b:df:83:1c:6a:d4:ad:d5:
         50:f5:59:1d:b0:e8:09:f1:74:ca:9f:2b:f0:f8:f4:20:d9:4a:
         c1:b2:8e:93:84:69:d7:15:2a:2c:29:31:4d:18:e4:62:25:5e:
         ce:67:1d:6b:ef:16:94:22:39:37:b2:bf:a1:56:a9:ea:5a:aa:
         f6:08:10:9e:56:2d:c2:96:7b:44:be:a4:d6:09:7b:10:92:38:
         79:d5:b6:b2:b9:d2:be:97:df:23:3d:7a:5d:c3:94:b1:c7:55:
         90:bd:b1:e3:6b:57:c5:b6:50:7e:2b:00:23:ab:ec:be:ff:62:
         bd:8b:af:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-ams.rpki-client.org