Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e37322e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e37322e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          Roy+58xKNcrZaI91zoPHxp8Lx5BWsJvoSnF4o4iPTbU=
Subject key identifier:   E5:D2:EB:27:2E:E2:74:B1:C9:6F:C1:9D:31:C5:60:2D:50:69:41:DA
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       50190B9AA38981656522A6A19C2097842C8C6FD4
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e37322e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:02 +0000
ROA not before:           Thu 02 May 2024 14:20:02 +0000
ROA not after:            Thu 01 May 2025 14:25:02 +0000
asID:                     52251
IP address blocks:        190.181.72.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:19:0b:9a:a3:89:81:65:65:22:a6:a1:9c:20:97:84:2c:8c:6f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:02 2024 GMT
            Not After : May  1 14:25:02 2025 GMT
        Subject: CN=E5D2EB272EE274B1C96FC19D31C5602D506941DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:26:4c:64:3c:35:b2:9f:ab:8a:b7:df:ce:
                    ce:45:c2:27:85:a6:de:0f:eb:29:e8:04:cd:10:84:
                    49:04:3f:69:a5:f8:52:e9:54:58:9c:a2:79:bf:f7:
                    f7:71:d6:e0:7f:19:8c:c8:bf:83:66:aa:56:e4:23:
                    97:ab:72:ea:37:0b:ab:52:0f:f2:6c:eb:9b:c0:df:
                    c7:b4:06:d0:9d:32:80:30:c9:8b:3f:99:77:9b:ba:
                    d1:f0:b5:2b:14:6a:01:a3:eb:83:47:e0:c3:da:4d:
                    89:3a:54:22:16:f5:5e:2b:cb:70:b3:65:8b:63:b9:
                    05:a0:52:5a:80:a5:6e:aa:7b:e4:47:db:e4:35:cd:
                    c2:31:67:ad:55:aa:d2:50:d4:f8:1e:55:bc:a8:67:
                    eb:90:7b:cb:43:6a:24:db:60:94:51:5f:db:c1:7a:
                    db:9d:1f:a0:cc:30:de:fb:63:d3:40:4a:b7:58:79:
                    c9:d7:d7:99:6d:21:f0:3f:12:f2:d7:6c:fe:a8:01:
                    d6:af:c1:1b:a8:57:bf:ed:e8:75:09:d3:33:98:33:
                    e1:cb:b9:5f:36:0c:be:f6:99:41:6f:0b:08:1d:e3:
                    2f:fb:2b:bf:47:aa:10:5b:db:2c:d9:24:36:cc:fc:
                    93:fb:41:3a:4e:55:96:ff:4f:24:5d:56:10:88:8d:
                    45:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D2:EB:27:2E:E2:74:B1:C9:6F:C1:9D:31:C5:60:2D:50:69:41:DA
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e37322e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:b7:05:d2:3b:6a:f6:a3:3a:96:9d:08:a4:48:be:aa:bb:9f:
         d7:ea:10:98:be:77:f0:0c:3c:cd:6c:5e:e3:89:4e:b9:6d:1b:
         ad:c1:73:e4:c5:02:b2:da:94:dc:47:6f:6b:9a:73:19:ca:3e:
         ad:fc:38:1a:40:ce:9a:6d:ae:72:f1:2c:65:aa:08:77:03:0b:
         28:52:cc:fb:e5:f5:6a:3c:8e:84:29:39:88:cc:23:eb:5f:56:
         f6:ea:b1:ec:08:af:a4:d0:44:1b:86:ba:1c:e2:40:5e:5e:07:
         98:91:37:b3:5e:ce:42:3d:3d:11:e5:c4:4b:23:39:a5:f8:0d:
         04:14:ad:41:6c:e3:d9:39:07:d1:cf:b1:ee:62:4f:0a:17:e9:
         89:c0:4c:7c:81:ea:34:a1:d9:45:85:c8:d1:1a:f7:f4:6e:d0:
         3b:a8:f8:93:8f:f9:57:9d:9e:7b:5c:e6:67:ec:30:93:be:82:
         17:78:ea:27:d9:58:0e:2b:92:bf:af:b8:2c:80:e7:89:34:32:
         71:c9:d4:56:ea:43:07:16:c5:86:86:61:65:1e:c4:73:4b:57:
         ab:5a:56:6a:ef:8b:f2:ee:f2:71:90:ae:cf:56:f4:d6:84:44:
         95:56:64:e6:04:4a:7e:bb:78:86:1d:b6:62:21:9f:86:18:8a:
         b4:0d:ac:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-ams.rpki-client.org