Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e37362e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e37362e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          WDgkk1LqGk+4iOlC1hxqqKKd3zhN9m50X+rF+RS87N8=
Subject key identifier:   40:D3:6E:DA:7B:86:0E:78:F3:D6:06:E5:35:69:3C:11:E4:D8:9C:DC
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       3CFA253F7C6B1E33881B4146EA4B0724F6D8533C
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e37362e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:05 +0000
ROA not before:           Thu 02 May 2024 14:20:05 +0000
ROA not after:            Thu 01 May 2025 14:25:05 +0000
asID:                     52251
IP address blocks:        190.181.76.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:fa:25:3f:7c:6b:1e:33:88:1b:41:46:ea:4b:07:24:f6:d8:53:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:05 2024 GMT
            Not After : May  1 14:25:05 2025 GMT
        Subject: CN=40D36EDA7B860E78F3D606E535693C11E4D89CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b7:d5:7f:a2:be:ed:5c:ad:90:6e:2b:10:33:
                    e2:16:c4:1a:a9:8a:52:27:14:52:be:7a:d9:ef:44:
                    a1:f8:b9:b6:36:8a:ab:08:40:c3:b4:8d:4f:4d:15:
                    7d:94:d7:5f:4c:94:50:4d:c7:e8:0e:29:4c:9b:6e:
                    2a:e0:00:19:7d:81:37:cc:53:71:7f:87:b2:85:8e:
                    98:82:fa:ca:96:c9:6c:2d:73:65:f4:29:08:48:36:
                    82:1d:df:2b:c2:44:af:46:bf:b2:85:19:20:3f:40:
                    6d:10:68:30:10:d2:5e:b5:01:50:f4:91:bf:d1:3f:
                    c2:94:02:ed:ea:34:d4:c9:f8:21:8e:3e:a6:cc:38:
                    c0:3c:43:51:43:9c:b6:d7:ef:85:17:8d:4d:72:3a:
                    8f:61:25:f2:3e:1c:55:57:24:93:42:f2:7e:4d:04:
                    34:6d:7b:0c:1f:d5:22:e7:37:46:69:79:e0:cf:68:
                    94:e7:84:f5:8b:97:1a:a0:b8:41:ea:20:de:bf:d3:
                    b1:d1:c6:1a:a1:82:53:9a:b3:92:ee:13:11:af:24:
                    e0:eb:28:76:0a:75:0b:b6:17:ec:e6:49:32:4f:d4:
                    45:25:8e:35:06:fa:0f:bb:b8:31:78:99:56:59:75:
                    58:e5:59:31:1a:20:6e:5b:40:26:29:01:94:25:53:
                    d6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D3:6E:DA:7B:86:0E:78:F3:D6:06:E5:35:69:3C:11:E4:D8:9C:DC
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e37362e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:e0:fe:4e:a6:bb:9d:a5:45:81:54:9b:88:c3:f8:8e:bc:ad:
         87:96:09:84:35:e1:1f:c4:7c:e0:8b:d0:d2:a3:4b:44:01:0a:
         6d:9e:f1:62:4d:2a:26:da:e6:47:fd:67:48:5e:67:1b:d9:26:
         b5:98:09:43:7b:a0:cb:ff:ab:fd:5f:1c:2d:ed:6a:50:7d:53:
         ef:dd:70:58:71:87:17:b9:14:a5:0f:56:e5:aa:47:90:0a:91:
         24:67:d6:61:e2:a0:73:81:c9:fb:67:78:b6:ac:f4:27:dc:70:
         01:93:b1:02:da:ed:15:0f:04:72:91:48:a0:71:99:e8:ef:5a:
         44:8a:b4:24:61:c1:cf:01:02:96:78:a1:fe:b4:02:2e:0d:bb:
         a1:7c:40:37:e4:01:33:b1:51:28:ef:05:93:5a:48:00:64:06:
         32:4d:00:c3:be:51:e6:b6:a7:54:78:f7:59:bd:34:7f:63:f9:
         67:20:a0:37:b3:b1:b6:64:37:23:6b:69:e8:21:74:c9:50:f6:
         36:20:57:0d:c8:b0:da:90:e3:b2:39:77:e5:38:70:d3:f5:63:
         70:fc:db:1d:03:b3:63:2a:bc:c8:9a:bb:af:36:6d:b4:30:6c:
         3d:58:01:6e:c1:33:52:f0:be:7a:d5:bb:77:c1:ea:34:0b:64:
         a4:cd:ff:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org