Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e37382e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e37382e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          9xF2FySzt9wFRvtnHbM/S+TQZVAXWwCPZx3BhxjSVuc=
Subject key identifier:   28:2D:AE:FC:EC:79:D2:25:5A:5F:81:23:E1:96:F3:C2:C3:D5:2A:F7
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       57F9EA93DA8FB5F4BAED18096317D862779DB1B0
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e37382e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:08 +0000
ROA not before:           Thu 02 May 2024 14:20:08 +0000
ROA not after:            Thu 01 May 2025 14:25:08 +0000
asID:                     52251
IP address blocks:        190.181.78.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f9:ea:93:da:8f:b5:f4:ba:ed:18:09:63:17:d8:62:77:9d:b1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:08 2024 GMT
            Not After : May  1 14:25:08 2025 GMT
        Subject: CN=282DAEFCEC79D2255A5F8123E196F3C2C3D52AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:ff:23:9d:1b:ff:38:bf:9b:19:91:2b:51:
                    ce:38:43:b5:c3:48:aa:dd:35:dc:19:20:aa:54:55:
                    9b:4c:94:0c:d3:21:b8:20:2c:58:c8:94:8f:12:57:
                    ff:67:21:fa:5f:61:5d:c6:1b:9d:d0:28:64:80:ec:
                    41:19:4d:fa:68:8d:e6:3a:22:03:5d:7c:ec:98:c2:
                    a6:75:ff:c7:b7:00:93:10:58:95:bc:fe:40:04:68:
                    5d:fe:22:bb:77:be:07:97:69:fb:2b:95:fa:3c:e5:
                    cf:77:fd:17:96:16:8d:e2:78:09:3f:48:fa:42:c7:
                    7e:29:76:a3:c1:5d:5e:c7:62:bd:cb:b9:3f:2c:5e:
                    8d:8a:59:09:48:30:ef:6e:eb:0c:a8:8f:bb:ec:6b:
                    36:b4:96:5e:2e:54:a7:ff:ec:bf:2f:44:9a:43:50:
                    39:1b:a9:0e:31:1e:20:e2:fa:d6:98:1d:58:88:bd:
                    6e:dd:be:f3:c6:9f:a2:3b:26:96:98:09:cf:43:c6:
                    f6:0a:78:e9:92:59:54:bd:d3:02:88:61:c5:6d:8f:
                    7e:80:42:8a:a8:6d:80:59:33:c0:19:e6:8b:6e:94:
                    81:eb:79:73:76:58:18:2d:cf:3f:84:56:ff:32:63:
                    f6:9d:8e:38:5e:cb:3e:13:9c:58:9a:97:b1:78:7f:
                    d8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2D:AE:FC:EC:79:D2:25:5A:5F:81:23:E1:96:F3:C2:C3:D5:2A:F7
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e37382e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:84:da:49:52:9f:a3:4d:47:6b:fa:a9:15:f2:89:8c:17:3a:
         2a:41:93:bf:6c:6a:0c:ce:a3:e4:ac:d5:63:f7:ae:18:bd:91:
         8a:67:0c:7c:78:63:fb:83:03:b4:7f:e9:6d:2c:2d:18:a7:e2:
         df:b2:a4:cd:8f:05:e3:b5:0e:63:f0:04:9c:4d:8e:a6:60:12:
         b2:70:35:2f:54:0a:e8:59:6f:a6:a1:ce:7e:f9:cf:be:ee:e3:
         40:3f:5c:ba:74:ce:65:b0:ab:ab:2d:19:4c:4c:82:be:fc:67:
         7a:e3:ad:f8:88:68:3a:c4:85:37:a6:1e:d0:a1:52:d8:73:16:
         22:aa:e6:b0:8a:f7:3a:e8:50:73:f0:aa:50:69:6f:94:fa:72:
         10:1b:00:ba:99:49:27:61:7c:42:72:db:04:cc:89:90:1a:e6:
         06:bb:71:ee:29:2b:43:bb:4e:83:d9:62:fc:d0:0e:f7:91:61:
         8f:cd:12:f1:2e:af:9f:e3:f2:06:db:17:89:24:a0:65:cc:fd:
         a2:a8:6d:96:4b:dd:34:cb:04:14:d9:69:9d:6e:99:b7:90:fe:
         75:15:1f:a6:c6:6a:f8:dc:b9:4e:50:27:ba:24:f8:33:95:a2:
         27:61:3d:c4:80:4e:78:19:dc:59:e0:45:ac:77:a2:99:fe:8b:
         6d:5b:a1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-ams.rpki-client.org