Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e38302e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e38302e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          DgunJMoDzzGMy7YnUEXpJVi93UcbkByYDQ4/9mxyErk=
Subject key identifier:   21:01:94:8E:2E:E6:98:E4:DE:F1:19:1D:B1:E7:EE:C5:FA:B0:E0:2D
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       0702B4CFCF85EF5C2114E8612F46932B25550625
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e38302e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:04 +0000
ROA not before:           Thu 02 May 2024 14:20:04 +0000
ROA not after:            Thu 01 May 2025 14:25:04 +0000
asID:                     52251
IP address blocks:        190.181.80.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:02:b4:cf:cf:85:ef:5c:21:14:e8:61:2f:46:93:2b:25:55:06:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:04 2024 GMT
            Not After : May  1 14:25:04 2025 GMT
        Subject: CN=2101948E2EE698E4DEF1191DB1E7EEC5FAB0E02D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:9c:c8:c6:3d:0a:c6:f5:93:9e:87:58:2a:
                    24:fa:13:6e:1b:90:dc:4c:1d:89:2a:cb:9c:20:a8:
                    e1:a0:27:6e:44:d0:86:91:6e:46:97:c5:c0:2c:fe:
                    5d:ad:6d:9a:3d:20:7c:64:78:6f:39:36:f2:c8:81:
                    b8:99:d6:2f:7d:e0:9c:6d:dc:ec:ac:45:27:e6:08:
                    da:05:8f:f6:32:19:c7:5b:21:61:0b:5e:94:bb:78:
                    89:fd:d7:b5:20:6b:f0:8d:ab:27:ac:1b:22:2e:2f:
                    b4:75:e7:ad:2b:53:00:95:c3:e6:66:ca:5e:ca:fd:
                    c5:52:a7:58:8d:13:ce:75:59:68:60:a0:e9:b4:c7:
                    c9:42:3b:36:a9:a9:a5:94:fa:37:09:69:95:1a:01:
                    23:4b:60:5d:50:fa:38:79:c4:3a:0d:3b:ac:4e:01:
                    a3:6e:4c:a6:73:f1:dd:ac:95:4e:6b:35:f2:b6:43:
                    79:ce:06:68:20:75:65:8c:26:1f:24:79:ae:48:09:
                    8a:2c:cd:81:4c:22:ee:d3:71:52:33:a2:83:8b:26:
                    94:fa:6f:97:2b:83:8c:87:ce:e1:5b:3e:93:4b:f4:
                    44:4a:af:20:01:ad:c8:d9:64:85:b8:3e:b4:3c:20:
                    40:fb:62:93:7c:8e:75:fc:bc:fa:06:34:c6:62:84:
                    98:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:01:94:8E:2E:E6:98:E4:DE:F1:19:1D:B1:E7:EE:C5:FA:B0:E0:2D
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e38302e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:86:d4:8c:45:b1:14:5a:48:21:1e:45:fe:71:53:ea:ca:f1:
         25:4d:5e:51:c0:9c:24:c1:d3:8e:42:11:7e:2c:aa:d5:49:27:
         5c:50:fc:bd:7f:97:44:80:de:d6:d4:7c:87:41:c9:bf:4d:23:
         1d:cd:db:cb:09:df:2a:ce:74:66:13:8b:64:ac:fd:f0:3f:f2:
         99:48:48:94:e0:cd:d2:6c:fe:f8:c6:a8:88:b5:7a:c0:eb:df:
         25:c2:13:56:e4:3c:a5:1d:e3:f6:c3:44:19:7e:9e:57:99:72:
         d2:59:5d:1a:10:c1:a3:e2:62:a0:01:3f:cf:66:b7:9c:6b:d6:
         aa:0d:5e:b2:73:84:40:e2:5e:0d:95:cb:86:d9:e9:11:22:a8:
         53:a3:0f:f0:d0:67:d3:b4:af:0f:bb:32:bf:32:a9:53:0f:8a:
         7c:f7:68:74:bf:d4:7d:91:32:80:dd:d2:8f:e6:0b:d6:04:4a:
         18:83:b4:26:bb:5a:dd:66:1a:38:21:fd:ce:31:6f:b8:58:13:
         e8:ad:10:98:47:9d:e3:75:83:d6:0c:cb:20:9b:49:8e:36:bc:
         5b:eb:40:e6:43:2f:fd:d2:95:32:cd:37:64:c3:af:f5:cf:52:
         1b:56:f2:b1:ee:be:58:42:a8:51:0e:5f:72:04:29:5e:cc:c6:
         20:e4:7d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-ams.rpki-client.org