Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e38322e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e38322e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          MbnTJYv82N8xXZlsUiwcbnQS2kaBjbHlzVToU3AGdvs=
Subject key identifier:   C8:85:7A:78:98:B0:E2:C9:4B:F5:5E:F8:1D:43:E8:CF:D6:8C:B6:05
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       23135277BB601DD5781E22090F8B857D1705C147
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e38322e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:06 +0000
ROA not before:           Thu 02 May 2024 14:20:06 +0000
ROA not after:            Thu 01 May 2025 14:25:06 +0000
asID:                     52251
IP address blocks:        190.181.82.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:13:52:77:bb:60:1d:d5:78:1e:22:09:0f:8b:85:7d:17:05:c1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:06 2024 GMT
            Not After : May  1 14:25:06 2025 GMT
        Subject: CN=C8857A7898B0E2C94BF55EF81D43E8CFD68CB605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:78:15:6e:a9:cf:04:4f:bb:2d:18:16:af:
                    02:67:34:fb:18:dc:44:05:69:97:e9:15:4b:81:99:
                    06:9f:c0:3d:1c:32:7b:25:ef:fb:e1:e2:be:f5:c9:
                    45:86:d5:3b:46:07:4d:f8:97:0b:63:38:6e:7e:0a:
                    86:6d:e6:3b:f0:4d:e9:a0:b6:50:50:e8:55:aa:d4:
                    f7:b0:8b:f9:a8:f9:46:88:ad:3e:b5:ef:6b:40:74:
                    ca:c9:a1:32:90:60:a7:10:26:2d:4c:14:f1:5e:f9:
                    b0:18:0d:16:92:6d:6e:af:a5:cb:2f:45:f9:2f:ea:
                    ad:81:36:d1:e5:65:fd:4a:38:12:01:a8:05:f6:0a:
                    3c:83:04:3f:20:cf:68:ac:cb:05:af:98:c0:9a:22:
                    62:25:d3:3d:ea:20:19:f3:0d:cd:fb:6a:00:63:67:
                    e0:62:84:8a:bf:00:d4:bc:93:7c:f0:c6:63:55:77:
                    ec:10:a3:01:9a:8c:41:cc:57:e4:1b:cc:59:aa:0d:
                    eb:b7:92:e1:df:7e:6f:f1:2b:33:e5:38:4a:1e:9b:
                    9e:f0:72:af:f5:da:9a:c2:dc:a4:ff:f7:f0:0d:76:
                    2b:b7:45:e0:9f:6e:3f:98:0f:4c:ff:f0:04:d3:c0:
                    07:46:27:2f:42:26:a9:54:b7:ac:4f:fb:47:74:fa:
                    ca:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:85:7A:78:98:B0:E2:C9:4B:F5:5E:F8:1D:43:E8:CF:D6:8C:B6:05
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e38322e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:4c:43:5d:4b:5d:77:7a:9f:8a:3b:4c:e2:d2:6c:0b:5c:0f:
         a3:09:62:3f:53:76:bb:b2:d9:ec:04:1d:f2:a1:83:d5:19:9e:
         69:af:12:fa:59:11:61:ab:5f:82:ef:c1:12:53:08:f0:f1:b8:
         5d:4d:97:eb:64:36:b4:fb:6e:c4:24:f1:50:21:b1:9b:42:fb:
         98:98:4b:9a:ef:ca:71:36:7b:45:70:12:82:87:5f:bb:67:83:
         d5:23:fd:eb:62:a4:99:9d:ac:60:c9:5d:8f:aa:14:24:3e:35:
         f9:e8:f1:47:a7:ef:b7:8e:0f:ba:a8:c8:bf:04:77:e3:b3:78:
         6c:fc:26:55:7a:0e:ad:64:83:28:f8:9d:86:76:97:dc:f2:c1:
         89:1e:62:ee:48:41:e4:85:8f:74:87:f9:e1:27:96:86:52:94:
         f8:43:ff:4b:1f:bc:aa:4b:fa:b7:47:6c:28:aa:6b:4f:16:b2:
         ca:17:a2:d6:21:8f:c8:96:db:29:b3:01:eb:84:80:bd:13:e0:
         ff:30:9d:85:a1:9e:9c:49:14:8d:5b:f2:4f:94:8f:37:f2:f3:
         d7:c9:4b:f5:1e:a3:5e:ff:8b:56:79:1d:7f:7d:9a:a4:8f:f4:
         7c:46:c5:9f:ff:29:02:db:d7:fc:a7:99:07:5c:2f:25:81:9f:
         8d:a8:a4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org