Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e38362e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e38362e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          T6RVHmg6GLDTROZLddtexx22/n3AplohMJKUcmSYE58=
Subject key identifier:   4D:5D:A5:E9:AE:FE:00:E9:78:C3:FC:32:45:41:06:14:E7:33:9D:AB
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       28012BDABD665FED5F234701B4C9CC67711B9B14
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e38362e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:10 +0000
ROA not before:           Thu 02 May 2024 14:20:10 +0000
ROA not after:            Thu 01 May 2025 14:25:10 +0000
asID:                     52251
IP address blocks:        190.181.86.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:01:2b:da:bd:66:5f:ed:5f:23:47:01:b4:c9:cc:67:71:1b:9b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:10 2024 GMT
            Not After : May  1 14:25:10 2025 GMT
        Subject: CN=4D5DA5E9AEFE00E978C3FC3245410614E7339DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4b:2f:91:a6:e5:9d:2c:f1:b7:0c:6b:3b:1f:
                    9a:d7:73:d0:16:25:33:bc:ea:4f:58:cf:c1:d3:47:
                    ba:c5:7f:b1:f9:27:89:55:74:77:b7:86:c5:9c:b3:
                    57:63:e9:cb:9f:70:9f:76:12:37:90:fa:8d:cc:e9:
                    ce:40:cc:48:a6:89:41:cd:07:ca:c5:6b:0b:c6:97:
                    5e:61:56:32:15:57:30:05:69:79:f1:69:0d:a2:20:
                    6b:8d:de:6e:da:5d:f5:7a:fd:ae:3f:d8:9f:b1:4d:
                    c4:e0:c1:5a:3c:8b:a4:dc:65:87:81:98:93:f3:e8:
                    ee:ee:1d:c0:b2:28:70:77:a1:67:b6:d3:3a:39:82:
                    32:16:71:c3:27:70:0b:48:3d:a6:34:e8:0d:4a:fe:
                    17:aa:7a:63:bb:0f:4f:52:36:91:a1:1b:dd:02:a6:
                    42:af:54:1d:7d:09:34:25:0f:8b:d3:a9:4c:7b:dc:
                    f6:aa:f2:c0:58:26:60:64:13:ef:79:24:44:0c:0a:
                    5b:1e:52:a0:88:ec:cf:7b:fc:0e:76:05:47:dd:0e:
                    52:12:9e:f0:4b:0e:06:5c:d4:5e:aa:47:f4:bd:8e:
                    a7:f1:9b:ad:35:66:8c:54:91:02:f1:2d:e8:ec:33:
                    9d:dd:70:91:3e:18:d4:8f:77:4b:92:87:2e:c7:29:
                    06:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5D:A5:E9:AE:FE:00:E9:78:C3:FC:32:45:41:06:14:E7:33:9D:AB
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e38362e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:c5:a7:d8:d3:26:0a:c8:b1:5a:82:df:95:82:12:65:eb:1b:
         28:f6:fd:19:9a:5d:d9:01:c1:fe:48:c7:0d:2d:cd:0e:4a:a6:
         f0:7e:3a:5b:1e:bf:f1:02:53:39:73:76:ea:cc:79:17:ee:b8:
         5f:15:b7:6a:ff:d5:9a:fc:71:8a:3d:29:b7:29:74:01:1f:df:
         94:8f:8b:04:4a:65:79:f7:70:0b:0f:10:fe:93:51:89:16:db:
         b2:74:94:a5:6a:50:97:5e:da:32:7d:44:a1:6e:4c:7d:da:0f:
         71:b8:5a:17:a4:58:b7:57:2c:66:46:f3:bf:36:39:2e:bb:14:
         e2:86:fc:af:50:f2:be:13:95:c5:5b:ac:64:15:f2:d5:7d:2d:
         bb:3f:43:eb:4c:fe:07:0e:db:13:b3:50:2f:27:f1:c0:28:ca:
         ae:64:f6:5f:e3:66:b0:78:f5:70:69:4e:5f:d3:3f:ca:a7:47:
         2f:74:36:07:6a:56:98:0c:c3:4f:6c:17:95:d0:33:74:e3:6f:
         f7:76:59:fd:2d:16:05:b6:fa:dc:23:fc:07:77:ad:75:a5:b0:
         04:07:12:c6:8e:1e:e5:fa:7c:a3:7c:f8:f7:bb:cc:1d:04:90:
         35:3e:11:77:8a:c7:49:96:46:b3:ee:28:08:f3:cf:52:5f:3e:
         99:1b:e8:c1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUKAEr2r1mX+1fI0cBtMnMZ3EbmxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcyNkJEQjA2NjAwOUU0NTczQkEzNUQ1RkVBRkNDQjQz
MTMzMENENzAeFw0yNDA1MDIxNDIwMTBaFw0yNTA1MDExNDI1MTBaMDMxMTAvBgNV
BAMTKDRENURBNUU5QUVGRTAwRTk3OEMzRkMzMjQ1NDEwNjE0RTczMzlEQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Sy+RpuWdLPG3DGs7H5rXc9AW
JTO86k9Yz8HTR7rFf7H5J4lVdHe3hsWcs1dj6cufcJ92EjeQ+o3M6c5AzEimiUHN
B8rFawvGl15hVjIVVzAFaXnxaQ2iIGuN3m7aXfV6/a4/2J+xTcTgwVo8i6TcZYeB
mJPz6O7uHcCyKHB3oWe20zo5gjIWccMncAtIPaY06A1K/heqemO7D09SNpGhG90C
pkKvVB19CTQlD4vTqUx73Paq8sBYJmBkE+95JEQMClseUqCI7M97/A52BUfdDlIS
nvBLDgZc1F6qR/S9jqfxm601ZoxUkQLxLejsM53dcJE+GNSPd0uShy7HKQaLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUTV2l6a7+AOl4w/wyRUEGFOcznaswHwYDVR0j
BBgwFoAUlya9sGYAnkVzujXV/q/MtDEzDNcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zOUJDNzE1QzU3NUY3RDUzRDE1MDNERDgyMzZFNTE5NzMx
OEQxODkyNkJCRTRDNzdDQjY1RERFQjEzMDQ4RkI3LzAvOTcyNkJEQjA2NjAwOUU0
NTczQkEzNUQ1RkVBRkNDQjQzMTMzMENENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzI2QkRCMDY2MDA5RTQ1NzNC
QTM1RDVGRUFGQ0NCNDMxMzMwQ0Q3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzlCQzcxNUM1NzVGN0Q1M0QxNTAzREQ4MjM2RTUxOTczMThEMTg5MjZC
QkU0Qzc3Q0I2NURERUIxMzA0OEZCNy8wLzMxMzkzMDJlMzEzODMxMmUzODM2MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMjMyMzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAb61VjAN
BgkqhkiG9w0BAQsFAAOCAQEAMcWn2NMmCsixWoLflYISZesbKPb9GZpd2QHB/kjH
DS3NDkqm8H46Wx6/8QJTOXN26sx5F+64XxW3av/Vmvxxij0ptyl0AR/flI+LBEpl
efdwCw8Q/pNRiRbbsnSUpWpQl17aMn1EoW5MfdoPcbhaF6RYt1csZkbzvzY5LrsU
4ob8r1DyvhOVxVusZBXy1X0tuz9D60z+Bw7bE7NQLyfxwCjKrmT2X+NmsHj1cGlO
X9M/yqdHL3Q2B2pWmAzDT2wXldAzdONv93ZZ/S0WBbb63CP8B3etdaWwBAcSxo4e
5fp8o3z497vMHQSQNT4Rd4rHSZZGs+4oCPPPUl8+mRvowQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-ams.rpki-client.org