Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e39302e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e39302e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          NWQWAdMXniNTHy+SSEkLPPOUXvt4jm4gEWYqvazmWHE=
Subject key identifier:   CD:E5:93:F1:B6:93:E0:E6:17:B3:48:F5:1A:BB:2F:5E:31:2A:18:06
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       27AB11B4478756BA72E9405B9B4EDF0DD488BA76
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e39302e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:05 +0000
ROA not before:           Thu 02 May 2024 14:20:05 +0000
ROA not after:            Thu 01 May 2025 14:25:05 +0000
asID:                     52251
IP address blocks:        190.181.90.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ab:11:b4:47:87:56:ba:72:e9:40:5b:9b:4e:df:0d:d4:88:ba:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:05 2024 GMT
            Not After : May  1 14:25:05 2025 GMT
        Subject: CN=CDE593F1B693E0E617B348F51ABB2F5E312A1806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5f:80:7e:06:c4:e7:10:4f:22:13:2a:51:e8:
                    b0:da:9c:3a:f4:2f:eb:9d:18:07:fc:f4:94:86:1b:
                    1d:0e:cc:2e:dd:25:0d:21:d5:ef:3b:20:4c:65:c4:
                    77:93:fc:35:36:6a:fd:23:e3:0f:d3:8a:24:1a:dc:
                    99:ba:5e:ea:ff:b1:a1:98:32:a2:7f:ee:24:53:39:
                    c7:b9:dd:04:f8:4f:6a:04:e9:83:ef:f4:25:39:ec:
                    b0:1c:2f:df:eb:bd:0d:8a:a1:7a:93:3c:ff:8d:4a:
                    19:c9:4e:ca:65:a3:ae:b5:78:0c:79:00:fd:75:5f:
                    81:d3:d1:df:3b:cd:d1:f6:79:0a:1d:82:f7:3d:85:
                    c8:18:2e:6c:71:1b:d5:4f:bd:21:5c:76:17:b7:1e:
                    8a:ef:65:39:af:cf:ac:3a:da:59:3b:ab:2a:1c:89:
                    f4:b5:9b:2f:bd:3c:e4:6e:27:b7:03:c9:a2:0b:76:
                    03:05:04:4f:ed:52:8b:56:12:1f:0a:39:df:4d:d1:
                    83:2f:10:49:99:cf:a5:dd:73:1f:87:1d:59:ca:f0:
                    d9:d8:c1:9f:8d:ba:ae:22:47:b4:bc:8e:c9:29:5f:
                    19:5d:e1:f0:23:1b:2f:1a:51:b4:2f:c1:f3:0d:62:
                    99:4f:0f:b8:eb:c9:03:b2:5d:34:e9:7e:f9:e4:20:
                    be:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E5:93:F1:B6:93:E0:E6:17:B3:48:F5:1A:BB:2F:5E:31:2A:18:06
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e39302e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:35:12:20:ac:4f:f7:14:8b:1f:f9:7c:69:0c:19:68:d9:46:
         be:17:e4:07:23:fe:e7:ac:10:d2:2e:59:e5:41:4a:0d:f0:cb:
         f5:fc:39:4e:79:34:ef:6b:c6:31:78:8c:1d:46:9b:29:80:21:
         a6:40:4f:73:d1:66:e8:61:2d:dd:7b:c7:bc:c2:8b:dc:50:f6:
         d1:b3:06:cb:fd:d3:70:d0:59:b3:87:28:18:8b:a8:87:28:aa:
         fd:be:41:c9:89:64:8b:d4:8c:a7:77:b4:6d:77:ec:e2:1f:52:
         40:c2:2a:2e:45:dc:41:a5:91:7f:fe:4c:6d:e0:42:36:7d:a3:
         6b:69:9a:4e:04:a5:85:ef:51:9b:73:e8:49:6b:43:29:b4:c5:
         d3:9d:e9:ae:ec:1a:4f:18:04:a5:a9:5e:d8:01:ea:8a:70:51:
         37:45:63:af:98:ec:20:19:83:97:b5:77:60:e9:c5:8e:fa:b7:
         1b:0b:89:71:7b:bb:85:9d:50:52:7f:aa:64:b7:11:88:f2:ab:
         fc:33:ff:5a:f5:65:ff:71:43:4a:91:1f:3d:bb:1d:19:c7:27:
         56:35:a4:07:34:0a:bb:f6:44:f0:b7:e1:70:2c:ed:c8:5e:13:
         f2:53:5b:17:fe:09:02:35:af:2e:95:07:2a:58:e8:9d:ab:a2:
         1e:18:42:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org