Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e39322e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e39322e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          4ul1HtZeX0Juvcq9xCgAqMMq3XC16yF83qIacJ2YL9k=
Subject key identifier:   B5:03:A9:87:28:26:38:1B:A2:3B:24:07:45:7D:74:14:C5:73:64:8F
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       1AF34D214A9FDE99749D129E821418D7F784D35F
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e39322e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:10 +0000
ROA not before:           Thu 02 May 2024 14:20:10 +0000
ROA not after:            Thu 01 May 2025 14:25:10 +0000
asID:                     52251
IP address blocks:        190.181.92.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f3:4d:21:4a:9f:de:99:74:9d:12:9e:82:14:18:d7:f7:84:d3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:10 2024 GMT
            Not After : May  1 14:25:10 2025 GMT
        Subject: CN=B503A9872826381BA23B2407457D7414C573648F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:bd:39:d9:62:58:06:07:8c:fc:cc:3a:6d:
                    e6:70:be:bf:75:e5:53:1c:5a:c7:4b:2c:40:51:96:
                    0a:18:ba:e8:e1:4e:22:b3:52:ef:bb:36:2b:f0:7c:
                    11:ea:cb:7d:63:36:71:99:2f:ea:70:32:d0:53:55:
                    a8:c4:f2:18:48:1d:dd:06:ae:ad:9f:54:c9:29:e3:
                    43:16:39:d7:48:0a:81:d6:60:20:07:64:4e:10:98:
                    a5:50:55:cf:66:0a:0d:61:98:d9:b6:2d:c3:14:85:
                    c9:15:55:5f:c3:5b:32:80:9b:ab:ca:a4:5c:34:3b:
                    74:a1:64:10:5d:67:17:81:c2:3d:0e:6d:3f:f4:c2:
                    f2:fe:d0:2c:bd:e1:16:9f:fe:ad:2c:fa:5c:a2:7c:
                    17:bf:2b:61:60:c7:18:6e:58:cb:88:01:01:f4:64:
                    3a:df:0a:90:2e:1e:e8:d1:c0:28:92:78:3e:c1:c6:
                    91:07:cc:81:1f:6c:7e:e4:ca:28:8c:57:2a:1a:c2:
                    2e:ab:e3:f5:a3:01:a8:c6:a5:9d:29:61:9d:68:cb:
                    4b:45:23:7c:65:e4:24:d4:69:39:f2:6c:eb:88:d6:
                    3b:f3:46:57:4b:ab:ce:4b:aa:30:1b:19:78:39:22:
                    8c:ef:79:40:98:d3:5c:74:5a:42:62:73:a2:84:29:
                    a4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:03:A9:87:28:26:38:1B:A2:3B:24:07:45:7D:74:14:C5:73:64:8F
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e39322e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:f5:6d:7a:88:a1:aa:20:df:ac:59:d2:53:55:33:87:d4:c9:
         17:f2:8b:ea:8d:42:80:67:b3:85:11:a1:3b:7c:ad:25:62:b2:
         e0:57:92:4b:e2:d0:99:b6:e9:30:be:17:d5:21:06:78:49:1b:
         fa:c1:e8:a6:2f:bd:51:e7:ff:8e:96:80:b2:23:9f:db:e4:15:
         2e:1d:ef:9a:67:67:5c:02:a9:f1:1a:22:3c:ca:99:4e:a3:92:
         95:69:a6:d6:8c:f4:5c:b8:0d:7f:27:4e:0b:17:40:42:e7:eb:
         d9:24:22:88:f6:a7:81:fb:77:d8:46:a5:80:eb:04:6b:ab:ae:
         57:fa:ce:4c:c3:f4:a3:e1:f8:e3:43:db:87:2d:b6:a8:21:5d:
         0d:27:83:d1:d4:20:bd:da:a9:59:2c:0a:06:aa:2a:88:4d:8b:
         22:e5:b4:3b:db:79:9e:ae:cc:88:e9:3c:fd:01:de:9a:72:0c:
         89:07:8c:ad:ba:27:1b:bc:aa:db:ff:2a:76:3b:d7:5c:ea:66:
         c3:cf:b2:70:c9:00:b6:2a:49:9b:8c:1a:61:98:a4:42:0d:45:
         75:2a:9e:96:40:0f:d5:fa:fb:63:9d:64:95:34:be:b9:06:f4:
         c9:a8:3d:5f:f5:29:df:15:13:b6:fc:bd:e2:4a:e5:fd:02:a4:
         15:16:4a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-ams.rpki-client.org