Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e39382e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e39382e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          kbKGylStk7w+nEYo9rBMHeEOGQrhkTF4zaR5Lq9KyIQ=
Subject key identifier:   CE:4C:4F:1F:AB:28:8F:80:E4:8A:6E:15:BB:09:C9:9C:EF:6F:8A:59
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       6EEEE5B06568940A71BC6585B6B4514351F3777A
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e39382e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:01 +0000
ROA not before:           Thu 02 May 2024 14:20:01 +0000
ROA not after:            Thu 01 May 2025 14:25:01 +0000
asID:                     52251
IP address blocks:        190.181.98.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ee:e5:b0:65:68:94:0a:71:bc:65:85:b6:b4:51:43:51:f3:77:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:01 2024 GMT
            Not After : May  1 14:25:01 2025 GMT
        Subject: CN=CE4C4F1FAB288F80E48A6E15BB09C99CEF6F8A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f6:89:07:3a:02:bb:81:3b:f7:7e:df:7e:b4:
                    be:28:ac:37:2f:da:34:7e:2b:16:ce:9a:2a:59:f3:
                    95:9a:30:ef:1f:72:98:2a:fb:81:b4:ff:30:77:b5:
                    47:ba:4a:32:43:f6:c1:49:1d:76:f7:ea:48:89:84:
                    79:df:18:ff:03:be:ab:04:80:b0:10:ec:80:21:95:
                    cf:93:e2:a3:f3:77:31:ad:28:64:fa:b2:eb:5a:fa:
                    fe:14:53:08:42:43:31:17:f2:04:42:33:71:02:74:
                    5d:3f:58:18:be:b7:f0:d1:2a:8f:c1:52:cf:5b:a8:
                    9b:13:94:46:dd:1d:78:f6:00:90:7a:aa:a6:55:2f:
                    49:2f:ee:28:d4:1d:f4:24:6b:d9:97:94:45:a6:49:
                    b4:ed:fd:4c:3e:56:25:78:5f:14:46:3f:5a:54:cc:
                    7e:11:a5:34:68:cb:70:74:04:be:8e:e8:d3:86:7b:
                    18:b3:3b:97:99:1a:23:4f:07:cf:a6:1f:06:7d:f1:
                    d7:9d:0c:ba:0a:c8:3c:cd:b5:5f:a6:8e:de:8c:13:
                    48:75:47:2d:93:52:73:57:2d:42:1d:9d:17:75:3b:
                    c7:2e:81:d7:de:c1:4f:e5:70:c0:dc:e4:84:5d:de:
                    78:24:eb:92:cc:27:a1:57:e4:47:3f:91:32:be:41:
                    3b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4C:4F:1F:AB:28:8F:80:E4:8A:6E:15:BB:09:C9:9C:EF:6F:8A:59
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e39382e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:0d:a0:4f:16:b6:b4:11:5c:4a:27:db:b1:6b:c0:ae:f6:11:
         d3:71:a9:27:90:ce:c3:43:e7:97:70:6e:94:85:92:78:f9:86:
         e3:6a:2d:ec:d4:ed:47:3d:34:9a:13:b1:c9:78:38:6e:de:5f:
         ce:80:25:64:b6:8b:8e:9d:64:45:65:3c:9f:09:09:5f:fe:00:
         46:21:65:15:c1:12:4b:4e:1d:6b:bf:a9:00:81:30:d2:0e:05:
         7d:d4:f1:4c:90:78:46:82:ed:8f:76:e8:da:7a:c3:54:7c:31:
         ce:b7:ec:83:e5:ee:51:fb:d0:a8:86:90:44:d9:1e:06:da:df:
         d2:8f:9b:63:4d:2f:ed:31:5d:ea:26:23:35:8b:e8:fa:af:50:
         b5:d1:a1:17:70:3e:ed:0c:a9:cc:11:7c:e4:cd:e7:03:4b:29:
         6e:e1:db:1a:c6:4d:1d:c0:9a:7b:ae:62:ea:2b:85:3b:69:2e:
         17:a4:b3:5a:11:53:9f:9c:07:6a:ff:7b:68:b7:5e:58:54:68:
         16:30:ce:51:83:d7:59:e8:42:52:50:f7:ca:0e:d8:b9:05:c8:
         9f:69:09:39:a2:f5:05:6b:a9:01:5f:07:94:26:45:26:3d:49:
         32:c2:aa:ad:74:20:6c:ce:62:6e:1c:b5:b1:31:c9:17:70:50:
         ab:b6:83:9c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbu7lsGVolApxvGWFtrRRQ1Hzd3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcyNkJEQjA2NjAwOUU0NTczQkEzNUQ1RkVBRkNDQjQz
MTMzMENENzAeFw0yNDA1MDIxNDIwMDFaFw0yNTA1MDExNDI1MDFaMDMxMTAvBgNV
BAMTKENFNEM0RjFGQUIyODhGODBFNDhBNkUxNUJCMDlDOTlDRUY2RjhBNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC89okHOgK7gTv3ft9+tL4orDcv
2jR+KxbOmipZ85WaMO8fcpgq+4G0/zB3tUe6SjJD9sFJHXb36kiJhHnfGP8DvqsE
gLAQ7IAhlc+T4qPzdzGtKGT6suta+v4UUwhCQzEX8gRCM3ECdF0/WBi+t/DRKo/B
Us9bqJsTlEbdHXj2AJB6qqZVL0kv7ijUHfQka9mXlEWmSbTt/Uw+ViV4XxRGP1pU
zH4RpTRoy3B0BL6O6NOGexizO5eZGiNPB8+mHwZ98dedDLoKyDzNtV+mjt6ME0h1
Ry2TUnNXLUIdnRd1O8cugdfewU/lcMDc5IRd3ngk65LMJ6FX5Ec/kTK+QTsVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUzkxPH6soj4Dkim4VuwnJnO9vilkwHwYDVR0j
BBgwFoAUlya9sGYAnkVzujXV/q/MtDEzDNcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zOUJDNzE1QzU3NUY3RDUzRDE1MDNERDgyMzZFNTE5NzMx
OEQxODkyNkJCRTRDNzdDQjY1RERFQjEzMDQ4RkI3LzAvOTcyNkJEQjA2NjAwOUU0
NTczQkEzNUQ1RkVBRkNDQjQzMTMzMENENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzI2QkRCMDY2MDA5RTQ1NzNC
QTM1RDVGRUFGQ0NCNDMxMzMwQ0Q3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzlCQzcxNUM1NzVGN0Q1M0QxNTAzREQ4MjM2RTUxOTczMThEMTg5MjZC
QkU0Qzc3Q0I2NURERUIxMzA0OEZCNy8wLzMxMzkzMDJlMzEzODMxMmUzOTM4MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMjMyMzUzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAb61YjAN
BgkqhkiG9w0BAQsFAAOCAQEARQ2gTxa2tBFcSifbsWvArvYR03GpJ5DOw0Pnl3Bu
lIWSePmG42ot7NTtRz00mhOxyXg4bt5fzoAlZLaLjp1kRWU8nwkJX/4ARiFlFcES
S04da7+pAIEw0g4FfdTxTJB4RoLtj3bo2nrDVHwxzrfsg+XuUfvQqIaQRNkeBtrf
0o+bY00v7TFd6iYjNYvo+q9QtdGhF3A+7QypzBF85M3nA0spbuHbGsZNHcCae65i
6iuFO2kuF6SzWhFTn5wHav97aLdeWFRoFjDOUYPXWehCUlD3yg7YuQXIn2kJOaL1
BWupAV8HlCZFJj1JMsKqrXQgbM5ibhy1sTHJF3BQq7aDnA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org