Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133322e302f32322d3234203d3e203438343635.roa
File:                     3230312e34392e3133322e302f32322d3234203d3e203438343635.roa (raw, json)
Hash identifier:          oqcQc77A+LQ17hiEXUaR4vgEePaE1FeSPatB7OCgFd0=
Subject key identifier:   52:B3:69:AA:45:71:37:8A:ED:A0:18:8B:9A:A2:F6:F0:F2:12:B6:D3
Certificate issuer:       /CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
Certificate serial:       5470FA730C9387876883F656D7167D6E99240B4F
Authority key identifier: 69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133322e302f32322d3234203d3e203438343635.roa
Signing time:             Sun 16 Jun 2024 05:00:00 +0000
ROA not before:           Sun 16 Jun 2024 04:55:00 +0000
ROA not after:            Sun 15 Jun 2025 05:00:00 +0000
asID:                     48465
IP address blocks:        201.49.132.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Jun 2024 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:70:fa:73:0c:93:87:87:68:83:f6:56:d7:16:7d:6e:99:24:0b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
        Validity
            Not Before: Jun 16 04:55:00 2024 GMT
            Not After : Jun 15 05:00:00 2025 GMT
        Subject: CN=52B369AA4571378AEDA0188B9AA2F6F0F212B6D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f5:db:e7:f3:f2:43:64:3f:2b:b4:2a:2d:f3:
                    ff:3a:27:1c:3d:d0:88:10:f4:26:35:d3:e6:82:70:
                    c2:fd:10:0a:c7:92:87:7d:8c:8c:b3:79:55:5e:e9:
                    75:05:6b:bd:0e:91:bc:e6:f9:ad:6a:29:4c:84:94:
                    4d:6d:2b:ad:33:82:f7:d8:b6:6f:f6:d0:ad:50:6f:
                    a8:e5:06:7f:56:4c:e5:c3:bb:ec:55:3e:28:c9:53:
                    d6:79:a1:9e:27:2e:0f:d2:69:3b:0d:67:c1:5e:da:
                    e1:ba:56:76:93:68:fa:5d:b5:41:36:98:2c:0a:c8:
                    80:5d:d0:44:a5:20:ab:81:db:69:82:d1:56:68:19:
                    a3:cb:cf:69:ca:47:7a:69:12:bc:25:b1:16:92:81:
                    90:a5:71:ff:db:3c:dd:62:46:c2:6d:52:cb:dc:77:
                    07:46:16:9b:10:e8:8f:e3:8f:e1:75:d0:55:7d:02:
                    35:ee:62:30:57:e2:30:6c:59:57:5b:d5:75:38:11:
                    b3:ec:03:a7:fb:6b:23:71:59:d4:d7:a7:43:8d:bd:
                    55:f4:a6:fe:28:0f:ec:f0:58:c7:ec:49:28:7c:61:
                    2f:24:49:04:b7:f4:98:d3:27:95:6d:8e:ea:97:28:
                    dd:a3:49:23:2d:e1:ef:eb:cc:a1:15:7b:cf:f8:0a:
                    50:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B3:69:AA:45:71:37:8A:ED:A0:18:8B:9A:A2:F6:F0:F2:12:B6:D3
            X509v3 Authority Key Identifier:
                keyid:69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/3230312e34392e3133322e302f32322d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:6e:2a:7e:67:a2:a6:94:14:d8:0e:8d:53:25:69:e5:41:06:
         03:c7:89:b3:7d:75:75:c8:8d:0b:9c:5f:dd:28:af:43:99:71:
         22:8d:b3:2a:03:61:94:71:39:49:25:35:f3:aa:44:60:dc:13:
         28:16:c5:6f:17:dd:a5:64:5f:e6:ee:be:58:a8:bf:73:e8:52:
         28:cf:02:0d:f9:c0:cd:48:e0:0c:09:ff:7f:d4:bf:2b:8d:04:
         81:81:50:20:bc:75:df:2b:99:f3:dd:6b:b0:66:71:7b:81:e9:
         57:29:e5:ef:ab:65:1e:ef:8a:81:f1:fb:36:b7:e0:55:19:df:
         73:28:45:9e:44:75:a7:43:84:33:00:b9:ea:db:f9:38:14:f0:
         c3:47:9d:e0:fa:19:5c:89:97:72:50:73:40:b5:21:cd:82:20:
         91:76:f7:b0:99:55:d8:3b:f1:9a:77:9e:18:db:a6:60:ca:bc:
         7c:e5:9b:ab:bc:51:4d:b8:6d:fd:3e:06:8b:af:af:ca:0f:2c:
         db:d0:30:36:26:e3:d7:dc:7e:fc:06:3c:30:84:82:bb:e9:ab:
         ea:c1:43:7b:77:c3:ed:5f:04:64:cb:2d:32:6b:d9:18:91:06:
         d0:4b:fb:01:09:c7:d1:e3:e5:1c:3e:77:c3:56:7e:04:1f:d1:
         88:92:5c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----