Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139312e302f32342d3234203d3e20383334.roa
File:                     3230302e32362e3139312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          8BMscgv57wbWYx7Vng/UF83rrTnhdIUKHCt2f1ZA6rw=
Subject key identifier:   0E:91:06:C8:63:2E:E3:22:88:5C:4E:58:F3:9B:52:81:40:C8:30:D6
Certificate issuer:       /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Certificate serial:       0EFEA3BC97A98BAF705E82C71F5A097DE6A1CDE3
Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139312e302f32342d3234203d3e20383334.roa
Signing time:             Thu 11 Apr 2024 02:15:00 +0000
ROA not before:           Thu 11 Apr 2024 02:10:00 +0000
ROA not after:            Thu 10 Apr 2025 02:15:00 +0000
asID:                     834
IP address blocks:        200.26.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 Apr 2024 11:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:fe:a3:bc:97:a9:8b:af:70:5e:82:c7:1f:5a:09:7d:e6:a1:cd:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
        Validity
            Not Before: Apr 11 02:10:00 2024 GMT
            Not After : Apr 10 02:15:00 2025 GMT
        Subject: CN=0E9106C8632EE322885C4E58F39B528140C830D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:73:fc:b8:ff:99:65:87:d0:e8:87:b3:7e:
                    d6:82:35:f1:9a:59:8c:f7:6c:35:60:f0:17:6b:c9:
                    48:ee:b3:c4:07:38:ac:bd:5f:79:01:7b:dc:8b:be:
                    0a:88:97:b4:eb:f3:49:c7:20:0e:c2:18:78:13:3f:
                    a8:7e:7f:a5:78:1d:2b:1a:bd:95:be:b4:91:7e:bf:
                    da:9d:cd:c1:fe:c0:a9:9d:71:47:1d:0a:6f:bb:d1:
                    40:ae:f3:4b:18:8a:27:42:3a:27:25:7c:db:55:41:
                    f7:36:7f:cb:c8:0d:02:1e:01:84:33:d8:b3:bb:15:
                    d2:51:bc:39:12:b5:e2:45:3d:ad:5e:76:6d:88:64:
                    d5:05:83:cc:dc:48:c7:b2:6e:3e:b7:a6:f3:fb:df:
                    c4:cb:0a:68:c4:f9:15:45:5a:b7:bf:60:37:d2:8d:
                    42:63:0d:c2:96:99:9b:eb:45:53:01:ff:64:17:c7:
                    f0:56:c6:f1:24:d3:68:30:3f:bd:a8:67:13:b8:17:
                    77:f8:6e:da:64:1c:37:e8:e7:59:fc:48:2b:51:54:
                    36:af:08:09:d3:10:da:b5:f8:ab:eb:9a:3c:a3:e9:
                    c7:e6:5d:25:c8:8c:f2:49:67:bc:20:fd:a5:19:0f:
                    0e:df:4d:4c:18:b6:d0:8e:93:2a:51:4f:3f:b0:79:
                    ce:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:91:06:C8:63:2E:E3:22:88:5C:4E:58:F3:9B:52:81:40:C8:30:D6
            X509v3 Authority Key Identifier:
                keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:80:db:44:c4:75:08:5e:1d:12:f8:27:e2:f9:e3:70:a8:fa:
         08:e5:61:fa:a2:ee:ca:07:90:45:47:70:0a:dc:a6:d2:73:a9:
         46:0c:ba:fc:04:68:38:28:05:ba:e4:9a:5b:c8:a1:66:c0:16:
         bc:36:bf:7e:91:c3:64:b8:3e:9f:ad:0b:07:f6:3b:15:1a:e9:
         37:34:c9:4b:a5:bc:bb:69:03:0b:1a:2c:31:d5:54:5b:fd:ff:
         bc:2d:d3:d1:67:af:7a:b5:71:c3:c3:4b:de:6f:79:e2:ab:be:
         11:4a:d0:82:f0:fe:81:e1:4d:c7:27:a0:5e:e4:67:87:80:de:
         04:5a:e1:a0:2c:47:d9:5d:94:92:c3:5a:b2:79:b9:38:ea:5b:
         13:26:eb:55:28:d8:fd:43:cb:ef:72:a5:f1:3e:ce:f7:a9:2c:
         48:d9:2e:cf:30:3d:d1:00:b7:a7:eb:49:3d:18:16:7c:41:5b:
         68:7c:82:f9:e9:28:ed:4e:ba:af:41:83:ce:87:d8:12:2f:56:
         c1:f6:bf:e3:05:e4:1a:a5:7d:d6:e7:2a:b7:4d:cb:bb:a0:28:
         58:a0:3b:f7:77:df:f1:f5:d8:40:da:49:83:1f:07:05:35:96:
         e1:89:f5:c0:8d:42:c0:be:9b:78:62:f4:96:00:db:91:ba:a2:
         57:39:17:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----