Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38392e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e38392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          7scbnJZ9OO8Vkg9QhTzIqP3vVqWZs0O0F0vV5tOxhOU=
Subject key identifier:   91:9B:8A:EC:7F:A2:9C:1C:9B:E3:A0:24:52:77:AD:7B:76:A1:9E:40
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       1F18B56CC70865AFEF72E8C52275C7989C3A3933
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38392e302f32342d3234203d3e20383334.roa
Signing time:             Sat 20 Apr 2024 19:05:00 +0000
ROA not before:           Sat 20 Apr 2024 19:00:00 +0000
ROA not after:            Sat 19 Apr 2025 19:05:00 +0000
asID:                     834
IP address blocks:        190.93.89.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 Apr 2024 12:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:18:b5:6c:c7:08:65:af:ef:72:e8:c5:22:75:c7:98:9c:3a:39:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Apr 20 19:00:00 2024 GMT
            Not After : Apr 19 19:05:00 2025 GMT
        Subject: CN=919B8AEC7FA29C1C9BE3A0245277AD7B76A19E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:c3:7a:e6:65:1f:c3:7e:68:31:36:38:5f:
                    52:22:cf:c0:76:33:bf:67:fa:b7:b6:1c:cc:d8:0e:
                    96:f4:6b:cd:84:d0:7f:68:a0:3d:a5:9a:25:7c:ad:
                    8c:af:24:a9:bf:0a:d8:99:c9:09:ac:3b:a5:d1:04:
                    12:b5:6d:4a:11:4c:27:58:c4:76:38:db:85:29:15:
                    a6:27:64:13:c9:90:5a:b9:d2:36:34:d0:e2:bd:2c:
                    63:f1:88:f8:45:ae:c0:4e:10:90:98:d6:8e:40:be:
                    66:c1:b6:10:f5:09:a4:55:41:c3:33:1c:85:e2:00:
                    47:09:48:9b:56:04:aa:1d:56:75:77:f7:74:5b:a4:
                    4f:61:39:19:f6:69:99:f0:7c:b0:14:bd:c1:1c:6b:
                    be:da:9e:2c:ac:3e:d3:c1:b4:4c:05:ab:a0:24:31:
                    90:42:41:49:f3:fd:f5:a4:a9:13:7f:b7:41:24:f8:
                    40:8e:d7:4e:63:bd:3b:68:18:af:58:a8:6a:2a:74:
                    df:73:22:0e:01:f8:60:55:c1:93:d6:30:e0:60:e7:
                    75:77:db:30:04:d6:a5:28:71:5e:8f:b5:1a:ac:92:
                    54:29:4b:40:6b:4d:dd:dc:bd:60:fa:c3:a7:8c:ba:
                    f5:78:aa:50:ba:cd:2d:e6:0e:f4:0e:f1:85:0a:cf:
                    73:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9B:8A:EC:7F:A2:9C:1C:9B:E3:A0:24:52:77:AD:7B:76:A1:9E:40
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:8e:92:d4:a7:f1:24:d0:c6:e2:26:bf:73:76:e4:a3:b8:a7:
         c8:b8:88:3f:a4:9c:88:98:e7:66:e1:b6:28:d7:e1:95:e1:c6:
         e3:15:08:5c:47:a6:ea:f3:be:7e:a5:34:9f:e6:e6:8a:86:b2:
         a4:0c:18:89:fa:ec:56:be:b8:b4:bf:f2:24:9f:b5:be:a1:b6:
         60:6b:af:12:12:fd:c4:91:39:fe:18:82:d4:aa:6c:40:fa:7b:
         3a:8b:43:2c:01:3a:db:40:e8:2f:0c:c6:de:c3:52:e3:01:4b:
         6c:61:5d:97:92:ce:ae:5c:1f:28:a6:88:23:8e:1d:37:8a:f3:
         91:19:31:b6:9d:27:83:50:c4:e1:ed:6e:b9:b0:87:61:36:f3:
         f9:04:36:8b:29:20:13:ae:3a:75:3a:d1:02:ce:8a:32:f8:7d:
         a8:82:c5:86:e4:66:6a:31:7d:57:0d:d6:1a:38:10:2c:ee:88:
         ad:f5:ef:f0:66:12:d7:96:d1:25:b5:9e:15:aa:c4:8d:33:58:
         78:e1:53:66:b5:69:ca:a8:b9:14:67:2f:3c:e7:25:a6:06:b6:
         88:b8:df:09:c7:05:6a:c9:a3:78:d0:d3:6e:fb:31:df:40:c6:
         be:c5:f8:a7:98:44:f5:e5:63:e3:10:97:14:41:29:8c:af:4f:
         71:94:5c:83
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUHxi1bMcIZa/vcujFInXHmJw6OTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNDA0MjAxOTAwMDBaFw0yNTA0MTkxOTA1MDBaMDMxMTAvBgNV
BAMTKDkxOUI4QUVDN0ZBMjlDMUM5QkUzQTAyNDUyNzdBRDdCNzZBMTlFNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA3sN65mUfw35oMTY4X1Iiz8B2
M79n+re2HMzYDpb0a82E0H9ooD2lmiV8rYyvJKm/CtiZyQmsO6XRBBK1bUoRTCdY
xHY424UpFaYnZBPJkFq50jY00OK9LGPxiPhFrsBOEJCY1o5AvmbBthD1CaRVQcMz
HIXiAEcJSJtWBKodVnV393RbpE9hORn2aZnwfLAUvcEca77aniysPtPBtEwFq6Ak
MZBCQUnz/fWkqRN/t0Ek+ECO105jvTtoGK9YqGoqdN9zIg4B+GBVwZPWMOBg53V3
2zAE1qUocV6PtRqsklQpS0BrTd3cvWD6w6eMuvV4qlC6zS3mDvQO8YUKz3OHAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUkZuK7H+inByb46AkUnete3ahnkAwHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzgzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5dWTANBgkqhkiG
9w0BAQsFAAOCAQEAZ46S1KfxJNDG4ia/c3bko7inyLiIP6SciJjnZuG2KNfhleHG
4xUIXEem6vO+fqU0n+bmioaypAwYifrsVr64tL/yJJ+1vqG2YGuvEhL9xJE5/hiC
1KpsQPp7OotDLAE620DoLwzG3sNS4wFLbGFdl5LOrlwfKKaII44dN4rzkRkxtp0n
g1DE4e1uubCHYTbz+QQ2iykgE646dTrRAs6KMvh9qILFhuRmajF9Vw3WGjgQLO6I
rfXv8GYS15bRJbWeFarEjTNYeOFTZrVpyqi5FGcvPOclpga2iLjfCccFasmjeNDT
bvsx30DGvsX4p5hE9eVj4xCXFEEpjK9PcZRcgw==
-----END CERTIFICATE-----