Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e36342e302f31392d3234203d3e203235363230.roa
File:                     3139322e3232332e36342e302f31392d3234203d3e203235363230.roa (raw, json)
Hash identifier:          zQN6L8i0+ZopPd/VqHnBHWuoVx7f1WM3oVf1Us0yYqk=
Subject key identifier:   3D:CE:27:1D:DA:49:ED:90:33:5B:47:83:03:D9:68:37:99:75:B3:0E
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       7D0564531B026DC3F82C7BE0EA2A1E935564986A
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e36342e302f31392d3234203d3e203235363230.roa
Signing time:             Wed 29 May 2024 19:05:00 +0000
ROA not before:           Wed 29 May 2024 19:00:00 +0000
ROA not after:            Wed 28 May 2025 19:05:00 +0000
asID:                     25620
IP address blocks:        192.223.64.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:05:64:53:1b:02:6d:c3:f8:2c:7b:e0:ea:2a:1e:93:55:64:98:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: May 29 19:00:00 2024 GMT
            Not After : May 28 19:05:00 2025 GMT
        Subject: CN=3DCE271DDA49ED90335B478303D968379975B30E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3f:30:a3:e6:f1:5a:2d:9b:75:81:e2:b0:a3:
                    d9:63:af:7d:00:1e:ac:2b:ce:bb:9b:d3:74:19:33:
                    e0:ff:9c:db:35:a3:ab:75:ba:9c:ff:57:a0:ca:94:
                    c4:e1:78:24:1b:6d:d7:c5:14:9a:17:84:f8:e6:50:
                    ec:43:d8:0d:0b:49:74:f5:da:cd:b3:40:1b:e3:05:
                    66:47:1c:01:37:8e:90:f1:75:86:01:0b:d1:b6:08:
                    9f:93:e7:52:6c:f3:78:0b:8d:6d:b1:6a:f0:6b:f0:
                    d9:99:80:38:37:f2:09:3f:af:b6:c4:7e:aa:c4:37:
                    6b:20:b3:d1:43:88:1c:6e:b7:59:2c:2b:c3:c2:03:
                    18:f5:33:b2:30:07:09:4e:8f:4f:54:6e:df:d1:5d:
                    19:10:59:ae:c5:57:fc:9f:5e:2f:4b:95:d3:10:77:
                    21:91:2a:8f:80:31:18:f7:df:5d:16:17:f2:0a:57:
                    ee:0b:ce:f4:32:3a:96:bc:58:64:12:0b:b6:05:1a:
                    3a:df:9e:6f:10:2e:a6:f9:94:4b:96:48:f1:d1:2b:
                    91:bd:60:fe:3f:75:8a:3a:5a:ec:3d:48:3c:88:d5:
                    82:92:ad:0e:fa:d0:59:20:f7:17:e2:64:49:bd:c8:
                    46:f1:41:a1:35:71:c6:99:2b:53:cb:5c:42:5e:f9:
                    b3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CE:27:1D:DA:49:ED:90:33:5B:47:83:03:D9:68:37:99:75:B3:0E
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e36342e302f31392d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.223.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1b:c5:84:fe:25:d3:66:52:30:44:48:8a:53:55:73:d8:c3:24:
         40:c8:a9:8f:cd:d9:06:20:6d:7c:7c:f2:1e:87:51:e5:64:d0:
         7c:97:53:b9:6b:25:ac:97:45:1f:98:19:3f:25:72:0e:de:65:
         49:2e:ef:8e:5e:25:67:94:4f:34:eb:4b:9d:f2:60:09:3b:d5:
         19:ee:4b:fe:94:b6:d4:9b:94:2a:10:9e:bc:3e:1b:07:a1:db:
         28:d8:1d:75:f9:b6:6f:b5:bb:1a:ca:ce:ae:bc:a7:3c:ef:26:
         0b:7c:e2:76:d8:83:f9:c4:3d:54:83:e6:2b:8d:7d:57:7f:2b:
         35:36:d5:ee:15:c8:53:44:8b:90:24:48:c6:16:36:7f:4a:c7:
         fa:73:eb:fa:a6:c0:a9:f6:94:76:50:c2:dd:1f:cb:b5:0c:c5:
         68:ba:42:80:5f:d6:fc:0e:6e:01:cd:8f:51:e0:d2:e4:3c:7e:
         22:1e:90:d3:b0:ea:f6:16:d8:ee:a5:7d:0d:56:93:2d:b3:a3:
         e7:bd:5b:27:b4:bb:dc:de:5d:3f:83:b4:d0:42:ab:4d:5e:04:
         64:bb:06:70:53:13:2a:e1:ba:39:da:e2:f5:e5:9a:6d:46:84:
         a8:8c:e0:e8:09:d3:90:65:56:a1:aa:3c:d5:7d:55:13:db:cd:
         2e:4f:7c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----