Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3135322e302f32312d3231203d3e20333934343734.roa
File:                     3139312e3130322e3135322e302f32312d3231203d3e20333934343734.roa (raw, json)
Hash identifier:          JfMVeSJUh99T30y7BS+o8SdXzP4yfF+d+Jto3XJ25hw=
Subject key identifier:   42:6B:CE:92:67:27:AA:D1:BC:55:C8:B8:03:C7:F6:30:A6:61:C0:6A
Certificate issuer:       /CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
Certificate serial:       6F2A73C30308384356E7DD6371123AC023507EB6
Authority key identifier: 01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3135322e302f32312d3231203d3e20333934343734.roa
Signing time:             Tue 05 Mar 2024 17:47:53 +0000
ROA not before:           Tue 05 Mar 2024 17:42:53 +0000
ROA not after:            Tue 04 Mar 2025 17:47:53 +0000
asID:                     394474
IP address blocks:        191.102.152.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Mon 22 Jul 2024 16:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2a:73:c3:03:08:38:43:56:e7:dd:63:71:12:3a:c0:23:50:7e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
        Validity
            Not Before: Mar  5 17:42:53 2024 GMT
            Not After : Mar  4 17:47:53 2025 GMT
        Subject: CN=426BCE926727AAD1BC55C8B803C7F630A661C06A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:4f:d5:9a:e3:06:1b:b1:a5:ee:c1:40:b5:
                    26:e5:6e:1f:12:f7:92:4c:c2:a2:49:69:3b:88:21:
                    87:11:8e:5a:c2:77:61:b7:73:0d:3c:47:54:03:a4:
                    15:6e:64:89:6c:25:68:d5:55:2a:1e:f9:40:93:5c:
                    78:06:64:f8:22:83:87:87:ae:55:e3:a6:f1:3a:f0:
                    d5:af:45:06:8a:4a:9a:8e:31:c8:0c:c6:1f:ea:a7:
                    93:da:d2:77:ac:a3:c3:fa:8e:10:1b:a5:b4:e4:4b:
                    b0:66:1f:1a:26:3e:5c:5c:23:59:14:26:66:2c:45:
                    2a:9c:28:aa:c8:68:f4:cf:5a:b9:33:64:e0:4d:e9:
                    d5:a9:31:2d:bd:77:b6:0f:60:28:65:bf:e4:1b:eb:
                    be:6c:a2:53:91:7a:fb:56:44:7e:25:b5:9e:3a:cc:
                    fb:37:8d:97:a8:97:bb:29:91:48:d5:a0:ea:59:10:
                    61:ab:67:e7:4c:9b:1f:af:28:07:b0:72:a4:c2:41:
                    dc:ca:f9:7d:f2:8d:58:e4:0a:68:88:8d:0f:4e:8a:
                    46:b7:e0:2e:b0:c6:9f:6d:b7:c2:18:53:86:c7:9a:
                    8e:8c:1b:8e:c7:10:e8:a6:13:f0:43:ce:f9:b3:82:
                    44:a9:21:20:c7:6a:2f:c3:6a:93:a2:e9:8e:30:22:
                    5d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6B:CE:92:67:27:AA:D1:BC:55:C8:B8:03:C7:F6:30:A6:61:C0:6A
            X509v3 Authority Key Identifier:
                keyid:01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3135322e302f32312d3231203d3e20333934343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:f8:f4:75:b1:78:15:f8:5e:13:a9:d5:28:80:d4:31:47:dd:
         6b:64:79:a8:5a:5b:ec:72:92:6b:61:51:ac:b3:f0:b7:e4:32:
         52:6a:35:e3:ae:99:31:95:ef:dc:6b:99:27:0c:f6:f7:59:c6:
         8b:a7:1e:33:0f:82:44:53:cf:ed:52:dc:76:1b:21:b2:d9:8d:
         0a:d9:a4:5f:5a:cd:76:67:b6:60:0a:cb:d1:25:93:7b:5b:ab:
         64:18:aa:39:bd:f0:68:24:95:ff:7f:29:cf:13:ea:e7:99:6d:
         5f:c6:c4:df:78:91:fb:08:36:00:d8:09:de:b6:28:24:7f:93:
         1c:2d:43:91:a3:da:e9:bb:4c:67:6c:80:b9:4c:71:9a:51:bc:
         92:e1:59:f3:d6:58:7f:ca:c8:9b:56:4c:31:04:90:cc:a6:ea:
         88:84:73:46:95:01:fc:78:29:35:98:e1:e8:92:f7:a5:f0:0b:
         3c:52:c0:d7:a9:0a:68:28:bf:51:1d:87:7b:8d:c9:de:59:c1:
         4c:b3:9a:1a:f1:9e:2b:fa:49:03:c3:6f:ed:ae:66:cc:24:88:
         d3:5d:5b:76:0d:fa:00:5c:bb:61:d1:53:a2:7b:ef:f8:f2:ac:
         ef:e5:bf:83:23:a7:93:cb:bd:53:4a:0a:d8:29:74:77:51:60:
         91:89:47:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----