Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/3230302e35392e3138332e302f32342d3234203d3e203237393934.roa
File:                     3230302e35392e3138332e302f32342d3234203d3e203237393934.roa (raw, json)
Hash identifier:          6lzTF8XtwG20yEtRGfYREk5wJ97O/DLk546cMPsOKLQ=
Subject key identifier:   F4:F6:8F:48:FD:66:D6:F3:9F:C3:27:B4:0B:8E:15:B5:AE:CE:01:F6
Certificate issuer:       /CN=9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184
Certificate serial:       3A6E28594D8B23745E81751E0B8EEFAFACDAE935
Authority key identifier: 9A:4A:C2:0F:38:CC:B7:E3:E5:E9:C8:3E:55:40:D3:D1:7F:CC:01:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/3230302e35392e3138332e302f32342d3234203d3e203237393934.roa
Signing time:             Tue 05 Mar 2024 17:52:49 +0000
ROA not before:           Tue 05 Mar 2024 17:47:49 +0000
ROA not after:            Tue 04 Mar 2025 17:52:49 +0000
asID:                     27994
IP address blocks:        200.59.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 13:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6e:28:59:4d:8b:23:74:5e:81:75:1e:0b:8e:ef:af:ac:da:e9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184
        Validity
            Not Before: Mar  5 17:47:49 2024 GMT
            Not After : Mar  4 17:52:49 2025 GMT
        Subject: CN=F4F68F48FD66D6F39FC327B40B8E15B5AECE01F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:cc:f0:db:b8:9a:90:c5:20:1a:cd:6b:ed:
                    50:84:e4:cf:f5:f2:97:8a:86:0d:73:55:5e:fa:ee:
                    5e:59:4b:26:18:1e:f3:49:14:3b:17:24:b0:62:95:
                    71:68:85:91:1d:12:16:73:65:e0:de:d3:3e:2b:60:
                    da:eb:4c:80:16:70:b3:b1:d4:1b:68:40:ba:64:c3:
                    f7:52:50:87:dd:c3:c5:ba:2e:22:fa:7a:84:23:c4:
                    94:58:c6:7a:0b:7c:4d:c5:24:6f:86:a9:96:5b:a9:
                    5a:44:05:44:1c:c2:03:38:4d:65:03:b5:88:2a:c6:
                    2d:70:db:8d:71:c4:9b:c3:70:1d:e5:ed:0e:02:dd:
                    a9:de:47:94:02:7c:bb:04:55:b1:31:86:00:63:b5:
                    67:d4:70:94:ec:7e:0e:ac:67:f2:22:0b:5e:ce:f4:
                    67:03:26:1b:8c:33:f8:ee:3d:2a:13:c6:73:6f:2f:
                    af:52:15:c6:e2:9b:06:1c:29:f3:7a:37:44:29:6b:
                    4f:0b:ab:71:e4:82:e6:fd:43:1f:31:dd:51:83:2d:
                    ee:e7:71:0e:4f:d1:54:72:14:ef:89:14:81:c7:6e:
                    70:67:ab:46:73:24:10:02:00:14:69:f2:fd:3d:38:
                    8e:e6:32:f1:8c:62:7d:f1:2c:bb:d2:36:7c:ab:a7:
                    a7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F6:8F:48:FD:66:D6:F3:9F:C3:27:B4:0B:8E:15:B5:AE:CE:01:F6
            X509v3 Authority Key Identifier:
                keyid:9A:4A:C2:0F:38:CC:B7:E3:E5:E9:C8:3E:55:40:D3:D1:7F:CC:01:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A4AC20F38CCB7E3E5E9C83E5540D3D17FCC0184.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A24B429103563BD0B7D27A24793785DD8D1833B0B4B0AE40B8A5F8C161E947E/0/3230302e35392e3138332e302f32342d3234203d3e203237393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:5e:ff:05:40:ae:4b:37:1a:c2:70:43:11:7e:cd:a0:85:41:
         c7:93:07:93:3e:32:e6:2d:42:b9:4d:42:72:62:bd:59:4c:43:
         96:13:39:62:32:8f:44:57:5a:17:51:1b:8c:d3:68:e5:b3:fb:
         60:20:7f:1e:54:9e:46:f1:53:d2:9e:40:83:94:9b:e5:57:e5:
         b4:6d:dd:fd:6d:a3:22:bc:87:b0:09:88:bc:25:60:3c:37:32:
         53:c9:20:f8:69:61:b3:14:26:12:ff:69:6e:d7:9b:a9:8f:34:
         05:5c:14:e1:0b:0a:f6:67:31:4d:71:5d:81:f8:b8:f4:06:db:
         b7:27:95:2d:d0:a8:32:57:fe:ad:f2:3f:a4:f9:e9:d0:6f:9d:
         2f:9a:02:32:fb:2b:d4:2a:26:d6:a6:ef:ae:4d:be:18:ca:15:
         fe:77:11:50:6e:e6:0b:e3:e9:98:a0:9b:13:23:80:4c:12:a0:
         c0:61:a4:30:ab:e7:a8:8d:27:5b:28:7b:f3:8d:bc:f6:94:f0:
         61:c3:0f:6c:64:1e:3a:26:49:5c:ed:d8:44:78:ac:b0:3c:01:
         83:b4:32:57:11:9c:86:99:54:ba:a2:a6:4d:b7:c6:74:e0:35:
         95:16:27:01:3c:1f:35:e2:13:19:80:9d:d7:08:2a:3e:a8:fd:
         eb:18:c7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----