Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/3134332e3230382e34382e302f32322d3234203d3e20323730303739.roa
File:                     3134332e3230382e34382e302f32322d3234203d3e20323730303739.roa (raw, json)
Hash identifier:          kZr4N1UTxGkcEQy3VAB9Qz3wmLvHz1rwKIwE9wIx9/c=
Subject key identifier:   6D:D2:EB:68:52:5F:34:F0:D2:ED:DF:86:E2:D3:6F:6D:BC:01:8C:98
Certificate issuer:       /CN=4212A4C43151C156150D9BDED03D7236921BF9B8
Certificate serial:       2B3B372B33E7875EEAA0B1E973D310A569948F02
Authority key identifier: 42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/3134332e3230382e34382e302f32322d3234203d3e20323730303739.roa
Signing time:             Tue 26 Nov 2024 00:35:00 +0000
ROA not before:           Tue 26 Nov 2024 00:30:00 +0000
ROA not after:            Tue 25 Nov 2025 00:35:00 +0000
asID:                     270079
IP address blocks:        143.208.48.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 26 Nov 2024 11:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3b:37:2b:33:e7:87:5e:ea:a0:b1:e9:73:d3:10:a5:69:94:8f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4212A4C43151C156150D9BDED03D7236921BF9B8
        Validity
            Not Before: Nov 26 00:30:00 2024 GMT
            Not After : Nov 25 00:35:00 2025 GMT
        Subject: CN=6DD2EB68525F34F0D2EDDF86E2D36F6DBC018C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:6c:b9:8b:9a:54:61:c2:7a:b1:9a:1e:1c:
                    29:27:16:2b:92:58:b4:91:f6:a8:b6:9f:40:4b:2b:
                    25:0c:09:4c:0f:23:0c:44:59:86:ca:88:2d:12:67:
                    ac:cd:7a:5b:89:32:4f:bf:7c:82:22:0c:6a:11:5f:
                    93:11:0f:81:4a:47:4b:f1:82:90:ae:59:78:e7:3b:
                    a9:3d:35:96:2d:60:ce:78:bd:3a:a0:30:28:68:1c:
                    24:cc:bb:b4:b7:a3:1e:f5:a6:4c:c0:92:22:95:0d:
                    e9:fb:d2:6c:76:9b:25:39:b5:90:b0:49:d8:7e:a8:
                    db:c4:bc:87:69:7c:52:33:f2:97:f9:64:bb:4d:9e:
                    b8:9d:f8:c6:8d:aa:94:a0:ff:f9:dd:5a:92:03:80:
                    48:02:c7:1b:d6:58:b7:42:50:1f:54:e3:90:5e:7f:
                    dd:c4:b2:af:d9:f3:7f:22:e0:e2:7e:73:bf:24:a5:
                    56:ee:64:23:e4:f9:75:dd:ba:67:90:60:78:00:86:
                    10:29:15:a7:b9:92:dd:57:33:a7:25:46:6e:34:31:
                    20:c2:4a:4e:08:fc:84:12:89:88:63:df:06:39:9f:
                    9c:58:b7:a5:b3:62:f4:16:d0:0f:81:9a:61:00:3f:
                    19:50:d0:aa:f1:1a:ba:d6:e5:f7:a8:3b:83:e0:06:
                    1f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D2:EB:68:52:5F:34:F0:D2:ED:DF:86:E2:D3:6F:6D:BC:01:8C:98
            X509v3 Authority Key Identifier:
                keyid:42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/3134332e3230382e34382e302f32322d3234203d3e20323730303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:34:93:10:5d:c8:f9:f9:9c:fa:f9:c7:1b:3f:83:0a:51:d9:
         b4:b4:e8:97:b0:d9:35:66:04:2d:c6:39:65:2c:a5:38:46:ac:
         eb:4c:26:e2:f8:06:b2:88:99:ef:18:9c:40:8b:d9:aa:0b:91:
         84:66:f8:65:82:ca:20:5d:3a:fd:06:fe:00:2d:5c:ab:99:f3:
         72:de:04:5f:ff:ee:26:66:80:6b:aa:91:55:26:13:7d:2e:28:
         3c:2b:bb:2d:bb:85:8c:19:19:7b:e7:c4:42:e6:e4:d3:12:15:
         35:0a:ad:a9:f1:40:08:bd:92:a3:78:14:57:3c:84:a6:61:f9:
         93:1d:81:e2:c5:a4:8c:68:a0:4c:9c:0e:af:88:05:20:56:21:
         fd:da:50:33:e8:9d:f3:4b:7f:03:b0:7e:d4:76:ae:33:ee:2d:
         3d:6b:f1:19:23:33:0e:87:92:2b:fb:1c:18:0a:5f:cc:c5:86:
         b6:08:d7:a0:f3:08:16:ee:df:03:82:0e:fe:10:f7:1e:83:37:
         f5:bf:85:b4:37:9e:ae:74:6e:fa:41:e2:63:1b:f6:2c:18:0a:
         16:c0:32:d4:89:8e:70:31:a8:fe:a4:17:4b:2e:00:b6:b2:95:
         d4:f5:9c:d2:2f:a4:af:e8:f4:ef:50:8d:f6:eb:fc:8d:9f:f8:
         ba:a7:ba:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----