Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/3138372e3130322e3232342e302f32322d3234203d3e203238333934.roa
File:                     3138372e3130322e3232342e302f32322d3234203d3e203238333934.roa (raw, json)
Hash identifier:          abkxFngmKOnVLD6r33TvfHPvhADLyETs5L+BOksE4MA=
Subject key identifier:   0F:44:80:24:1D:98:5B:F4:A5:64:18:73:6E:95:8C:35:0E:58:A7:57
Certificate issuer:       /CN=A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71
Certificate serial:       4FFD01D95693857671E85ACFCD0F1CF4063F29EC
Authority key identifier: A7:E0:18:6B:5A:1E:85:3E:43:11:E7:2D:BC:D1:C1:D3:8A:FD:3A:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/3138372e3130322e3232342e302f32322d3234203d3e203238333934.roa
Signing time:             Mon 19 Aug 2024 23:35:00 +0000
ROA not before:           Mon 19 Aug 2024 23:30:00 +0000
ROA not after:            Mon 18 Aug 2025 23:35:00 +0000
asID:                     28394
IP address blocks:        187.102.224.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 01:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:fd:01:d9:56:93:85:76:71:e8:5a:cf:cd:0f:1c:f4:06:3f:29:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71
        Validity
            Not Before: Aug 19 23:30:00 2024 GMT
            Not After : Aug 18 23:35:00 2025 GMT
        Subject: CN=0F4480241D985BF4A56418736E958C350E58A757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:e9:2a:2f:86:b7:eb:1d:d6:c6:b8:ac:47:
                    4c:8f:35:8a:c8:61:45:37:b6:25:76:76:63:b6:5e:
                    8a:45:f1:43:64:40:3b:1e:55:55:8a:6e:c4:0c:f0:
                    6b:82:e1:9e:21:df:66:84:0c:52:38:d1:2c:69:42:
                    2b:05:a4:9a:bf:15:a2:dd:a0:a2:88:ee:5f:4d:57:
                    ac:e2:a1:dc:c6:09:06:80:e4:7a:46:2d:d2:60:49:
                    bc:17:1b:f8:f1:4d:ec:39:d6:f9:db:89:6e:ec:2f:
                    63:62:21:d0:17:64:51:c2:c5:46:db:67:a1:b8:e4:
                    8e:bd:25:c0:90:f8:f1:fd:c0:5b:12:a7:d2:6d:be:
                    25:e7:ac:7c:f3:70:98:da:8f:27:9a:84:b4:41:f7:
                    a4:89:11:01:84:41:3c:6c:cb:ab:7f:93:63:20:fb:
                    e1:28:ec:82:ea:a5:04:7f:9c:c9:92:71:10:ee:d4:
                    bb:d2:a4:6c:08:64:04:ce:50:6c:fb:78:ba:f7:df:
                    40:57:3a:d7:91:ed:b2:da:39:ff:54:8d:0c:a8:b9:
                    9b:9d:9f:4a:9a:83:69:2d:9f:64:a4:bd:fb:ab:4b:
                    ab:e5:2d:c1:c7:ec:9d:e6:28:31:05:d1:23:c7:d7:
                    79:23:67:14:2f:1a:72:3b:61:7a:a4:02:76:5c:64:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:44:80:24:1D:98:5B:F4:A5:64:18:73:6E:95:8C:35:0E:58:A7:57
            X509v3 Authority Key Identifier:
                keyid:A7:E0:18:6B:5A:1E:85:3E:43:11:E7:2D:BC:D1:C1:D3:8A:FD:3A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7E0186B5A1E853E4311E72DBCD1C1D38AFD3A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DC8EDF28060A53C3F9F5C5B7DECA0B2CF5347172DFCE8B577E7837F51872C7C/0/3138372e3130322e3232342e302f32322d3234203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:9d:93:ec:63:b4:b8:43:65:97:5b:58:e4:9c:4a:75:2e:90:
         7b:25:0f:87:11:6b:1f:9a:8d:dd:17:5b:85:d1:fd:53:ab:b6:
         ec:28:8a:22:4b:e8:8d:e5:e7:92:1f:22:c0:b8:57:bf:d7:7e:
         f0:d8:8f:6b:78:93:d2:48:f3:d5:14:7f:af:24:97:56:8e:ff:
         b9:fa:dd:ee:f4:23:80:ab:db:46:05:3c:50:a7:34:57:ab:9b:
         ed:88:85:df:e7:55:bc:7f:89:11:8b:94:21:50:4d:77:e2:44:
         4d:ff:49:25:c1:12:a3:18:6b:0e:c9:dd:75:75:88:2d:a3:f8:
         ca:d8:96:f9:e6:f7:ca:1b:9d:b7:9f:a5:ef:af:fb:db:c4:b8:
         a2:b4:fb:d4:d8:af:0a:ea:ab:7a:dc:6a:69:2d:89:d3:71:07:
         59:1b:ff:20:71:b7:ea:77:35:a7:b8:e4:e2:d6:58:ff:3e:e7:
         f0:2b:9c:6c:7b:1a:08:73:af:54:12:2d:80:d3:37:f7:16:da:
         df:bf:b0:6f:7e:24:5a:78:a9:26:a7:d6:1a:cd:9b:d1:4b:89:
         d6:93:c7:1b:e0:25:92:77:ca:c2:3d:b3:65:52:9e:a6:19:f5:
         5f:54:4d:1a:2e:3f:9e:1a:2b:af:4e:7d:4a:15:1c:64:e2:42:
         bd:d1:0a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----