Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e37322e302f32342d3234203d3e203138363738.roa
File:                     3137392e312e37322e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          wqgwv7PAaXBtQ/P/v7obxaycimjcpccPeG3S5OifdJQ=
Subject key identifier:   AE:91:B6:B7:2F:97:69:CB:C5:D3:7E:69:73:BD:75:FD:37:56:4C:EE
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       7B6AFA46869CB10FA7F2BF29C8B1CA7F3915BCCB
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e37322e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 05 Mar 2024 18:00:32 +0000
ROA not before:           Tue 05 Mar 2024 17:55:32 +0000
ROA not after:            Tue 04 Mar 2025 18:00:32 +0000
asID:                     18678
IP address blocks:        179.1.72.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 16:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:6a:fa:46:86:9c:b1:0f:a7:f2:bf:29:c8:b1:ca:7f:39:15:bc:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:32 2024 GMT
            Not After : Mar  4 18:00:32 2025 GMT
        Subject: CN=AE91B6B72F9769CBC5D37E6973BD75FD37564CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:a4:6e:40:71:86:ce:33:67:da:b6:d6:32:
                    3f:09:9b:32:08:52:15:5c:d0:c0:26:3a:dd:2f:84:
                    55:bb:e8:af:d9:eb:bd:1f:d5:c6:50:60:ca:b1:14:
                    39:a2:76:7d:44:bf:b7:d5:fc:d5:dc:a1:44:82:b5:
                    b1:4f:c4:25:9f:ff:92:b8:d1:d8:7c:05:bd:20:f2:
                    0c:0b:c7:2e:4d:fc:ec:16:64:83:65:23:82:da:11:
                    08:84:63:9d:69:cc:c5:aa:e4:14:4e:2f:6e:10:01:
                    60:7c:8e:8e:2c:a8:a6:1f:87:0c:e7:e9:d1:46:98:
                    68:da:00:74:6d:01:c5:66:56:d2:ec:0a:b9:b9:44:
                    b6:3f:0d:28:d4:ae:c7:d7:1b:cd:a0:75:2a:86:ba:
                    f1:5b:15:d3:d6:1d:52:26:f0:18:69:f9:da:ba:33:
                    f9:27:ba:de:3a:3f:00:d6:ff:06:67:5f:c0:14:b3:
                    52:cb:91:c2:8c:46:49:58:a1:14:f0:66:4e:11:35:
                    4f:9e:35:9d:f6:9d:26:29:7d:f3:60:07:5f:d0:79:
                    92:55:6c:87:74:97:41:23:b2:27:71:c7:0c:5b:f2:
                    e4:82:dc:ca:ae:ee:9e:3e:9c:0a:58:ff:62:56:ad:
                    46:9a:27:c3:fa:85:e9:c2:c1:0a:57:ec:01:3d:d9:
                    6e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:91:B6:B7:2F:97:69:CB:C5:D3:7E:69:73:BD:75:FD:37:56:4C:EE
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e37322e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:ad:e3:bd:f8:da:8a:d8:38:54:e3:7e:e8:43:04:0f:f4:7a:
         77:6c:15:a8:62:db:b9:59:03:e2:ee:5b:c4:8f:92:76:d9:9f:
         9e:16:58:60:da:a3:97:59:76:3a:98:05:bc:78:0d:15:3b:da:
         8d:de:8a:3c:99:fe:0b:59:82:7b:d1:f7:09:56:21:38:09:12:
         1f:ad:86:6c:0a:d3:09:05:fa:f2:3b:ce:b6:12:fd:a9:7f:e3:
         e6:27:21:e9:f0:02:da:8e:2d:21:e7:bb:c1:3c:9a:1b:60:e1:
         ed:90:e1:25:e0:99:b3:1d:f8:d5:23:38:2d:0f:13:ec:64:d2:
         52:ae:cf:a6:37:66:50:fc:ee:27:24:84:a3:76:bf:21:c3:60:
         36:e7:5c:ce:46:94:0f:ec:3a:44:5b:e1:e3:e0:5b:49:89:c5:
         f5:55:be:95:ea:de:0d:6f:c8:20:0f:c1:82:07:da:16:7f:19:
         88:df:e5:ad:66:15:b5:10:7c:85:a5:f1:81:0f:c7:8c:c8:d2:
         4b:86:d7:56:c7:08:30:05:a5:d1:3b:45:7e:b2:37:2f:b3:9d:
         b3:c7:42:45:be:db:60:20:cb:d5:a5:1c:f1:c4:02:f7:79:06:
         a6:14:12:a9:8f:09:f5:5f:a9:f5:ff:1b:d7:50:e6:76:5f:7f:
         b3:13:8b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----