Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231362e302f32312d3234203d3e203138363738.roa
File:                     3139302e39302e3231362e302f32312d3234203d3e203138363738.roa (raw, json)
Hash identifier:          Uy4tmV3yBEQqubLDx3eNKlv+98I20lsgvWmRAdZeMSs=
Subject key identifier:   CA:52:4E:15:29:DB:48:95:5D:59:06:C7:6D:3F:12:E4:20:AA:7A:61
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       32A3A77F898CDD70412B0DFADFBA050E57A41347
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231362e302f32312d3234203d3e203138363738.roa
Signing time:             Tue 05 Mar 2024 18:00:45 +0000
ROA not before:           Tue 05 Mar 2024 17:55:45 +0000
ROA not after:            Tue 04 Mar 2025 18:00:45 +0000
asID:                     18678
IP address blocks:        190.90.216.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 16:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a3:a7:7f:89:8c:dd:70:41:2b:0d:fa:df:ba:05:0e:57:a4:13:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:45 2024 GMT
            Not After : Mar  4 18:00:45 2025 GMT
        Subject: CN=CA524E1529DB48955D5906C76D3F12E420AA7A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:4a:b3:9c:ad:6e:fe:46:58:8c:86:1c:6d:
                    c5:f7:05:84:97:aa:65:76:1b:88:a8:44:28:3f:b7:
                    f5:c9:9b:81:ed:87:56:d6:85:a7:72:94:18:f7:84:
                    2f:49:70:48:02:d4:1b:5f:3d:df:3f:43:0b:da:b2:
                    b6:92:48:ff:39:3c:f5:29:4e:22:32:57:bd:09:75:
                    cc:a1:8c:43:23:cf:2b:3b:3e:c4:b8:88:ec:4a:96:
                    c9:7e:03:9a:eb:e0:e6:4a:f9:af:24:df:ff:10:f4:
                    f7:50:51:20:ea:a7:4e:e6:09:3c:95:19:6a:6c:41:
                    58:79:50:e6:8b:cf:37:81:a7:13:38:a7:fc:d3:21:
                    1a:bd:e4:19:56:69:7a:e3:d5:9f:15:b8:bd:3d:81:
                    21:2a:39:ae:f1:44:a1:a2:fc:63:b5:0b:c8:7a:b4:
                    77:02:43:cc:54:c1:44:61:e3:2c:dd:b5:11:e1:16:
                    d2:db:af:ca:2f:c1:77:e0:36:30:ba:93:95:b9:7e:
                    5a:eb:92:f7:33:d4:e2:8a:23:ff:6d:19:43:12:c4:
                    e0:a4:12:91:69:a6:d6:b7:64:80:64:8d:4e:48:a8:
                    53:14:4a:d3:8c:f2:d8:83:41:46:80:8a:30:b5:a1:
                    40:fb:c2:6f:b7:8a:98:78:f3:15:8d:db:ed:14:8f:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:52:4E:15:29:DB:48:95:5D:59:06:C7:6D:3F:12:E4:20:AA:7A:61
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231362e302f32312d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:c1:0c:2a:24:aa:23:c1:dc:4c:c5:e7:0a:6b:6c:52:33:c5:
         5e:4a:c7:3d:2a:4f:da:16:ee:f7:c8:f6:9b:30:fe:c4:2c:79:
         54:d5:58:a8:7d:15:5f:54:9a:f3:19:c6:d8:c4:d4:9a:05:3e:
         ee:cc:15:10:7a:98:e9:f8:cb:a5:49:3b:16:48:6a:6c:f4:a5:
         77:22:98:68:b4:d6:3e:94:84:63:3e:bf:59:6a:df:39:63:f0:
         1c:c5:04:47:a3:9f:ec:62:e6:15:c8:68:9e:ee:14:ae:db:0b:
         b5:42:9e:dc:1d:b4:17:70:ec:16:63:79:f3:63:44:e9:96:bd:
         92:4a:21:5d:a8:fd:c8:f5:d5:88:39:8d:aa:15:ed:e5:be:bf:
         2e:13:53:c5:d3:62:d1:ba:ea:90:05:3e:44:b8:f1:56:9d:b8:
         06:df:dc:32:32:63:19:b1:0b:4a:b9:90:43:a4:ad:0b:4f:f6:
         3d:5f:09:7c:f6:59:54:f1:f5:b5:83:ed:56:0e:c1:3b:aa:97:
         c2:16:8a:8a:f1:c9:57:0f:df:03:49:f1:ff:5a:59:4a:3c:7c:
         4a:ea:14:ac:9f:d2:55:10:29:1e:41:2c:bd:d0:5f:cc:42:f4:
         36:fb:ff:cc:14:d2:2c:4c:5a:15:35:f5:e1:13:71:90:70:09:
         3d:11:aa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----