Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e302e302f31362d3234203d3e20323732333233.roa
File:                     3134382e3230382e302e302f31362d3234203d3e20323732333233.roa (raw, json)
Hash identifier:          PUFvxxTuCoBoaOrugsr7Bw5yqe+xlFBZEtDoOb11UMQ=
Subject key identifier:   AC:A7:6F:9F:09:B7:2C:7E:0F:5C:7A:C1:CA:20:2E:3F:1D:99:A8:84
Certificate issuer:       /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial:       3EAC0C4593DEF0DC519CCEE5BDB2EAA4AE4EBA14
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e302e302f31362d3234203d3e20323732333233.roa
Signing time:             Mon 26 Aug 2024 20:55:00 +0000
ROA not before:           Mon 26 Aug 2024 20:50:00 +0000
ROA not after:            Mon 25 Aug 2025 20:55:00 +0000
asID:                     272323
IP address blocks:        148.208.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked on Thu 26 Sep 2024 23:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ac:0c:45:93:de:f0:dc:51:9c:ce:e5:bd:b2:ea:a4:ae:4e:ba:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
        Validity
            Not Before: Aug 26 20:50:00 2024 GMT
            Not After : Aug 25 20:55:00 2025 GMT
        Subject: CN=ACA76F9F09B72C7E0F5C7AC1CA202E3F1D99A884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:3a:9c:b3:94:1b:ab:c6:ec:f3:41:56:9f:
                    b7:b3:e8:53:a3:e1:db:bf:44:b6:c7:44:77:83:08:
                    0c:d3:00:5f:0d:bd:5d:c6:9e:c6:5e:b5:25:db:de:
                    21:ee:d1:22:0f:44:3c:bf:2b:6b:e4:10:95:34:dc:
                    b9:14:f8:8e:1e:6b:0c:8e:2b:fa:17:7e:cc:4a:56:
                    6f:f8:8a:ed:e2:a1:0f:b5:03:98:9e:30:64:f9:9a:
                    74:97:17:5b:d6:11:84:ed:12:6c:0e:b3:a6:4a:71:
                    e9:36:55:b0:be:bc:7b:06:ff:4b:7f:04:cf:07:cb:
                    6e:9a:50:54:94:67:f3:d5:f8:20:02:c0:35:f3:12:
                    f3:d9:26:3b:42:61:3d:7b:65:7f:8f:e5:83:24:cd:
                    dc:37:2e:be:e1:5d:49:7b:68:50:db:93:aa:4d:e4:
                    1a:0b:78:57:df:6f:41:84:10:b8:33:33:59:d5:51:
                    2f:cf:2a:1d:01:00:43:cf:90:35:8a:e6:55:83:16:
                    72:c4:5b:db:63:e3:1d:96:ab:09:b5:45:bb:89:aa:
                    89:ea:7b:8a:f1:69:9e:e4:2e:c2:87:c4:25:01:41:
                    55:17:dc:48:82:ae:15:d8:3b:85:fa:79:ce:7b:7f:
                    ac:fa:32:42:9b:6d:3b:a6:e9:f1:f6:77:a8:bd:c8:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A7:6F:9F:09:B7:2C:7E:0F:5C:7A:C1:CA:20:2E:3F:1D:99:A8:84
            X509v3 Authority Key Identifier:
                keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e302e302f31362d3234203d3e20323732333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3e:44:1e:2f:9c:24:94:1d:f4:62:94:f0:24:cc:d8:be:01:b6:
         22:9a:ee:6e:70:4d:de:b1:fe:2e:9f:0e:8c:fe:3f:9b:5b:d1:
         f0:84:9b:f3:d1:7a:3d:e8:0d:62:e7:5b:ed:40:ba:08:4b:a6:
         57:d6:4b:60:1a:7f:88:c9:67:02:32:ba:c6:b0:57:3c:5a:73:
         c5:61:92:43:3f:c6:67:d7:d0:4a:e5:20:5c:d5:68:72:34:81:
         c9:94:8b:37:7d:0a:0b:35:07:a5:4e:50:47:fd:07:31:0f:52:
         c0:8f:0d:32:55:88:fc:58:49:a9:67:ba:5e:c8:c8:fc:e5:d5:
         74:58:95:94:c9:29:86:fb:6c:33:ae:78:f4:e6:da:21:0e:cc:
         90:cf:61:d2:24:b0:32:e9:46:ed:31:cd:a4:7a:46:67:91:7d:
         c3:19:59:4e:20:02:fd:c4:c9:5e:a9:43:ae:3c:99:8e:5b:30:
         e3:5e:81:a3:76:a9:16:f8:d8:fa:0c:bc:fd:3c:88:b4:8d:f4:
         0f:f0:c7:35:85:18:5a:58:ba:de:f5:28:46:26:a6:df:f7:37:
         00:5d:15:73:77:68:3e:be:60:58:8e:4d:80:41:23:2a:27:78:
         05:51:b1:dd:a6:0e:9d:90:78:39:40:e3:c7:87:14:84:11:b8:
         6f:2c:c4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----