Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131392e3132382e302f32302d3234203d3e203232303437.roa
File:                     3139312e3131392e3132382e302f32302d3234203d3e203232303437.roa (raw, json)
Hash identifier:          liDTctVqIFpsP2JRALf2Sb7Tk6s3s8AtQbGMvfwrtPE=
Subject key identifier:   4D:47:24:F8:B4:B4:E4:6F:E6:7A:47:E3:18:A5:7F:C7:B7:6B:AD:23
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       1767501832636F21042C2F003BA82F927A517B59
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131392e3132382e302f32302d3234203d3e203232303437.roa
Signing time:             Thu 30 May 2024 13:10:00 +0000
ROA not before:           Thu 30 May 2024 13:05:00 +0000
ROA not after:            Thu 29 May 2025 13:10:00 +0000
asID:                     22047
IP address blocks:        191.119.128.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Aug 2024 05:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:67:50:18:32:63:6f:21:04:2c:2f:00:3b:a8:2f:92:7a:51:7b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: May 30 13:05:00 2024 GMT
            Not After : May 29 13:10:00 2025 GMT
        Subject: CN=4D4724F8B4B4E46FE67A47E318A57FC7B76BAD23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:d2:f9:1c:37:f6:e8:05:33:b4:90:ce:67:
                    40:1c:f2:00:82:24:55:32:c9:b1:cb:93:5c:22:bc:
                    63:bc:24:82:da:ef:8d:41:eb:86:14:12:fc:f7:92:
                    85:7f:86:e9:33:7f:f8:70:69:cb:37:eb:28:5d:52:
                    2b:f3:8c:ab:9c:99:3d:4d:24:9d:a1:3d:1b:81:2b:
                    7b:0b:93:01:75:b9:18:97:55:ba:74:f0:c5:e6:fa:
                    3b:4c:c7:ae:7c:c7:6b:88:be:d4:4a:24:40:71:a8:
                    f4:3d:18:3a:5d:e2:f4:93:72:50:14:f1:eb:09:41:
                    0a:89:26:d6:96:44:3b:81:6a:df:7a:03:2e:ad:44:
                    82:fd:7d:6f:17:08:68:90:3e:9a:e3:22:5e:fc:a6:
                    27:98:67:b4:7c:71:37:9b:c5:e3:f6:d9:84:33:e8:
                    97:44:e0:c8:21:60:a0:52:cf:c3:9f:d7:b8:49:e8:
                    b2:3e:86:45:29:e3:09:1c:29:52:19:8a:ef:e7:4d:
                    76:70:6a:4f:b6:d3:6c:44:31:08:c0:e2:16:0d:9d:
                    92:c0:3a:de:da:1b:e6:c1:7e:c5:8b:b0:ab:b8:25:
                    76:28:e1:8e:2e:af:92:63:99:96:09:c3:68:3f:85:
                    f4:ba:19:8c:b5:e6:79:40:eb:dc:fc:a0:42:72:b8:
                    4c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:47:24:F8:B4:B4:E4:6F:E6:7A:47:E3:18:A5:7F:C7:B7:6B:AD:23
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131392e3132382e302f32302d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.119.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:3e:ab:10:b8:21:ff:74:56:e9:2f:03:b6:48:59:ca:5a:4f:
         21:69:4c:03:b3:c4:d5:9d:c7:3c:95:93:85:55:99:58:26:9b:
         09:d3:35:a7:d6:f6:ec:4c:93:f0:52:b3:3b:bf:b1:4d:01:a5:
         ef:ee:7b:0f:34:13:0e:c6:47:e6:b2:19:e7:0b:70:f0:d7:bf:
         c2:61:f3:9b:80:9f:7f:90:dc:39:0d:c8:65:9f:da:29:79:8c:
         6d:26:cc:0b:33:f9:84:07:82:cd:30:79:30:50:01:1f:5c:2d:
         7a:d0:19:d1:12:58:0e:32:de:c6:e3:9c:dc:dd:74:c9:a4:aa:
         6e:81:35:41:d3:62:6a:85:c8:d4:ef:89:38:68:c0:99:80:1f:
         22:5d:4e:78:00:f4:28:b1:e8:54:c1:ce:c6:7e:bb:a6:02:0d:
         a3:b3:01:8f:bd:82:f6:85:c9:32:02:c0:0a:e5:0b:ab:0d:a8:
         14:df:4b:16:2f:03:61:56:a8:6b:df:53:cc:24:4a:50:33:eb:
         47:d2:01:dd:b2:44:7b:dc:aa:4b:b0:0f:51:36:23:84:99:a3:
         05:55:80:4a:1a:06:b6:20:61:66:78:1b:0a:54:41:8e:e6:95:
         01:51:c3:23:9f:b0:4a:7a:71:de:89:92:76:43:50:45:d7:07:
         f3:8c:7f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----