Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131392e3134342e302f32322d3234203d3e203232303437.roa
File:                     3139312e3131392e3134342e302f32322d3234203d3e203232303437.roa (raw, json)
Hash identifier:          2r8iTubS2m2xB98+FG1l7kiMbcoxCUyrv6JKzmfHnVw=
Subject key identifier:   6B:F6:26:E6:6B:0D:17:30:9F:E9:CA:1C:B0:8A:42:21:35:8B:53:0E
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       0A33DD59213640FEF35B15926C72942310407644
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131392e3134342e302f32322d3234203d3e203232303437.roa
Signing time:             Thu 30 May 2024 13:10:00 +0000
ROA not before:           Thu 30 May 2024 13:05:00 +0000
ROA not after:            Thu 29 May 2025 13:10:00 +0000
asID:                     22047
IP address blocks:        191.119.144.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Aug 2024 05:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:33:dd:59:21:36:40:fe:f3:5b:15:92:6c:72:94:23:10:40:76:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: May 30 13:05:00 2024 GMT
            Not After : May 29 13:10:00 2025 GMT
        Subject: CN=6BF626E66B0D17309FE9CA1CB08A4221358B530E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:72:9c:01:04:c1:1e:c5:ce:4d:5c:79:b7:
                    3a:3b:76:ea:ad:16:19:c7:6b:3d:ff:7d:44:a0:4e:
                    8e:2e:50:e5:7a:74:e9:fe:ab:6b:a2:cc:f0:01:34:
                    3a:d4:f5:86:a8:bf:50:82:2f:6e:a5:7f:4c:7c:a1:
                    55:d5:ed:cb:42:19:28:98:72:87:87:09:af:f8:d9:
                    c5:38:05:25:86:ef:cd:e1:f0:15:58:fb:63:21:d6:
                    13:8c:99:2d:1f:2e:bd:6e:25:a4:af:b9:46:5a:90:
                    ae:c1:49:2c:51:8e:08:ad:eb:f6:bc:70:1c:7b:68:
                    84:a6:07:38:92:e3:1b:e8:b9:06:69:01:94:ea:60:
                    4b:78:03:3f:f4:06:29:c8:e8:f3:c7:c4:74:60:f8:
                    91:e4:a8:ee:02:05:12:cb:ab:9f:6e:6b:b8:56:aa:
                    20:45:48:b5:86:48:22:8d:84:cd:31:86:a4:18:70:
                    f9:25:6f:5a:12:a4:ae:cb:7d:4a:32:44:9f:8a:24:
                    47:a7:fe:d6:62:c2:7a:29:9c:9b:f4:31:9b:d7:81:
                    7e:dc:c5:b2:e6:da:1c:ba:50:82:e1:50:38:1a:e2:
                    7a:62:20:50:45:c6:d4:fc:a0:09:c2:65:a6:63:3a:
                    bc:4c:4e:70:8e:80:6d:86:02:87:3c:6b:16:64:fa:
                    02:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F6:26:E6:6B:0D:17:30:9F:E9:CA:1C:B0:8A:42:21:35:8B:53:0E
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139312e3131392e3134342e302f32322d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.119.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:58:a4:97:87:9b:55:af:9f:f9:a7:b8:5c:60:a4:29:3e:be:
         37:52:8d:ab:07:05:9c:3f:dd:42:2e:74:fe:1f:73:9e:ee:07:
         a4:67:41:bf:7d:da:6d:e6:24:84:0b:7f:18:62:7a:b5:9a:cc:
         31:68:f0:ef:98:a2:10:eb:70:31:f6:6b:fa:a4:bd:b9:1e:b4:
         bb:cd:51:cd:84:c3:45:e3:c6:32:a5:a7:f0:a1:75:49:5c:3b:
         94:46:59:3b:38:e6:c5:e9:08:6a:89:c6:d8:10:29:45:37:56:
         96:14:f0:80:dd:45:f1:46:0d:2e:ce:87:a7:7e:44:8c:92:1e:
         de:3a:20:ad:62:cf:c2:e5:dc:ec:dc:90:a4:4f:fa:44:8e:28:
         19:5d:d7:6c:28:5c:25:ed:fe:fc:49:7b:a1:ce:4e:34:ae:bc:
         d2:1a:2e:a4:4a:7f:c2:33:15:ff:22:75:60:c9:f6:ce:31:61:
         25:25:19:94:7c:60:cc:04:6d:3b:fa:54:1e:3e:17:b0:15:c7:
         f4:ae:b5:72:c3:32:af:f0:57:58:1a:f0:2f:a2:04:63:78:43:
         2f:97:eb:f9:43:64:3c:b5:31:05:77:11:7e:db:61:1d:78:60:
         9f:18:ad:41:c3:d0:3e:43:f2:30:01:16:e2:fd:48:53:48:44:
         01:f4:b1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----