Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3230372e3234382e3139322e302f31392d3139203d3e203237393031.roa
File:                     3230372e3234382e3139322e302f31392d3139203d3e203237393031.roa (raw, json)
Hash identifier:          RT2ApQZSq8S8omZEZ8yOaTmu81y6ARSPryQHOBMjL+Y=
Subject key identifier:   FA:EC:E9:63:0A:4F:AB:2C:B6:C0:39:5F:1B:36:A4:CA:1F:E5:58:D5
Certificate issuer:       /CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
Certificate serial:       65A6F2A61462B5B1DC2D92BB048ED88610BF1CDB
Authority key identifier: 19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3230372e3234382e3139322e302f31392d3139203d3e203237393031.roa
Signing time:             Tue 05 Mar 2024 17:42:42 +0000
ROA not before:           Tue 05 Mar 2024 17:37:42 +0000
ROA not after:            Tue 04 Mar 2025 17:42:42 +0000
asID:                     27901
IP address blocks:        207.248.192.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a6:f2:a6:14:62:b5:b1:dc:2d:92:bb:04:8e:d8:86:10:bf:1c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191DE519F25FDF692CBDC10A0964A4B3D9CDA91F
        Validity
            Not Before: Mar  5 17:37:42 2024 GMT
            Not After : Mar  4 17:42:42 2025 GMT
        Subject: CN=FAECE9630A4FAB2CB6C0395F1B36A4CA1FE558D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:62:ed:b0:84:20:67:c5:fc:3c:00:06:30:64:
                    91:95:a6:43:da:3e:ad:44:45:8a:e1:92:70:a0:b2:
                    1b:bc:3a:6a:82:76:e5:34:a5:30:4d:dd:42:44:88:
                    1e:fe:ba:ab:d5:b4:36:66:f8:03:ec:35:28:94:68:
                    fa:ba:4c:f1:5b:8d:65:8e:46:82:2c:5c:e7:75:7b:
                    e0:aa:47:9d:5c:36:e6:c3:35:12:80:34:c3:20:4e:
                    4e:f0:c7:cd:38:7c:b6:cb:2c:dd:5d:aa:8f:70:c0:
                    f9:d0:6f:f3:e3:df:ed:b7:d1:36:50:d4:1f:8c:8e:
                    11:ef:ce:1e:ad:15:23:05:fd:39:09:05:85:15:23:
                    ed:7f:f9:7b:ad:3f:8b:33:eb:c7:f6:5b:ce:f5:a2:
                    e4:ca:a3:89:a8:f0:af:a4:7b:08:e1:61:82:95:f9:
                    23:64:89:87:73:f2:77:e1:41:c1:23:7c:d7:49:49:
                    da:34:f4:1b:1b:76:04:e5:ed:4a:3c:89:51:98:e0:
                    ca:5f:62:17:0a:69:e0:51:d7:10:ae:45:bb:6a:0d:
                    58:3f:8e:bc:4e:ee:63:a2:96:6a:87:c0:6c:ee:34:
                    db:ea:22:c1:09:5e:a0:94:86:24:a1:68:3f:91:e5:
                    9f:b6:1f:69:29:bf:f2:51:05:05:fe:f8:c1:f8:b0:
                    45:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EC:E9:63:0A:4F:AB:2C:B6:C0:39:5F:1B:36:A4:CA:1F:E5:58:D5
            X509v3 Authority Key Identifier:
                keyid:19:1D:E5:19:F2:5F:DF:69:2C:BD:C1:0A:09:64:A4:B3:D9:CD:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/191DE519F25FDF692CBDC10A0964A4B3D9CDA91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A2630EFF161E3491A84A5B4F6FB68CF0439ACC404494B7BF1C391929FA76C3E/0/3230372e3234382e3139322e302f31392d3139203d3e203237393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         42:dd:5c:60:b2:2e:fe:d7:d2:11:0d:1b:7c:b6:4f:d7:d5:33:
         13:c1:e6:7e:49:76:60:e8:c0:94:6d:72:2c:5e:9a:27:c7:07:
         9a:56:f6:65:fa:7b:86:50:0e:2e:bd:4d:e5:35:05:2c:26:f9:
         8e:b0:84:d0:f3:bc:ba:c4:12:a4:dc:3e:5d:cc:a8:c8:ef:e0:
         69:74:d7:83:92:b8:98:77:34:ea:99:dc:c4:61:2f:2d:2b:b9:
         9f:75:04:66:3d:e0:62:ff:47:1f:f5:60:21:94:52:54:f6:23:
         63:a5:87:e3:d7:a2:bf:d1:f2:46:8d:fc:7b:d5:87:58:78:27:
         f7:ca:dd:4e:af:9b:a1:66:e7:be:9c:d0:84:79:de:4f:7b:a4:
         41:ec:34:40:e9:16:39:68:cb:a7:48:32:49:9b:bd:52:20:db:
         d3:2b:3d:44:0d:d1:7c:9e:1a:99:be:69:74:d2:75:2c:3f:b8:
         66:8a:f4:64:cd:a3:db:c3:9c:e5:bb:ea:93:73:97:b3:c9:29:
         e6:af:97:c1:3f:e7:d7:4f:df:63:4f:97:e3:e0:e0:07:6d:8c:
         05:47:88:5f:13:3f:e9:14:6f:5e:50:50:e3:db:91:14:b7:2a:
         8a:f9:62:8c:ec:dc:30:97:93:fd:af:29:12:93:f7:45:9a:a6:
         5e:2a:43:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----