Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/3137302e3233332e3132342e302f32322d3232203d3e20323634373337.roa
File:                     3137302e3233332e3132342e302f32322d3232203d3e20323634373337.roa (raw, json)
Hash identifier:          SaQqiugDZq2bRymTDe1lmZSnZcFeIwPsB8jkVR6sfZQ=
Subject key identifier:   7D:88:B3:E6:EA:E2:E9:5D:54:E2:80:A9:86:23:89:A8:C2:5E:E8:07
Certificate issuer:       /CN=0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF
Certificate serial:       28F416A32E8E01DE7734F89AB3781225D66CA682
Authority key identifier: 0F:95:9E:8E:89:90:C6:B4:68:4A:74:EC:F5:D6:A8:A2:BE:22:B2:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/3137302e3233332e3132342e302f32322d3232203d3e20323634373337.roa
Signing time:             Sat 27 Jul 2024 15:25:00 +0000
ROA not before:           Sat 27 Jul 2024 15:20:00 +0000
ROA not after:            Sat 26 Jul 2025 15:25:00 +0000
asID:                     264737
IP address blocks:        170.233.124.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 27 Jul 2024 18:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f4:16:a3:2e:8e:01:de:77:34:f8:9a:b3:78:12:25:d6:6c:a6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF
        Validity
            Not Before: Jul 27 15:20:00 2024 GMT
            Not After : Jul 26 15:25:00 2025 GMT
        Subject: CN=7D88B3E6EAE2E95D54E280A9862389A8C25EE807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c2:bd:20:3c:a7:6c:d7:aa:d1:58:c4:9f:e8:
                    c6:d4:9e:36:eb:45:85:27:8f:43:fd:2f:75:01:06:
                    d6:60:91:9c:1f:fe:ff:59:cf:63:51:27:26:99:c4:
                    fa:ad:78:cd:4e:d1:19:93:b1:b2:7f:4b:89:6a:e8:
                    e4:76:94:7d:33:81:c5:db:2e:e7:c2:a4:09:b6:e8:
                    64:be:e7:92:91:9b:e2:0a:ce:7f:7b:db:62:b0:d9:
                    ac:c1:d1:a4:74:7c:b8:01:08:82:7d:07:50:94:60:
                    85:ad:49:ef:d0:6a:1d:06:dd:25:b0:36:6d:be:f4:
                    46:17:c7:78:20:e4:99:ad:48:5a:15:fe:0c:d6:18:
                    3a:70:57:ef:c6:a6:48:82:3e:c1:dd:a3:17:9b:d0:
                    63:f9:48:8d:1d:5a:57:b0:dc:20:2c:26:8c:4a:a1:
                    11:35:cf:88:7c:6f:2a:7b:a0:a4:1d:56:10:1a:f4:
                    cc:98:7f:d9:87:f5:de:1d:8a:c4:e3:1e:e3:f3:b5:
                    26:6f:5f:89:f6:72:30:b4:ba:f0:cd:fe:83:4b:8f:
                    3e:f0:67:5c:bb:3b:95:32:ba:62:e5:97:a4:9f:31:
                    5b:f4:6e:7a:1a:07:11:8f:07:39:f7:b3:ea:b3:80:
                    39:e1:ab:29:f1:38:34:84:41:cf:29:9b:4a:1d:e4:
                    e8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:88:B3:E6:EA:E2:E9:5D:54:E2:80:A9:86:23:89:A8:C2:5E:E8:07
            X509v3 Authority Key Identifier:
                keyid:0F:95:9E:8E:89:90:C6:B4:68:4A:74:EC:F5:D6:A8:A2:BE:22:B2:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/3137302e3233332e3132342e302f32322d3232203d3e20323634373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:a2:6e:48:f8:c3:c2:7d:8d:5e:89:86:63:87:4d:69:b2:e5:
         97:10:af:74:0b:31:db:da:f7:b8:1a:6d:07:ed:ae:18:7a:c4:
         7c:79:5b:9d:d2:5d:c3:ff:dd:5a:02:19:34:8a:a5:e3:25:8b:
         de:83:85:0c:8b:60:b3:d1:f6:a6:61:f6:f5:15:34:5b:fa:78:
         26:99:6e:c4:82:02:3b:29:c3:d5:8e:52:a6:22:e1:85:a8:d6:
         aa:53:43:b8:c2:11:a3:29:c7:7c:a9:a9:6d:b0:ce:4f:b3:f6:
         f7:26:a0:f0:c0:73:7b:9c:a8:aa:96:c7:b7:18:20:f7:dc:e3:
         f6:af:4f:ef:64:be:7c:fb:b6:50:cc:bc:fb:2b:aa:f3:17:22:
         c2:0e:4c:7e:52:c0:ab:c6:3a:12:84:cf:5b:7e:4d:7b:e8:71:
         37:d4:5a:c2:50:82:ad:e4:34:61:d2:b7:f9:55:d2:dc:e0:d1:
         50:a9:b7:ee:43:12:e1:7c:f3:c6:b5:db:8c:22:b5:92:11:09:
         5c:7e:0e:77:e4:8a:24:26:18:a3:a0:7b:ea:e9:f3:f5:f9:2b:
         11:46:39:a9:3c:c7:bc:f7:51:68:34:dd:9b:84:3c:7d:0d:60:
         b1:71:ac:07:03:6b:34:3b:d4:48:16:a6:36:67:7b:70:d6:3f:
         79:7b:6d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----