Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/3136382e3233322e3130322e302f32332d3234203d3e203631343631.roa
File:                     3136382e3233322e3130322e302f32332d3234203d3e203631343631.roa (raw, json)
Hash identifier:          oN4Iezy+26d4Q/vIsjSpYpj9Dfpz0G7/JbSJPOeDGvA=
Subject key identifier:   89:38:DE:BC:E5:B6:2F:D7:FF:19:AA:5D:7D:35:D0:4A:10:76:47:B6
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       766F5DBE0CEF915CF566653732318208EC49B9E2
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/3136382e3233322e3130322e302f32332d3234203d3e203631343631.roa
Signing time:             Thu 25 Apr 2024 12:50:00 +0000
ROA not before:           Thu 25 Apr 2024 12:45:00 +0000
ROA not after:            Thu 24 Apr 2025 12:50:00 +0000
asID:                     61461
IP address blocks:        168.232.102.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 13:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6f:5d:be:0c:ef:91:5c:f5:66:65:37:32:31:82:08:ec:49:b9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: Apr 25 12:45:00 2024 GMT
            Not After : Apr 24 12:50:00 2025 GMT
        Subject: CN=8938DEBCE5B62FD7FF19AA5D7D35D04A107647B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:af:15:1a:0e:7e:11:77:63:68:35:b5:42:01:
                    35:f3:9f:73:ca:d9:8d:26:36:0d:bd:86:78:e8:d8:
                    b3:4e:45:01:33:7d:d5:1c:88:44:b8:b2:69:4d:d8:
                    59:52:61:33:be:ef:e4:38:ce:8e:ab:88:78:ed:2d:
                    6b:d2:7e:78:ac:af:23:8a:f8:44:16:ac:3c:5e:0c:
                    8d:92:54:8e:55:15:74:d1:a8:32:e9:70:79:41:1e:
                    9a:b2:71:37:21:2b:c3:9d:7f:2b:3e:b0:88:72:ad:
                    ad:1b:d0:f5:84:0f:61:d9:12:87:fd:d4:ef:45:5a:
                    f6:63:09:9c:d7:91:80:ec:21:55:1c:a3:bf:8a:6f:
                    65:5b:ab:0f:27:0c:cf:3d:f1:3e:58:52:ac:1f:f0:
                    08:b2:f3:fa:de:6b:2c:25:d3:e6:1e:b8:11:2f:6d:
                    1d:e3:94:8f:08:9a:25:fa:2e:85:65:4c:cb:3a:93:
                    cd:48:42:9a:51:51:47:7b:cd:4b:a0:ae:df:14:3f:
                    af:0d:62:bd:08:60:f4:b8:6e:d3:35:f8:1b:31:b6:
                    87:f2:98:c4:5d:ce:3b:d2:ec:4d:95:d4:29:98:2c:
                    f6:ab:3f:05:6e:02:00:21:70:ed:11:ae:c5:b9:2b:
                    ad:ab:e2:13:48:b6:0e:a2:dd:8a:3a:d0:be:d8:d3:
                    a6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:38:DE:BC:E5:B6:2F:D7:FF:19:AA:5D:7D:35:D0:4A:10:76:47:B6
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/3136382e3233322e3130322e302f32332d3234203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dc:8c:be:69:10:d1:7b:b6:d8:71:93:c6:df:a0:54:39:4d:65:
         09:04:ba:e7:ff:55:a9:fb:93:46:2a:03:2f:a0:16:c4:62:b1:
         1e:1c:3b:4e:16:7c:61:5f:30:b3:b8:59:36:f2:83:75:6c:8e:
         35:4b:fb:23:a6:ef:28:9e:f0:90:a1:f1:6b:09:fa:6d:8a:a4:
         e6:4b:56:da:91:3f:4e:3b:b5:6a:16:fd:55:cd:6e:85:a9:6a:
         02:b2:4c:ce:ef:0c:c2:2a:51:bc:2f:ba:85:23:84:26:b3:76:
         85:e9:21:fd:cc:17:6d:ca:1d:b9:bb:2c:c7:d1:31:fb:8b:5e:
         d7:af:5f:e7:df:a5:3f:7d:b8:eb:86:3d:3a:1c:2c:be:4a:f9:
         bc:48:aa:f8:9e:17:28:52:4f:de:bf:dc:34:ce:b0:38:91:08:
         e3:d9:90:b5:13:e0:d7:4c:6b:c7:ed:e4:ce:b6:8b:6d:21:6f:
         f2:0e:50:0a:e8:59:76:61:44:3c:a5:7f:a3:2c:64:ac:15:03:
         d9:1f:c5:21:93:25:8b:cb:5f:aa:67:31:5f:4e:2a:5e:11:fe:
         9a:0a:b3:7b:f2:e7:29:02:48:8b:b4:86:61:8a:7f:1c:0a:2a:
         07:22:dd:c4:08:6e:55:56:5f:59:ba:9f:8d:67:0d:6e:05:63:
         04:99:e8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----