Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3139322e302f32312d3231203d3e20323632313931.roa
File:                     3230302e3131322e3139322e302f32312d3231203d3e20323632313931.roa (raw, json)
Hash identifier:          W9fUTWN/9xZGMlKCp5sOznnoBcgVHZC8I2fo9xDBlws=
Subject key identifier:   76:27:89:C9:65:34:81:0D:1B:64:2A:D8:71:5A:B7:7E:ED:F5:A9:0A
Certificate issuer:       /CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
Certificate serial:       1494C92F2FB2796415868DC29458981BBDA7E255
Authority key identifier: 85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3139322e302f32312d3231203d3e20323632313931.roa
Signing time:             Mon 28 Oct 2024 20:45:00 +0000
ROA not before:           Mon 28 Oct 2024 20:40:00 +0000
ROA not after:            Mon 27 Oct 2025 20:45:00 +0000
asID:                     262191
IP address blocks:        200.112.192.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 13:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:94:c9:2f:2f:b2:79:64:15:86:8d:c2:94:58:98:1b:bd:a7:e2:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
        Validity
            Not Before: Oct 28 20:40:00 2024 GMT
            Not After : Oct 27 20:45:00 2025 GMT
        Subject: CN=762789C96534810D1B642AD8715AB77EEDF5A90A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:68:aa:13:4f:da:0d:00:54:d4:52:a9:3b:46:
                    0e:6e:38:14:57:97:a7:ff:c4:e3:9f:50:af:31:b6:
                    0e:60:ae:6b:4f:a7:89:81:cf:b2:38:e5:9b:ff:3b:
                    53:31:9b:91:10:9d:59:65:eb:dd:c2:1c:de:50:f0:
                    96:fa:3d:3c:bd:38:b7:dd:71:c4:9b:21:4b:d4:b2:
                    07:b4:11:50:88:56:fd:b6:21:26:2a:c7:c6:a8:9d:
                    75:fe:91:9d:22:d2:21:d9:55:17:3b:47:c7:e1:57:
                    bb:4c:b8:a7:9f:53:26:d2:3e:2b:a5:7a:72:90:52:
                    34:25:0c:f7:05:7e:e6:69:c6:ce:ea:ba:34:d1:64:
                    57:19:bf:14:0d:cd:79:b4:c1:9b:52:47:19:2e:ff:
                    06:6d:29:c9:54:90:c3:95:d2:f6:f0:f3:fb:94:4d:
                    c7:4b:c9:61:06:d4:22:4b:f1:47:0b:a0:71:cd:17:
                    6f:55:22:63:9f:bf:a7:be:2c:11:8b:b9:74:4d:10:
                    44:87:f9:23:0d:a4:7f:f4:7c:55:0c:1a:dd:ac:32:
                    de:73:74:8f:b9:fe:6a:e2:53:b2:e2:68:f8:c4:8f:
                    bc:3d:43:95:70:59:1d:f9:cc:b5:56:94:cb:12:73:
                    77:8a:ef:bb:49:74:1d:c0:43:af:3d:2a:2c:35:f0:
                    a2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:27:89:C9:65:34:81:0D:1B:64:2A:D8:71:5A:B7:7E:ED:F5:A9:0A
            X509v3 Authority Key Identifier:
                keyid:85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/3230302e3131322e3139322e302f32312d3231203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7f:e8:e2:c4:2d:54:96:08:5d:3e:b2:db:8e:a7:6e:49:1b:84:
         30:47:6f:26:56:62:c8:15:77:5c:5f:26:a0:35:df:32:26:3a:
         29:33:cf:8c:65:4b:75:05:07:d5:99:e5:95:94:b6:62:36:20:
         ea:04:cd:b1:97:38:0d:ba:cf:4e:ec:4b:ba:43:d3:7a:a3:4b:
         6c:f9:45:a3:84:c3:f3:39:5f:aa:2c:9d:5f:da:4c:bb:dd:1d:
         19:3c:a4:be:75:43:e4:6a:e8:4f:a4:86:ac:0f:2f:12:ac:fe:
         bd:a2:56:68:dd:26:21:42:17:3a:8d:98:72:cf:1e:d2:16:85:
         24:1e:d7:ea:eb:b4:d1:d0:28:c6:13:48:f9:3a:29:0b:f6:1e:
         7f:b7:fb:d0:e0:c3:0c:7b:8a:2e:6e:38:b0:e5:29:ef:15:1d:
         97:0f:26:16:52:dc:94:6f:c2:5a:dc:db:2d:92:43:b9:f0:4c:
         6f:93:05:5e:c5:4f:6d:3a:07:90:9b:fa:95:00:a1:76:fa:b2:
         49:ac:54:a7:e0:e9:d2:99:39:cc:68:8c:73:55:75:90:05:ad:
         35:71:19:50:9a:97:34:66:c2:91:e5:20:d7:19:4c:aa:e4:19:
         58:63:a9:48:5f:95:1c:3b:a5:bc:8d:65:77:34:fe:6a:b6:49:
         39:c6:8c:91
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUFJTJLy+yeWQVho3ClFiYG72n4lUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVCN0Q5Njg1QkE4REEyRDZGNDgxQzMyMzYxMUVENjQ5
NDRGNjI3MzAeFw0yNDEwMjgyMDQwMDBaFw0yNTEwMjcyMDQ1MDBaMDMxMTAvBgNV
BAMTKDc2Mjc4OUM5NjUzNDgxMEQxQjY0MkFEODcxNUFCNzdFRURGNUE5MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMaKoTT9oNAFTUUqk7Rg5uOBRX
l6f/xOOfUK8xtg5grmtPp4mBz7I45Zv/O1Mxm5EQnVll693CHN5Q8Jb6PTy9OLfd
ccSbIUvUsge0EVCIVv22ISYqx8aonXX+kZ0i0iHZVRc7R8fhV7tMuKefUybSPiul
enKQUjQlDPcFfuZpxs7qujTRZFcZvxQNzXm0wZtSRxku/wZtKclUkMOV0vbw8/uU
TcdLyWEG1CJL8UcLoHHNF29VImOfv6e+LBGLuXRNEESH+SMNpH/0fFUMGt2sMt5z
dI+5/mriU7LiaPjEj7w9Q5VwWR35zLVWlMsSc3eK77tJdB3AQ689Kiw18KINAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUdieJyWU0gQ0bZCrYcVq3fu31qQowHwYDVR0j
BBgwFoAUhbfZaFuo2i1vSBwyNhHtZJRPYnMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMTdFOTRFM0VDRkVBNzRCRUQ0MUZCQjMwNkE3MUIzQ0E4
RTcxN0ZGN0JBQjg2RjRDQjRCM0E1Q0Y3MDk5NjRDLzAvODVCN0Q5Njg1QkE4REEy
RDZGNDgxQzMyMzYxMUVENjQ5NDRGNjI3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUI3RDk2ODVCQThEQTJENkY0
ODFDMzIzNjExRUQ2NDk0NEY2MjczLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzE3RTk0RTNFQ0ZFQTc0QkVENDFGQkIzMDZBNzFCM0NBOEU3MTdGRjdC
QUI4NkY0Q0I0QjNBNUNGNzA5OTY0Qy8wLzMyMzAzMDJlMzEzMTMyMmUzMTM5MzIy
ZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPI
cMAwDQYJKoZIhvcNAQELBQADggEBAH/o4sQtVJYIXT6y246nbkkbhDBHbyZWYsgV
d1xfJqA13zImOikzz4xlS3UFB9WZ5ZWUtmI2IOoEzbGXOA26z07sS7pD03qjS2z5
RaOEw/M5X6osnV/aTLvdHRk8pL51Q+Rq6E+khqwPLxKs/r2iVmjdJiFCFzqNmHLP
HtIWhSQe1+rrtNHQKMYTSPk6KQv2Hn+3+9Dgwwx7ii5uOLDlKe8VHZcPJhZS3JRv
wlrc2y2SQ7nwTG+TBV7FT206B5Cb+pUAoXb6skmsVKfg6dKZOcxojHNVdZAFrTVx
GVCalzRmwpHlINcZTKrkGVhjqUhflRw7pbyNZXc0/mq2STnGjJE=
-----END CERTIFICATE-----