Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132302e302f32342d3234203d3e2037313535.roa
File:                     3139302e35322e3132302e302f32342d3234203d3e2037313535.roa (raw, json)
Hash identifier:          qPIshRTsTb04ugiYwH0hdZIOz/E42Wfh/+zGSUEDEKY=
Subject key identifier:   6E:86:6D:D8:63:0C:AA:C9:52:11:E9:F8:71:8C:41:86:82:25:53:51
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       17B26D7C30B913733835C6F75BABD585A203A776
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132302e302f32342d3234203d3e2037313535.roa
Signing time:             Wed 13 Mar 2024 19:40:02 +0000
ROA not before:           Wed 13 Mar 2024 19:35:02 +0000
ROA not after:            Wed 12 Mar 2025 19:40:02 +0000
asID:                     7155
IP address blocks:        190.52.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 12 Sep 2024 16:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b2:6d:7c:30:b9:13:73:38:35:c6:f7:5b:ab:d5:85:a2:03:a7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Mar 13 19:35:02 2024 GMT
            Not After : Mar 12 19:40:02 2025 GMT
        Subject: CN=6E866DD8630CAAC95211E9F8718C418682255351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0e:99:83:d0:20:22:92:7d:66:12:d7:d3:f1:
                    ec:84:e8:a1:ed:5e:d9:47:fa:cb:c7:5f:04:e4:e8:
                    64:ef:96:68:0d:74:b6:81:e1:d1:50:f6:92:e6:ca:
                    4e:67:2b:76:24:74:f8:87:bf:1c:38:46:f3:ed:85:
                    3a:d1:aa:1f:d6:f6:b3:d6:6f:20:85:b0:ae:c5:0e:
                    3c:02:77:c1:4f:79:9d:43:9a:a1:37:8c:72:ff:71:
                    99:53:14:12:3d:fb:34:18:de:d2:bf:9a:4c:63:09:
                    49:33:12:5d:ca:f7:5c:d1:a8:e9:ab:40:78:d5:2a:
                    b2:72:c2:1b:fe:1d:39:93:ed:5e:8a:7a:4b:7c:3d:
                    fb:02:4b:c7:4b:07:e3:c4:c5:b2:10:a5:80:ff:72:
                    ac:64:2e:59:13:ef:cd:c9:59:6c:39:01:dc:16:43:
                    3c:ac:0f:86:3c:e4:ae:5a:74:1e:4f:fd:25:6a:a5:
                    df:8a:25:bd:a0:f3:b8:32:a3:6a:83:53:75:e2:b4:
                    f5:f8:a7:fd:01:55:e6:6c:1c:5a:fb:c9:af:a4:fa:
                    dc:78:aa:4c:17:ce:df:ae:85:77:01:7f:2b:f3:4a:
                    33:29:40:7a:99:1b:b4:62:94:1e:95:82:1a:65:33:
                    20:3e:82:cb:98:9b:c1:dd:94:5a:ef:a5:48:ff:bc:
                    22:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:86:6D:D8:63:0C:AA:C9:52:11:E9:F8:71:8C:41:86:82:25:53:51
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3132302e302f32342d3234203d3e2037313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:f7:9f:cc:b2:2c:84:26:00:1d:1c:22:f0:71:fd:c5:d0:97:
         72:18:4e:da:21:a1:2f:eb:3d:4b:d9:94:5c:ec:d4:92:58:46:
         15:53:0d:8b:45:af:40:1e:df:e7:35:0d:9c:08:8d:27:51:f9:
         d7:60:19:0d:b3:97:bc:5b:2e:a1:70:ef:7a:ee:46:ff:20:54:
         a5:d8:20:2a:55:e8:21:6c:27:a4:15:cd:8e:83:ed:9f:25:f0:
         86:34:30:ce:35:f6:13:35:f5:34:9f:1e:b2:8b:fb:1c:79:25:
         57:f5:67:f9:e8:50:3e:f9:1a:42:cb:42:0f:c7:54:7e:6b:1f:
         d8:74:4b:4a:9c:94:e9:44:ac:4c:03:61:66:46:0e:ef:21:8b:
         f6:d4:74:57:b3:c9:ce:90:be:64:5f:3e:a6:15:15:31:8c:c8:
         de:9c:25:70:3a:c1:bd:f7:93:37:69:fa:d0:ab:2c:73:c0:55:
         a3:11:08:2d:58:4c:d0:91:02:5a:34:12:e0:83:e0:d9:f7:6e:
         4e:bf:4e:69:e0:13:89:3f:7b:2c:1e:42:f2:cc:dc:3a:f2:0f:
         a1:c0:f9:c3:f4:ec:a7:4c:08:46:8b:35:bb:48:27:61:5f:f8:
         7c:c5:c1:6d:a2:2a:b4:51:7c:2a:12:01:2c:d6:4f:15:6c:95:
         1a:02:4b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----