Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e3131362e302e302f31362d3138203d3e203133343839.roa
File:                     3230302e3131362e302e302f31362d3138203d3e203133343839.roa (raw, json)
Hash identifier:          3UzO6D/puogJKJ7TdHbBNIItWLKT2Oo/95D9+qOlqvA=
Subject key identifier:   B5:02:86:00:AB:96:DA:51:CD:26:5D:3B:97:51:3C:97:35:73:58:A7
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       0821AF0C99E91CBB37495A379D59D9D97A201BDB
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e3131362e302e302f31362d3138203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:06:55 +0000
ROA not before:           Tue 05 Mar 2024 18:01:55 +0000
ROA not after:            Tue 04 Mar 2025 18:06:55 +0000
asID:                     13489
IP address blocks:        200.116.0.0/16 maxlen: 18

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:21:af:0c:99:e9:1c:bb:37:49:5a:37:9d:59:d9:d9:7a:20:1b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Mar  5 18:01:55 2024 GMT
            Not After : Mar  4 18:06:55 2025 GMT
        Subject: CN=B5028600AB96DA51CD265D3B97513C97357358A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:17:91:85:6e:cb:be:82:26:ab:aa:14:6a:5b:
                    d4:12:80:14:2f:82:0d:51:82:30:9e:58:2c:9e:4e:
                    aa:fb:1d:f7:8e:e4:a3:31:38:85:1f:9b:f4:82:78:
                    0d:b9:fd:4c:3d:3a:f5:13:13:a0:55:6b:d7:d3:ef:
                    da:00:3b:cd:d3:77:9e:bc:69:e5:a3:7d:81:f7:ac:
                    4b:5a:7f:06:ee:36:3f:6b:7c:bc:19:54:ac:83:ce:
                    ad:5f:b3:b3:3e:62:99:5f:01:5d:d3:85:74:cf:48:
                    f4:40:2a:c1:6e:51:9e:27:12:36:e4:ee:df:18:de:
                    ad:83:64:d0:1b:01:cc:fb:9b:17:43:75:63:35:34:
                    8d:06:b4:a4:03:97:6d:9c:df:6a:e0:c8:57:66:2e:
                    3f:88:62:9b:3a:a1:15:dc:12:62:d9:08:98:bb:a6:
                    b3:af:16:b8:99:da:65:22:63:b8:68:1e:ed:e0:b7:
                    52:8d:15:3f:64:35:9e:8a:6a:9d:e8:69:35:65:e4:
                    f4:2e:5e:9c:01:ad:0a:49:03:8a:0a:16:7c:c6:3c:
                    2d:46:65:2e:ef:d6:f9:79:af:b0:fd:26:e3:e0:13:
                    93:81:eb:38:cd:86:58:b8:93:ae:54:83:9b:2a:01:
                    e7:c0:ce:d5:d8:d6:32:8c:bf:40:e2:ee:8f:21:9e:
                    8d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:02:86:00:AB:96:DA:51:CD:26:5D:3B:97:51:3C:97:35:73:58:A7
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3230302e3131362e302e302f31362d3138203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.116.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:10:8b:e5:b8:a8:2f:3c:fe:ed:e5:49:9f:64:53:25:c7:e2:
         63:6f:19:b3:ab:1c:7a:79:cd:47:e4:cb:bd:e6:93:44:b4:db:
         f0:59:4e:73:3b:9b:8d:78:f0:02:ba:8e:14:99:e8:92:fb:86:
         ea:52:a2:63:4e:2c:cf:0e:79:f8:23:43:ec:8a:6e:58:cc:31:
         c8:80:28:ae:0a:18:ac:04:ee:1c:f1:12:7f:3c:a4:68:ea:4d:
         f4:2c:1f:6c:95:5b:2a:fc:e2:97:cf:e1:71:2e:44:5a:65:0c:
         2c:b4:db:18:79:08:89:b9:98:20:71:b3:e3:52:03:76:cf:bd:
         b1:af:fc:d5:6d:ba:65:cd:e3:80:47:cc:c7:f3:f0:df:2d:ad:
         04:fe:54:da:87:86:da:56:5f:ce:cb:eb:c9:49:a9:0e:06:6c:
         05:71:e9:c3:5d:ae:3a:e7:8f:76:36:16:d0:d8:33:e6:9c:d5:
         63:0e:c9:44:c1:a3:43:91:01:a1:2a:b0:eb:b0:58:93:cd:f5:
         1a:e2:ea:23:9c:d9:a6:03:a8:c1:63:59:e8:41:55:fd:61:0b:
         1c:ec:a8:c7:89:75:84:f6:58:7e:3f:b8:0b:2d:db:26:93:c3:
         5f:63:72:42:fe:4c:0d:27:c6:d8:df:64:c9:89:c1:ff:94:8b:
         1e:ef:48:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----