Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/3139302e3132332e36362e302f32342d3234203d3e20323731383133.roa
File:                     3139302e3132332e36362e302f32342d3234203d3e20323731383133.roa (raw, json)
Hash identifier:          0wR61BOZosk4BMEpDyNOGdnrDKzgE5E7zLla5MxxQlQ=
Subject key identifier:   E9:A2:39:E4:3D:ED:C1:05:84:2C:F2:4E:8E:E1:7F:3B:E0:70:64:56
Certificate issuer:       /CN=921935EDD67E9C1816E703F1DABFFBF86CFA1B78
Certificate serial:       12624470CF7CE1C7C4609A2A1074AEFE0DD7FB48
Authority key identifier: 92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/3139302e3132332e36362e302f32342d3234203d3e20323731383133.roa
Signing time:             Tue 05 Mar 2024 17:51:22 +0000
ROA not before:           Tue 05 Mar 2024 17:46:22 +0000
ROA not after:            Tue 04 Mar 2025 17:51:22 +0000
asID:                     271813
IP address blocks:        190.123.66.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 25 Sep 2024 14:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:62:44:70:cf:7c:e1:c7:c4:60:9a:2a:10:74:ae:fe:0d:d7:fb:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921935EDD67E9C1816E703F1DABFFBF86CFA1B78
        Validity
            Not Before: Mar  5 17:46:22 2024 GMT
            Not After : Mar  4 17:51:22 2025 GMT
        Subject: CN=E9A239E43DEDC105842CF24E8EE17F3BE0706456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:55:30:f8:23:17:9a:c9:ad:f2:ca:6e:6d:df:
                    37:5e:77:4c:98:a1:17:43:e5:80:9d:fb:73:9c:c5:
                    53:a2:c4:c9:1b:22:8d:29:da:6a:42:7a:f6:f5:e4:
                    53:c0:db:4d:c7:10:a3:8a:69:11:91:d6:95:3f:20:
                    99:cd:1e:24:a0:1b:a3:d7:71:2e:90:96:31:ec:98:
                    d1:34:aa:88:36:76:67:bc:34:4a:69:f7:a1:b5:71:
                    30:7d:79:42:24:1b:fb:dd:98:92:9a:5e:cf:71:54:
                    54:19:3e:25:1a:08:80:31:66:3e:e2:58:b5:c0:c9:
                    6e:15:74:25:37:36:b4:5a:b1:74:59:82:fb:d8:4f:
                    1e:57:0b:5d:10:98:c4:71:09:18:0a:f3:c3:e6:d9:
                    75:0d:ec:cf:6d:5d:ae:b1:7e:bb:30:7b:69:f7:19:
                    30:3c:d0:f9:0f:43:a2:5a:37:52:de:be:df:b0:f9:
                    3c:dd:cd:8e:93:94:74:b9:1b:12:ab:70:06:5f:01:
                    3f:73:c7:e5:bd:26:f1:b8:6d:d3:c6:d2:01:47:db:
                    b5:a4:c4:03:13:58:dd:7b:97:ba:1f:06:89:93:d6:
                    b9:33:2a:a2:e3:d5:42:cf:99:b5:1a:63:7f:0d:c6:
                    73:ab:35:6a:68:cc:fe:e8:4d:c2:8d:0f:7a:87:08:
                    cc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A2:39:E4:3D:ED:C1:05:84:2C:F2:4E:8E:E1:7F:3B:E0:70:64:56
            X509v3 Authority Key Identifier:
                keyid:92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/3139302e3132332e36362e302f32342d3234203d3e20323731383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:50:82:9c:29:c7:32:00:c9:ac:32:14:5c:fd:bb:0b:88:d8:
         b2:2d:a6:aa:79:82:e8:4e:d5:5a:4f:92:1f:c5:1a:77:48:b6:
         44:b1:89:40:02:2e:c0:87:08:f1:c1:dd:a2:ce:89:7d:fe:3c:
         95:49:26:d7:c4:13:87:04:99:13:c8:e6:96:88:a2:32:85:23:
         95:75:49:d6:bf:9c:c8:ba:84:e6:de:fd:7c:82:ea:7f:b8:0b:
         4e:de:f2:26:7a:c2:dc:12:42:99:c1:0a:4f:d1:2c:33:41:ac:
         52:07:4c:6b:5d:25:e6:04:11:02:ad:31:39:5f:83:14:bf:ab:
         75:03:75:1b:c6:16:a8:e4:d5:a1:10:83:b0:6f:a1:7e:cb:65:
         ed:e7:98:49:48:c6:f8:64:63:a2:89:28:93:ad:88:dd:d2:e8:
         78:8c:39:df:1d:db:5c:c0:f0:11:1c:90:fe:a8:76:b9:7d:a1:
         78:37:10:b1:26:ae:f4:7c:2f:6d:fb:d7:08:3e:09:de:82:57:
         41:27:d0:70:02:ad:eb:33:ad:ac:74:3e:45:3a:3a:1d:4d:66:
         31:9c:98:e1:6c:e0:19:46:f1:44:b2:68:21:e6:aa:7b:55:2b:
         ed:60:10:68:a2:c3:b9:24:3c:66:93:5c:b3:0b:d0:4c:b2:bf:
         9a:85:a7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----