Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e382e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3130392e382e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          z1+MW9ba9KsYcEYFQaiLocFlysbu6YkwTunjor5LIqw=
Subject key identifier:   14:EA:02:EC:8F:CB:E8:3F:27:3E:B0:CD:22:0C:33:46:78:B0:2D:82
Certificate issuer:       /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial:       656BF366D062D249BC3FCBD4A0DAB3A4AA30AE40
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e382e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:08:43 +0000
ROA not before:           Tue 05 Mar 2024 18:03:43 +0000
ROA not after:            Tue 04 Mar 2025 18:08:43 +0000
asID:                     262191
IP address blocks:        190.109.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 14:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6b:f3:66:d0:62:d2:49:bc:3f:cb:d4:a0:da:b3:a4:aa:30:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
        Validity
            Not Before: Mar  5 18:03:43 2024 GMT
            Not After : Mar  4 18:08:43 2025 GMT
        Subject: CN=14EA02EC8FCBE83F273EB0CD220C334678B02D82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:53:c9:65:b4:d1:e0:32:62:97:b7:7f:07:7c:
                    6f:6a:bb:fa:fd:d8:1b:ee:04:1d:4b:59:d3:3f:bc:
                    74:88:39:4d:ee:f4:a2:37:14:44:2f:8b:7f:2c:5b:
                    fd:f5:1b:be:99:75:81:02:05:fb:89:8a:c6:4e:6f:
                    22:f8:a1:4e:47:b4:9d:b3:cf:ff:15:a9:09:67:a8:
                    0d:85:a6:d4:7e:94:34:82:63:1e:f0:f3:39:77:93:
                    2c:76:c6:97:fd:09:24:9d:17:09:d2:f1:03:dd:fb:
                    ca:e3:5d:fe:61:97:e2:99:7d:b5:a2:97:bf:53:0d:
                    29:9c:bd:d8:72:0d:4b:1c:71:af:90:b9:6a:05:af:
                    16:7f:86:65:3c:51:9c:d5:5e:f4:6a:63:f4:5b:6b:
                    63:2e:a7:a8:a9:f6:4b:03:93:e8:aa:8e:07:cf:29:
                    2f:87:35:4f:24:40:0f:83:72:39:d3:fb:67:3c:39:
                    39:62:49:54:3d:18:d8:39:21:05:4a:69:fe:69:cd:
                    12:a3:1a:35:32:90:d5:18:f1:18:45:2a:7f:3e:d5:
                    27:89:d9:1b:84:18:f3:c7:2b:12:2d:a7:53:df:58:
                    aa:64:19:fa:f2:03:0c:e0:7d:8b:9b:0a:3f:f6:70:
                    88:2b:b7:0c:3e:07:39:81:d2:7c:55:ca:0e:07:32:
                    5a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EA:02:EC:8F:CB:E8:3F:27:3E:B0:CD:22:0C:33:46:78:B0:2D:82
            X509v3 Authority Key Identifier:
                keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e382e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:96:35:53:7d:86:9f:0b:02:1d:6c:56:b5:62:29:12:92:2e:
         0d:58:26:6b:24:07:00:ba:0b:ab:bd:16:21:a7:40:7b:80:b3:
         8d:fd:3b:85:f1:bb:13:76:aa:67:5c:0d:f2:0d:26:05:92:92:
         da:69:e5:3d:05:1c:2c:b6:f7:21:ef:26:53:0a:49:e7:0c:66:
         c1:16:5e:f3:d5:fd:29:f1:c9:dc:8e:a5:3f:43:f6:93:49:ea:
         0d:4e:47:f2:0e:cd:85:31:01:22:18:c2:2b:73:92:57:f9:9c:
         f2:95:0e:c4:fe:df:09:45:64:15:91:0e:c7:4b:6f:43:a3:fb:
         18:5f:e1:5d:5a:eb:35:b2:ab:dc:fa:d6:7a:fb:23:a2:8f:5f:
         6c:94:7a:a7:8a:46:1d:1f:28:9c:0d:e7:18:2f:b0:d1:86:50:
         8a:d9:39:13:b2:63:d5:ef:3f:32:f5:07:93:e8:50:7c:a3:e6:
         04:44:95:9e:ae:2b:99:4a:06:6b:4e:f0:d8:ce:77:93:96:06:
         d0:bc:f0:8d:e4:d2:e5:04:16:1e:64:77:68:c2:3f:1d:60:b5:
         35:db:f8:99:60:7b:a3:f9:a3:98:dd:c5:7e:d5:44:0b:ef:78:
         da:21:b1:3a:e2:bf:5b:b1:99:d2:90:ff:53:c8:54:18:03:6a:
         17:e7:a7:c9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZWvzZtBi0km8P8vUoNqzpKowrkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTIwRkU4QTZFMzUyQzlDOUVDOUI0QzdDRkZGRjc3QjMy
MzkzNkMxNDAeFw0yNDAzMDUxODAzNDNaFw0yNTAzMDQxODA4NDNaMDMxMTAvBgNV
BAMTKDE0RUEwMkVDOEZDQkU4M0YyNzNFQjBDRDIyMEMzMzQ2NzhCMDJEODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxU8lltNHgMmKXt38HfG9qu/r9
2BvuBB1LWdM/vHSIOU3u9KI3FEQvi38sW/31G76ZdYECBfuJisZObyL4oU5HtJ2z
z/8VqQlnqA2FptR+lDSCYx7w8zl3kyx2xpf9CSSdFwnS8QPd+8rjXf5hl+KZfbWi
l79TDSmcvdhyDUscca+QuWoFrxZ/hmU8UZzVXvRqY/Rba2Mup6ip9ksDk+iqjgfP
KS+HNU8kQA+DcjnT+2c8OTliSVQ9GNg5IQVKaf5pzRKjGjUykNUY8RhFKn8+1SeJ
2RuEGPPHKxItp1PfWKpkGfryAwzgfYubCj/2cIgrtww+BzmB0nxVyg4HMloJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUFOoC7I/L6D8nPrDNIgwzRniwLYIwHwYDVR0j
BBgwFoAUog/opuNSycnsm0x8//93syOTbBQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QjMzOTE2NUZDMjkyQUM5RDEzMjZEQ0E3OUIwNUYxN0Qz
OUY4Nzg1MDVDRjMxNkJCNzA2NTA2RjBBQUJERkY1LzAvQTIwRkU4QTZFMzUyQzlD
OUVDOUI0QzdDRkZGRjc3QjMyMzkzNkMxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMjBGRThBNkUzNTJDOUM5RUM5
QjRDN0NGRkZGNzdCMzIzOTM2QzE0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUIzMzkxNjVGQzI5MkFDOUQxMzI2RENBNzlCMDVGMTdEMzlGODc4NTA1
Q0YzMTZCQjcwNjUwNkYwQUFCREZGNS8wLzMxMzkzMDJlMzEzMDM5MmUzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjMxMzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5tCDAN
BgkqhkiG9w0BAQsFAAOCAQEAPZY1U32GnwsCHWxWtWIpEpIuDVgmayQHALoLq70W
IadAe4Czjf07hfG7E3aqZ1wN8g0mBZKS2mnlPQUcLLb3Ie8mUwpJ5wxmwRZe89X9
KfHJ3I6lP0P2k0nqDU5H8g7NhTEBIhjCK3OSV/mc8pUOxP7fCUVkFZEOx0tvQ6P7
GF/hXVrrNbKr3PrWevsjoo9fbJR6p4pGHR8onA3nGC+w0YZQitk5E7Jj1e8/MvUH
k+hQfKPmBESVnq4rmUoGa07w2M53k5YG0LzwjeTS5QQWHmR3aMI/HWC1Ndv4mWB7
o/mjmN3FftVEC+942iGxOuK/W7GZ0pD/U8hUGANqF+enyQ==
-----END CERTIFICATE-----