Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/3138312e3131342e3233322e302f32312d3231203d3e20323635373134.roa
File:                     3138312e3131342e3233322e302f32312d3231203d3e20323635373134.roa (raw, json)
Hash identifier:          a0dK0P9FzwcupCe/jQeMdjSWGBmYxWT5lL0HCrdEIxE=
Subject key identifier:   86:4B:57:39:82:8C:D7:5A:B1:8D:65:42:F1:5B:F7:B2:2C:48:39:4C
Certificate issuer:       /CN=942BABE0B62CFEB8749F1EBA716D62B61F58FE3B
Certificate serial:       6D7B9BE7BCC93A2CA49A6166BBB2DF7E5331D422
Authority key identifier: 94:2B:AB:E0:B6:2C:FE:B8:74:9F:1E:BA:71:6D:62:B6:1F:58:FE:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/3138312e3131342e3233322e302f32312d3231203d3e20323635373134.roa
Signing time:             Tue 11 Jun 2024 00:55:00 +0000
ROA not before:           Tue 11 Jun 2024 00:50:00 +0000
ROA not after:            Tue 10 Jun 2025 00:55:00 +0000
asID:                     265714
IP address blocks:        181.114.232.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Tue 11 Jun 2024 03:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:7b:9b:e7:bc:c9:3a:2c:a4:9a:61:66:bb:b2:df:7e:53:31:d4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942BABE0B62CFEB8749F1EBA716D62B61F58FE3B
        Validity
            Not Before: Jun 11 00:50:00 2024 GMT
            Not After : Jun 10 00:55:00 2025 GMT
        Subject: CN=864B5739828CD75AB18D6542F15BF7B22C48394C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c3:69:f2:cf:0e:71:95:e9:37:a3:bb:37:af:
                    af:bb:2d:1c:9a:27:51:43:73:c5:ef:8c:fd:d5:29:
                    61:e5:99:75:1e:71:37:58:36:81:82:d7:c6:a0:15:
                    f7:0a:b6:c7:26:7c:55:5a:1b:55:88:00:e1:06:b8:
                    6a:39:78:07:67:02:7a:3c:80:ae:5f:f6:55:c7:2f:
                    e1:02:b8:b6:0f:94:82:54:5a:0e:94:77:2b:4f:b9:
                    5d:5b:c9:6c:44:c9:72:8e:d6:f5:80:bd:16:f8:eb:
                    62:5c:5d:78:22:e3:98:d9:6a:b6:25:69:e2:55:f2:
                    36:4a:29:97:98:4d:35:c5:d9:c3:bf:b3:b6:6e:92:
                    80:0f:48:a8:e9:14:cf:cd:06:b4:a3:2e:2a:4b:89:
                    37:21:b9:49:20:d6:3f:97:f3:2d:06:47:4c:9c:b0:
                    84:5c:aa:3b:f9:f1:ee:3c:a1:4b:bb:a0:70:03:94:
                    32:82:9b:b9:6b:b5:b9:35:9c:ac:f0:cd:87:36:20:
                    61:37:16:7b:75:2d:45:b4:f4:c4:62:0b:4d:2b:ce:
                    ec:ef:68:6e:6f:37:76:d5:bf:c9:2b:23:16:ea:9a:
                    f4:fa:14:f7:05:0a:66:3e:19:c6:dc:4c:0a:35:38:
                    d8:00:5c:db:11:29:c0:81:01:38:fd:a1:9c:fa:59:
                    fb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4B:57:39:82:8C:D7:5A:B1:8D:65:42:F1:5B:F7:B2:2C:48:39:4C
            X509v3 Authority Key Identifier:
                keyid:94:2B:AB:E0:B6:2C:FE:B8:74:9F:1E:BA:71:6D:62:B6:1F:58:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/3138312e3131342e3233322e302f32312d3231203d3e20323635373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:d5:d0:e1:57:e5:a5:06:e1:73:e4:20:b1:af:de:e9:bd:08:
         ed:db:3b:a5:16:bb:e6:ac:94:8e:ed:c3:cd:72:71:44:18:dc:
         0e:3f:23:e6:8e:f2:c6:1c:f7:70:a9:9c:57:6e:94:e1:07:d4:
         f7:74:f3:8c:08:bb:6b:ec:2b:c9:dc:2e:d0:6e:d8:9e:76:4f:
         0b:d1:ba:11:fc:27:a2:55:0e:8e:ec:47:b6:e6:f0:a3:3a:0e:
         23:ce:eb:3c:fa:06:e0:5d:b3:be:ff:46:45:50:7e:d2:ac:84:
         a9:47:79:a6:41:28:87:b9:96:78:e9:2e:dc:88:0b:49:97:3c:
         57:6f:75:22:5b:b8:df:d2:83:e3:0e:53:50:eb:f0:57:04:8f:
         7f:43:27:b1:cf:2b:1b:1d:00:d9:bd:17:77:be:70:07:87:e0:
         4b:f4:1c:65:4e:cf:80:98:64:2c:c8:d6:08:08:f3:55:95:9f:
         43:4a:31:13:e2:52:5b:d0:d4:16:8e:8e:34:f5:80:7b:ad:ee:
         50:6e:e5:5d:20:35:15:d4:0d:81:0a:95:4e:70:35:9e:a0:0c:
         2a:53:60:54:0b:3a:7a:d4:ac:98:9e:64:4c:f5:7f:0f:19:04:
         00:aa:20:96:1c:27:d0:92:33:b9:77:5a:68:44:3e:a3:6e:08:
         08:a6:34:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----