Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130362e302f32342d3234203d3e20323633323338.roa
File:                     3139302e3234322e3130362e302f32342d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          Ti+S/GTNj9s3NueffuiibWg5ev7mBjqkMgQx2gxP90s=
Subject key identifier:   57:97:A6:44:59:B7:2C:4C:30:3C:3B:C3:26:54:A9:A7:CA:0A:7C:90
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       2135B8933D0151967208D4072EF1AE47C97B0115
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130362e302f32342d3234203d3e20323633323338.roa
Signing time:             Tue 05 Mar 2024 18:14:42 +0000
ROA not before:           Tue 05 Mar 2024 18:09:42 +0000
ROA not after:            Tue 04 Mar 2025 18:14:42 +0000
asID:                     263238
IP address blocks:        190.242.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:35:b8:93:3d:01:51:96:72:08:d4:07:2e:f1:ae:47:c9:7b:01:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:42 2024 GMT
            Not After : Mar  4 18:14:42 2025 GMT
        Subject: CN=5797A64459B72C4C303C3BC32654A9A7CA0A7C90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f7:3b:64:f8:9a:86:7c:42:8d:70:e6:93:ae:
                    54:bc:cb:f9:ef:1d:12:04:27:f0:31:f1:59:9f:1b:
                    87:a0:23:fc:d6:42:6f:bc:0e:b2:57:f8:51:90:c8:
                    c5:1a:b4:1d:66:d0:d6:83:69:20:a1:45:30:91:d7:
                    1c:66:b0:7d:7f:e4:d6:79:77:5a:fc:63:6a:5e:e9:
                    d5:0b:f1:81:32:93:1c:07:c7:23:65:87:c6:4a:c2:
                    c4:80:1c:0b:62:40:9e:a8:ed:ea:06:04:4b:fd:1e:
                    1e:11:d6:1f:4e:76:e4:06:c9:fd:99:6e:55:ee:5b:
                    0a:d2:e8:a0:fc:3b:57:10:e6:9c:e0:4d:04:f4:44:
                    35:ae:12:60:99:6a:63:1a:7d:2d:f6:bb:89:ea:e8:
                    c6:f2:e9:db:f1:60:04:9e:88:58:6f:cb:6c:5c:07:
                    27:c0:53:8e:8e:0d:50:79:a2:d4:bc:9c:0b:13:55:
                    0a:fb:84:7c:16:19:24:c3:85:90:6e:dc:69:7f:07:
                    22:32:fc:06:82:95:82:14:38:10:cd:ff:9b:c8:ab:
                    bf:27:b3:b3:c0:6d:9c:51:de:8e:46:eb:a0:eb:4e:
                    3c:cf:56:7b:af:e6:b7:0e:96:10:2e:72:1e:93:bf:
                    92:0b:3c:2a:a3:57:84:96:68:3f:6c:0a:9f:85:19:
                    9a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:97:A6:44:59:B7:2C:4C:30:3C:3B:C3:26:54:A9:A7:CA:0A:7C:90
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130362e302f32342d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:1a:36:31:ba:75:83:71:98:3c:f9:ea:39:33:8f:ec:e8:6d:
         36:b6:b7:ce:b5:fd:2c:e4:fe:79:56:65:4d:2f:a0:b1:5b:cd:
         f0:ce:33:21:a4:da:d3:c4:af:44:bf:fb:f7:89:48:dc:34:44:
         6b:e2:af:68:f6:eb:4b:81:57:a1:5d:d1:b8:49:c6:b2:7b:f8:
         c7:ef:7f:10:2e:36:cb:0a:e1:cc:3e:c0:c4:19:f7:a2:1d:e1:
         83:b8:21:8c:aa:11:77:78:eb:d8:65:62:c8:a5:86:18:14:dc:
         0e:bf:55:2c:ad:25:da:6b:c7:bc:12:aa:37:a3:b9:d3:5d:e2:
         27:10:91:b7:c8:a6:f8:1e:01:58:f9:c7:f0:5f:ba:45:ac:39:
         2b:56:9d:98:d9:6d:87:59:3b:1c:1d:71:08:47:e2:f3:0f:3b:
         d6:57:13:96:ba:7b:bc:33:e2:81:0b:78:56:6c:ef:e2:11:53:
         82:b6:04:ce:51:aa:31:6d:c3:20:fe:b0:a8:15:45:85:75:4c:
         22:cc:c8:de:72:b6:3e:6f:60:d2:c4:6e:35:3d:94:03:ba:fd:
         b7:23:a0:b7:55:28:77:28:f4:35:35:c9:ab:ac:4a:6b:a9:9e:
         42:b4:22:03:8d:11:e5:81:71:59:0e:fe:67:e0:d6:cb:26:ce:
         62:6b:4d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----