Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3131372e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3234322e3131372e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          CIZPc+C1VeNcavZ4rDTEPtsYL0VL9slNfTv6RqZs4jw=
Subject key identifier:   76:90:C8:7F:F0:79:E9:54:C6:DC:A4:83:A4:17:2E:D3:A3:BA:51:6F
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       3E54C57E9740E09512E90647BC84B9608161EE5B
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3131372e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:14:25 +0000
ROA not before:           Tue 05 Mar 2024 18:09:25 +0000
ROA not after:            Tue 04 Mar 2025 18:14:25 +0000
asID:                     262191
IP address blocks:        190.242.117.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:54:c5:7e:97:40:e0:95:12:e9:06:47:bc:84:b9:60:81:61:ee:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:25 2024 GMT
            Not After : Mar  4 18:14:25 2025 GMT
        Subject: CN=7690C87FF079E954C6DCA483A4172ED3A3BA516F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:90:fb:91:f7:af:8b:1d:9c:4d:3e:91:e5:
                    eb:18:92:56:27:06:dc:17:48:64:00:98:20:8b:8a:
                    70:81:71:e0:c2:24:7b:8f:6b:3a:d7:ba:0c:c0:bb:
                    f8:51:89:37:46:43:6b:1b:61:83:20:4d:2a:51:03:
                    b0:41:9c:db:16:f7:43:fb:18:c3:0e:de:13:40:11:
                    2e:d3:62:9c:38:72:28:7c:3c:b9:03:69:5f:da:f7:
                    ac:9a:f4:e8:75:ae:c9:1d:f8:b2:3b:08:18:96:d7:
                    46:22:13:36:ab:30:0d:61:6c:36:75:0c:42:fb:bc:
                    dd:27:f1:f4:8d:5d:f0:bd:1f:6f:42:37:5d:6a:66:
                    81:24:47:e7:d7:ee:38:93:92:d9:70:83:90:6a:f1:
                    4d:ff:e9:7f:b2:80:cd:18:8d:93:e5:7e:aa:78:c7:
                    45:83:86:aa:ed:e7:9c:9f:d5:c1:ef:9d:0b:2c:f9:
                    09:6d:fe:1b:7f:30:c3:a6:20:d9:5d:14:96:35:9d:
                    61:e0:77:a8:bf:33:69:7f:0e:72:18:37:3a:a8:30:
                    8b:06:36:73:db:06:0a:55:1b:ef:70:99:54:04:b0:
                    9a:88:ad:66:c9:4d:89:32:c5:97:32:93:c5:86:1c:
                    f9:ab:f1:1b:c8:9b:dd:26:13:a8:cb:96:59:c8:56:
                    96:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:90:C8:7F:F0:79:E9:54:C6:DC:A4:83:A4:17:2E:D3:A3:BA:51:6F
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3131372e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:62:13:ea:73:89:00:cd:be:1d:77:cc:20:05:53:14:93:1f:
         4e:5f:07:4b:0e:28:41:1a:ca:af:ec:2b:43:ea:6a:26:5c:44:
         5b:68:78:ba:43:96:57:cd:25:5f:05:73:a5:e6:c8:eb:f7:19:
         b5:34:6c:bb:6f:51:ed:5e:51:91:01:0f:8b:aa:08:2d:96:31:
         b6:26:46:04:88:b8:b2:26:74:ea:9a:42:13:bd:5e:35:2a:97:
         d5:bc:16:54:52:20:95:a9:d0:f3:6e:81:77:ee:68:8d:37:7f:
         b5:ff:8f:d6:4c:ae:12:d0:57:e5:fe:bb:12:2d:20:75:bf:fa:
         e2:f3:8b:e1:59:db:4c:c1:2c:57:bc:f8:73:75:b3:3d:0e:e1:
         58:06:03:ed:54:c5:49:2d:3c:50:92:bb:1c:d3:2f:48:a0:90:
         99:5e:2d:4c:35:1d:14:29:d5:14:3f:0c:2a:29:c0:e9:56:40:
         f7:0d:e2:de:80:ef:18:31:a9:63:8d:77:0a:b9:24:1e:40:26:
         ae:0e:dd:b9:1b:73:b8:35:fd:81:65:83:9f:28:d6:41:fb:55:
         e5:0c:f2:e1:ae:10:8d:a4:72:ac:c0:4f:c2:2c:e8:c5:33:ae:
         e6:ca:87:8e:d2:77:82:3c:ab:17:db:61:6b:9b:8e:df:10:11:
         9d:7c:b4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----