Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3131382e302f32342d3234203d3e203233353230.roa
File:                     3139302e3234322e3131382e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier:          w6H/acbH3c8p3TM8Q4cpNL9jHg42QQ1no6F3F+rJRaI=
Subject key identifier:   3E:35:57:31:2C:10:F1:97:B2:17:B4:60:85:7C:CB:D0:6D:0A:EF:9C
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       73226FFEDEEE9D826D4FBA505A06AD24253A2E8E
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3131382e302f32342d3234203d3e203233353230.roa
Signing time:             Tue 05 Mar 2024 18:14:49 +0000
ROA not before:           Tue 05 Mar 2024 18:09:49 +0000
ROA not after:            Tue 04 Mar 2025 18:14:49 +0000
asID:                     23520
IP address blocks:        190.242.118.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:22:6f:fe:de:ee:9d:82:6d:4f:ba:50:5a:06:ad:24:25:3a:2e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:49 2024 GMT
            Not After : Mar  4 18:14:49 2025 GMT
        Subject: CN=3E3557312C10F197B217B460857CCBD06D0AEF9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:78:dd:59:85:fb:6f:fc:d1:3f:fd:f0:94:3e:
                    91:5c:33:4f:9c:c4:5c:7a:2f:00:bc:c3:f0:a2:5c:
                    2d:45:99:e1:9a:4f:b9:b2:29:bf:2a:f7:8c:e4:51:
                    2b:a2:83:a7:40:28:05:83:b5:6a:52:69:a9:f9:02:
                    2d:d2:44:75:1f:e2:51:ce:eb:10:ed:37:bd:cb:96:
                    bb:3d:72:93:83:02:3c:9d:74:ca:2e:46:8e:13:a9:
                    ce:51:e6:0b:51:fa:c0:5d:5d:bd:09:59:5a:ab:a4:
                    17:b9:8e:68:3e:0d:1e:76:95:49:18:6a:03:0d:83:
                    bf:33:91:e1:13:a2:f2:7f:a0:ae:43:4b:88:4c:44:
                    01:bc:de:2a:b7:29:0f:25:ec:4d:56:51:6d:d2:d4:
                    6b:88:85:99:b4:3f:33:26:57:07:79:e6:19:e7:75:
                    eb:e5:2f:a2:67:89:78:7e:8e:cb:1d:f9:26:ee:ee:
                    2a:5d:be:a9:7e:63:ae:a2:81:fd:16:b0:39:89:e1:
                    d9:17:fd:1c:ab:b0:73:c9:0c:60:0c:64:e0:12:3c:
                    62:76:41:ee:15:02:58:4e:53:a1:22:07:36:0a:e6:
                    75:a4:f0:50:95:42:5b:2d:d9:b2:d7:c7:6b:4b:80:
                    69:61:4d:1f:06:3f:bc:c4:d8:95:33:62:cd:33:a6:
                    08:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:35:57:31:2C:10:F1:97:B2:17:B4:60:85:7C:CB:D0:6D:0A:EF:9C
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3131382e302f32342d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:9a:a8:b4:08:51:2d:40:d3:49:61:44:a1:ff:7e:8a:ac:ff:
         7e:d2:b8:61:2a:5d:22:9f:5c:0e:6c:70:46:08:3a:fe:7a:d4:
         74:f4:b1:21:84:78:c6:bf:57:25:f8:4d:1a:d3:ed:64:a0:4f:
         39:d4:88:9d:07:4e:41:22:ba:42:c3:08:34:8b:e7:eb:70:bc:
         a8:6c:b1:8e:53:6f:36:fe:2d:1f:14:fb:f9:34:9d:77:6e:14:
         4f:93:4b:d2:0d:95:1f:87:5e:04:4c:fb:60:fa:ba:2e:21:bb:
         5d:d5:f1:ab:95:a9:6b:5d:ad:e2:60:92:84:cf:9c:b3:f6:18:
         9c:7f:f6:f1:33:32:59:6c:51:db:d3:90:35:02:7d:e2:2b:12:
         c0:e2:2f:d3:7b:36:6d:d9:5e:c3:77:86:57:0e:d8:77:a4:72:
         54:25:38:7f:73:03:ba:d0:e8:4f:42:0c:45:82:ef:a0:03:fe:
         db:b5:ae:02:e4:eb:f6:a8:5c:ab:28:ad:4d:bd:35:f9:44:2c:
         a9:81:21:a2:7d:7d:fe:03:d1:87:79:92:6b:c1:1e:e6:c1:44:
         ff:d5:01:a1:9f:2a:c2:64:9b:7f:46:c8:38:69:c9:0b:3f:53:
         36:d2:d7:b9:3e:09:c0:cc:03:80:e3:85:6c:b9:2b:e7:1d:60:
         cb:f1:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----