Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3132382e302f32342d3234203d3e20323632313931.roa
File:                     3139302e3234322e3132382e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          NBcTNfh8EaeE/hMqZ+y0IQ2QgdzdQiZnTxzqFk4PFdk=
Subject key identifier:   38:E6:20:2A:DD:83:7C:86:89:94:3C:4F:2E:DA:06:8B:35:3C:57:D3
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       6B58F51B674F8C262CF185961957EFFF2BDECC15
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3132382e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:14:24 +0000
ROA not before:           Tue 05 Mar 2024 18:09:24 +0000
ROA not after:            Tue 04 Mar 2025 18:14:24 +0000
asID:                     262191
IP address blocks:        190.242.128.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:58:f5:1b:67:4f:8c:26:2c:f1:85:96:19:57:ef:ff:2b:de:cc:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:24 2024 GMT
            Not After : Mar  4 18:14:24 2025 GMT
        Subject: CN=38E6202ADD837C8689943C4F2EDA068B353C57D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fd:f3:61:61:69:23:e8:da:a4:25:df:39:0a:
                    75:e0:a1:1a:fd:f6:d7:5b:25:13:d9:70:a6:b1:a0:
                    01:fe:ce:39:04:39:74:7a:45:e7:3b:20:85:81:29:
                    9f:11:8f:08:63:44:4c:ed:da:dc:66:f3:ff:e6:f5:
                    bc:12:00:6d:ea:75:b8:88:a6:83:31:74:86:f4:33:
                    3d:bf:70:e4:20:0a:2b:6b:81:b0:30:32:91:2d:a2:
                    96:f6:1d:35:c0:71:48:1a:b4:91:37:74:2a:3d:00:
                    d9:04:46:ef:e8:c4:0a:1c:d6:85:fc:2b:5a:1e:e5:
                    a1:40:c5:e9:86:b6:03:2b:e4:79:e6:6b:2c:da:9d:
                    f9:d6:fe:ac:b0:67:32:8c:62:77:1b:33:1c:81:d3:
                    70:95:07:7a:cf:b9:2d:d4:4e:0d:79:c8:2f:88:b6:
                    c1:30:07:03:30:ab:ec:2b:6b:f4:6b:53:e5:da:00:
                    ff:c0:c6:1c:77:46:cf:6f:82:76:45:b5:b1:85:18:
                    07:8a:3b:f0:45:b9:b3:94:7c:07:e2:7b:47:32:67:
                    23:54:e4:52:dc:64:d9:cc:27:8e:3c:e3:5b:b2:30:
                    3e:53:54:d1:b5:81:21:5c:0c:97:9e:8a:3e:4d:2e:
                    e7:54:8c:f7:49:8a:52:aa:a2:ea:dc:19:01:3f:e1:
                    c8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E6:20:2A:DD:83:7C:86:89:94:3C:4F:2E:DA:06:8B:35:3C:57:D3
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3132382e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:67:f7:de:02:3b:68:c6:ef:68:5a:00:64:5d:08:2f:8d:51:
         79:f9:11:32:69:64:3f:fb:cf:84:ee:f5:e8:6a:59:78:03:1d:
         a6:5f:33:b8:5c:9d:4a:b8:34:2d:cd:19:9b:45:ce:18:82:5f:
         37:1c:d5:52:49:3f:f9:f3:dc:cb:9d:cd:64:45:7c:1c:b4:67:
         2d:11:da:82:56:31:16:d8:a9:a1:5f:6a:a3:5c:fa:58:a5:56:
         60:28:3a:17:32:c3:e2:49:9b:55:c0:48:21:8e:eb:af:82:3a:
         9b:0f:36:3a:58:71:79:43:f2:5c:fc:0f:ba:71:64:1f:50:5a:
         4a:0b:50:6a:0d:ef:d7:03:bc:6b:a8:49:b3:54:81:88:51:2c:
         12:e0:a0:a0:17:cf:20:85:29:db:eb:7d:9c:1f:02:db:14:3c:
         54:0a:24:39:25:11:20:8d:07:c8:e1:32:a7:b6:9a:a8:18:94:
         2f:81:f8:83:f2:29:48:37:22:67:e8:e4:f5:68:4d:a0:78:68:
         15:33:5e:4a:5b:c4:3a:bd:74:9c:f7:5e:3f:23:b0:71:8a:48:
         10:25:c7:30:70:1e:81:09:a0:3b:c0:13:40:8a:d7:07:b6:6c:
         d8:17:f7:e9:1f:06:65:c1:a7:43:04:63:91:80:98:8a:94:91:
         af:36:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----