Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3136332e302f32342d3234203d3e203233353230.roa
File:                     3139302e3234322e3136332e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier:          0BWpv1avFNJ123D2BUT2yVTfOl2PIn1dRYfI0dTJlB8=
Subject key identifier:   67:6C:25:7A:8E:68:EB:0A:C6:18:A5:4A:14:9D:2D:1C:AE:26:E9:5B
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       467A4280628D764C3DFC33C78C4E981396A0C407
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3136332e302f32342d3234203d3e203233353230.roa
Signing time:             Wed 13 Mar 2024 21:50:00 +0000
ROA not before:           Wed 13 Mar 2024 21:45:00 +0000
ROA not after:            Wed 12 Mar 2025 21:50:00 +0000
asID:                     23520
IP address blocks:        190.242.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7a:42:80:62:8d:76:4c:3d:fc:33:c7:8c:4e:98:13:96:a0:c4:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar 13 21:45:00 2024 GMT
            Not After : Mar 12 21:50:00 2025 GMT
        Subject: CN=676C257A8E68EB0AC618A54A149D2D1CAE26E95B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:83:43:43:02:4e:b1:2a:fe:1a:8d:26:f4:
                    fe:2e:a0:97:f1:42:66:96:c7:46:96:4b:e9:c2:b4:
                    d5:43:98:61:58:47:60:5b:65:15:44:bd:79:0b:a7:
                    d7:54:82:c0:df:8a:5c:ef:7e:69:5f:e7:d5:e7:97:
                    26:d3:cb:1c:ad:72:e7:e3:fa:d7:08:ad:a9:b1:10:
                    46:b7:77:b1:91:24:54:f7:66:dc:ab:5f:1e:dc:5d:
                    ae:25:9f:79:59:73:20:21:e2:08:08:3f:d0:45:00:
                    45:44:a7:03:fb:79:64:6a:43:98:7c:c8:bd:9a:50:
                    3d:c3:dd:d0:f3:b9:bb:49:a9:d7:25:92:05:c8:a8:
                    a3:55:9c:18:e7:6e:a7:72:da:8e:74:f1:cc:8c:28:
                    18:9e:ef:85:1c:4c:6f:86:62:b2:e9:ae:e5:06:43:
                    f7:42:f2:e7:77:07:95:1e:79:17:8f:7f:e1:ab:3b:
                    1f:8b:c6:cc:29:25:d6:35:29:74:13:6a:ec:74:0c:
                    9d:ea:dc:de:fc:58:b7:21:72:84:c1:4c:55:df:8f:
                    99:bf:9c:45:80:69:bd:ce:8c:84:dd:d1:a1:6a:00:
                    6f:87:28:ca:1a:3d:e2:3b:40:01:4e:d4:77:12:33:
                    d9:b3:4f:41:ab:f2:6f:41:02:ad:f7:1d:6e:ad:9b:
                    1b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6C:25:7A:8E:68:EB:0A:C6:18:A5:4A:14:9D:2D:1C:AE:26:E9:5B
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3136332e302f32342d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:a3:89:0b:79:76:9c:59:2b:aa:23:06:1d:ee:88:4e:3d:1b:
         88:d8:5a:25:5e:0b:ef:fa:cf:de:23:22:d9:85:77:a6:1d:aa:
         48:43:1d:b2:9d:98:1c:ad:25:08:ab:4c:b8:eb:c7:41:fb:89:
         be:e3:58:1c:3b:14:3e:29:6e:f2:12:ca:54:b9:fc:1c:fa:65:
         84:93:c8:88:8c:bc:27:9c:4e:b2:51:1a:de:f7:10:80:b3:52:
         a3:b2:68:4f:9a:c9:07:b9:bf:f5:28:49:13:b1:65:d6:b0:c7:
         b4:18:5e:8d:0e:2a:a6:f9:36:48:03:01:a9:07:eb:82:6b:c0:
         f9:f8:25:e0:53:c4:1d:9e:6a:db:57:01:b8:c3:c3:68:c8:13:
         c0:04:47:73:37:c7:23:6d:7e:b5:0a:3f:c7:49:1e:b1:0e:d4:
         f6:24:7e:fe:37:62:f5:4b:0a:03:35:25:3c:f0:8b:ae:bf:30:
         0b:52:ab:dc:1b:d3:f3:14:48:d4:16:5f:c4:dc:ca:93:8c:38:
         59:4c:3a:72:94:93:d5:a1:07:a1:38:9a:7c:fa:f8:b6:cb:df:
         4f:5f:af:d4:05:1d:b2:47:35:d3:92:ba:47:02:0f:08:06:3b:
         7e:94:c4:3a:e2:e3:e3:6c:a6:b1:a5:11:ed:e1:b3:61:40:ba:
         16:5a:0e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----