Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3137332e302f32342d3234203d3e203233353230.roa
File:                     3139302e3234322e3137332e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier:          1UV0mkCGS0tTOGp4FF+ixd5FXHU0lEnmwDs236R+Xsc=
Subject key identifier:   92:65:2C:87:FA:2A:14:6C:E8:2F:C0:07:E5:B9:1C:3A:5F:BF:AD:F2
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       43E897B6EB2E5C1E661C4350E20D140924361C38
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3137332e302f32342d3234203d3e203233353230.roa
Signing time:             Tue 05 Mar 2024 18:14:44 +0000
ROA not before:           Tue 05 Mar 2024 18:09:44 +0000
ROA not after:            Tue 04 Mar 2025 18:14:44 +0000
asID:                     23520
IP address blocks:        190.242.173.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e8:97:b6:eb:2e:5c:1e:66:1c:43:50:e2:0d:14:09:24:36:1c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:44 2024 GMT
            Not After : Mar  4 18:14:44 2025 GMT
        Subject: CN=92652C87FA2A146CE82FC007E5B91C3A5FBFADF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a6:77:12:39:71:88:ae:db:f2:2e:61:28:81:
                    0d:9f:5c:ac:2a:68:da:ee:72:8c:b9:c3:79:e7:85:
                    39:21:a5:f3:07:46:64:68:0c:22:10:3d:ac:67:af:
                    b8:b4:d8:7d:09:81:4d:a2:b2:e0:51:99:26:19:7e:
                    f0:b1:31:68:10:12:e0:c9:f4:62:cc:73:4d:52:88:
                    6d:8b:8f:03:58:a2:e1:18:e9:9a:2f:63:4c:1b:de:
                    46:49:9a:dc:8c:3b:18:5f:9f:ae:e6:25:49:29:95:
                    8f:f5:87:fd:e8:28:5c:d3:21:6a:b0:f1:18:c3:ea:
                    65:99:ce:b9:11:f8:03:b4:8a:82:e9:00:42:52:c9:
                    44:bd:d5:72:f4:bf:30:0e:f1:2f:66:fc:e3:ed:3b:
                    31:ed:5a:ac:5d:3d:dc:3a:57:cb:41:43:aa:e4:91:
                    4c:bc:0a:1f:f8:0f:2a:cc:ee:94:19:10:0a:06:f5:
                    38:8c:1f:56:79:ef:44:12:4e:95:79:56:d1:63:71:
                    f8:a8:c9:51:ac:e8:9d:c7:50:15:ec:3d:79:e8:ca:
                    87:ee:3f:d8:5d:7c:48:f4:33:33:90:e2:cb:c9:dd:
                    aa:75:d4:57:2f:a3:18:cc:ce:8c:d9:33:90:b2:b3:
                    a8:e6:99:8c:82:1e:bb:bf:24:31:27:c0:c0:16:f5:
                    e5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:65:2C:87:FA:2A:14:6C:E8:2F:C0:07:E5:B9:1C:3A:5F:BF:AD:F2
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3137332e302f32342d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:f2:1a:64:84:7b:05:07:b3:a8:45:9b:4a:8f:00:e2:72:7c:
         38:78:c1:ba:16:0e:06:4b:5d:19:0e:86:50:8d:da:3d:c4:e5:
         0e:c5:ec:ab:c5:6f:fc:5f:6f:ab:4b:38:98:70:23:95:1f:0c:
         08:c7:a2:de:ae:97:b9:31:9e:cb:ff:ef:fc:17:cf:47:c0:8a:
         67:91:a9:ae:31:d2:36:b6:8e:dc:39:94:b4:50:3e:51:c2:a1:
         b6:e5:02:56:36:ed:83:82:ce:e4:4e:7b:1f:b0:2b:0f:fd:3e:
         28:53:51:f1:3d:ee:ce:45:07:dc:d7:e6:11:bb:aa:64:2f:96:
         bb:a7:0c:7c:50:3e:35:e4:0a:8b:dd:5f:f7:62:5f:20:11:36:
         f2:2a:ca:b9:43:63:28:4c:0f:1d:ae:54:7f:0f:c8:df:89:b5:
         01:da:0e:1f:f8:6c:45:43:cf:45:57:d6:d0:4d:41:c1:10:e4:
         73:35:8a:41:ac:fd:14:bc:b2:29:f7:4d:27:8f:16:b1:3e:1a:
         13:92:00:c5:88:d5:dc:5b:73:6e:fd:20:11:8c:3c:3b:a6:d7:
         6b:31:d9:e8:6e:0a:2e:3e:93:6b:7a:a4:57:e6:92:db:c7:ba:
         fe:5b:3d:27:0c:71:93:70:f3:d0:4a:40:54:d1:3a:b3:f9:1a:
         62:c6:af:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----