Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3137342e302f32342d3234203d3e203233353230.roa
File:                     3139302e3234322e3137342e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier:          60+qwpQ01j7qOZOcHQYQfrrk+erb0gEymsEScV31mB8=
Subject key identifier:   17:C5:CB:D4:97:4C:E5:7A:BB:E1:C7:9B:E8:9D:3C:6F:74:F5:66:53
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       3A22A64114C76811118CCE38C7DE01265DD165CC
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3137342e302f32342d3234203d3e203233353230.roa
Signing time:             Wed 17 Apr 2024 18:50:00 +0000
ROA not before:           Wed 17 Apr 2024 18:45:00 +0000
ROA not after:            Wed 16 Apr 2025 18:50:00 +0000
asID:                     23520
IP address blocks:        190.242.174.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:22:a6:41:14:c7:68:11:11:8c:ce:38:c7:de:01:26:5d:d1:65:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Apr 17 18:45:00 2024 GMT
            Not After : Apr 16 18:50:00 2025 GMT
        Subject: CN=17C5CBD4974CE57ABBE1C79BE89D3C6F74F56653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f1:1d:9a:de:8d:3a:a3:e8:8b:83:a8:6b:50:
                    ce:3e:86:66:22:93:5f:da:f6:2a:2b:cf:51:dc:34:
                    72:d6:26:56:c8:35:a3:48:9d:80:a8:b5:08:07:16:
                    f5:7c:06:dd:f6:f7:63:a5:d5:f1:f2:d0:03:74:3a:
                    b2:ee:3a:89:2a:c3:98:27:c9:8d:a1:2f:e2:81:a3:
                    c8:02:02:ab:ec:60:d5:fb:d2:3b:ba:75:f1:ca:2e:
                    dc:35:02:ce:73:d7:be:f8:3c:e9:73:27:52:e5:1b:
                    29:9c:20:ca:a0:f9:00:10:af:6c:17:07:f4:c9:8e:
                    9b:55:cf:87:43:87:73:12:e2:6c:d9:c9:a7:8b:f7:
                    48:2f:92:fb:39:36:7e:0d:6e:d8:cc:b4:e9:5a:6b:
                    bd:c5:cc:23:f5:a2:60:a0:1d:ee:5a:92:16:9c:39:
                    e0:d6:f0:1e:8e:cb:b3:91:ea:67:81:a5:7e:3a:1d:
                    dd:ba:ad:9a:5c:f5:20:0e:4b:05:e0:d4:d9:7c:a3:
                    d5:4d:a7:35:e3:7c:b9:ef:c3:86:e6:2f:c8:80:b6:
                    5e:55:fa:22:11:e8:b7:a0:5f:3c:51:3b:89:47:83:
                    9e:db:97:80:27:27:8c:5d:f1:99:f5:ed:72:0e:4b:
                    9b:1d:25:62:52:e7:84:76:95:d5:8a:1a:62:b5:15:
                    20:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C5:CB:D4:97:4C:E5:7A:BB:E1:C7:9B:E8:9D:3C:6F:74:F5:66:53
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3137342e302f32342d3234203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:c0:16:8a:48:da:d3:2b:f2:83:49:03:b0:d8:4b:f5:62:bc:
         92:3a:b7:47:39:50:71:83:15:45:c2:fc:46:f2:c6:35:ba:b8:
         b7:21:2f:7f:2b:44:c5:aa:a5:09:12:79:de:11:e6:fe:92:ce:
         ca:4c:f5:71:4c:0e:8b:c0:33:b9:49:db:8a:68:be:ea:1d:98:
         34:02:53:1d:98:52:71:5b:8a:68:f1:6c:c9:f1:6b:fc:7f:0d:
         f8:72:8c:0a:f0:0a:21:14:f8:77:08:47:38:ee:70:6c:45:3e:
         5b:2b:af:1e:b8:5f:47:59:29:65:5f:eb:ad:39:77:d3:02:4f:
         90:2d:5d:4e:5b:65:05:f5:47:22:a2:bc:71:16:2a:64:f6:8b:
         f4:25:19:83:9d:86:79:ce:15:10:30:ed:75:65:8d:1e:42:95:
         58:2e:39:9f:75:01:a0:6d:b0:97:35:dd:18:b7:aa:00:65:48:
         c0:e0:d8:81:8c:f5:1c:c2:d8:e1:dc:24:29:63:89:b3:e1:9a:
         a8:5f:f7:a9:94:4c:90:05:a1:0e:2c:ac:4d:c1:d1:c5:03:ab:
         9f:c9:61:4e:9f:39:3d:00:0a:de:73:1d:c2:ba:e3:b5:9e:13:
         71:f9:30:5f:0a:65:2f:a4:18:14:73:2d:f3:e2:1e:11:30:d5:
         b7:17:d4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----