Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3138372e302f32342d3234203d3e203532343638.roa
File:                     3139302e3234322e3138372e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          fNqxfsr9B26m+MpnG3lthMecV4EnKGaRLUY7yAuEfVk=
Subject key identifier:   6B:E6:86:B2:0F:35:A8:D5:2F:FB:80:7E:7B:45:78:E3:48:24:CD:6C
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       0F3BC4BBFB3B2F831484FFE40C79C64D4BD587D2
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3138372e302f32342d3234203d3e203532343638.roa
Signing time:             Sun 23 Jun 2024 04:25:00 +0000
ROA not before:           Sun 23 Jun 2024 04:20:00 +0000
ROA not after:            Sun 22 Jun 2025 04:25:00 +0000
asID:                     52468
IP address blocks:        190.242.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3b:c4:bb:fb:3b:2f:83:14:84:ff:e4:0c:79:c6:4d:4b:d5:87:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Jun 23 04:20:00 2024 GMT
            Not After : Jun 22 04:25:00 2025 GMT
        Subject: CN=6BE686B20F35A8D52FFB807E7B4578E34824CD6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8a:8c:2f:23:55:ef:98:81:dc:41:d7:ef:b5:
                    6e:ee:8b:14:71:93:6d:b5:b4:c0:0c:97:53:aa:d0:
                    16:b7:38:04:8e:77:24:f8:e0:5e:d6:e9:74:f1:f8:
                    88:54:aa:4e:1d:6d:39:f1:fe:b8:0e:2c:3f:98:82:
                    85:c3:14:12:4d:78:5c:e3:ff:36:41:01:7f:00:1b:
                    f4:bc:ac:13:cd:e7:72:e6:3a:8d:51:48:17:8d:7a:
                    4a:f0:5e:c9:87:2d:36:71:1c:c8:88:36:1d:e5:ac:
                    3f:3a:62:9e:f0:2e:ea:2e:ba:0d:90:95:8a:2e:5d:
                    87:20:dc:4b:9e:d4:c8:dd:d9:77:93:25:57:fa:6a:
                    5c:42:c5:bc:d2:a4:46:1f:ac:96:0a:6a:7a:9f:7a:
                    08:39:05:bc:f6:11:62:3e:f3:b8:00:ed:3b:b4:be:
                    d3:35:08:c7:a1:5c:e8:05:83:ee:bf:a4:41:03:ff:
                    7b:66:1f:8d:4a:b1:24:a8:11:54:d7:a7:82:d7:26:
                    66:ee:86:25:e4:a4:3d:92:f0:5f:37:a9:06:20:36:
                    dc:d6:6d:c4:85:55:e7:98:3b:ce:ae:f4:2d:5e:5e:
                    55:2c:09:15:c1:dd:7b:47:43:62:59:29:a2:bf:4a:
                    74:69:9d:95:07:07:d3:82:1d:1d:4a:d2:f2:42:79:
                    76:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E6:86:B2:0F:35:A8:D5:2F:FB:80:7E:7B:45:78:E3:48:24:CD:6C
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3138372e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:6b:a0:96:46:24:c7:c3:94:2b:30:5f:54:78:19:88:a7:98:
         d5:a2:f3:ca:e1:11:d3:ba:2a:e0:df:17:cb:f8:39:c2:a4:45:
         81:14:49:4d:8e:a7:76:ad:04:c2:1f:ef:49:8c:1a:e9:90:a8:
         f7:49:bb:5c:2d:ea:60:47:2c:ca:e4:6e:e3:6f:0b:b5:3c:27:
         31:8b:b8:8d:7e:2f:5f:4b:8b:c0:e3:b5:91:8d:c6:0a:9f:f0:
         d5:92:af:d6:0d:1b:c4:ed:83:96:81:e3:53:24:0c:dd:94:9f:
         1a:20:3a:76:a6:d2:cf:11:8a:e4:21:6c:85:cc:d9:46:3a:b4:
         f3:4a:ad:ee:94:41:2b:a4:c6:7d:b8:c9:ce:b4:5b:18:74:57:
         69:d8:30:cb:ab:4d:83:33:e5:ec:d1:e5:75:ba:cb:02:5c:7c:
         ec:31:5c:4e:34:a2:33:db:14:6a:21:d5:1a:d0:f3:a3:7d:5c:
         5f:6e:93:54:06:49:73:3a:43:4d:24:76:be:e1:5e:e0:40:24:
         cb:75:ea:42:6b:a1:8b:74:39:13:92:ae:21:42:db:4c:43:15:
         ea:72:f9:22:d4:c8:d2:a8:d0:8c:64:01:ab:9f:fb:35:5d:41:
         66:2a:0d:3c:c2:d5:ed:19:e4:32:41:db:eb:8b:8c:67:9b:3f:
         2f:04:16:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----