Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e33302e302f32342d3234203d3e203238303634.roa
File:                     3139302e3234322e33302e302f32342d3234203d3e203238303634.roa (raw, json)
Hash identifier:          kAMSQKl/cai9UzGiQiHJWnziJj5YLCcL35lYo736faw=
Subject key identifier:   0C:91:38:E1:5D:E5:49:2A:2F:9F:19:95:1B:58:EA:FA:6C:00:B7:99
Certificate issuer:       /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial:       5A2681708EB1AC84F2F77E128B5F258D88D53139
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e33302e302f32342d3234203d3e203238303634.roa
Signing time:             Tue 05 Mar 2024 18:14:32 +0000
ROA not before:           Tue 05 Mar 2024 18:09:32 +0000
ROA not after:            Tue 04 Mar 2025 18:14:32 +0000
asID:                     28064
IP address blocks:        190.242.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 17:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:26:81:70:8e:b1:ac:84:f2:f7:7e:12:8b:5f:25:8d:88:d5:31:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
        Validity
            Not Before: Mar  5 18:09:32 2024 GMT
            Not After : Mar  4 18:14:32 2025 GMT
        Subject: CN=0C9138E15DE5492A2F9F19951B58EAFA6C00B799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:52:8d:1c:80:ad:b4:d8:d1:52:4a:68:f6:
                    b2:fd:25:36:8c:ae:a2:22:17:72:e4:66:7a:a8:dc:
                    77:9f:c0:4c:b0:01:8e:f2:ed:7d:0f:03:9e:18:d6:
                    fc:50:d8:9b:d3:cb:6c:1b:46:0d:c2:88:82:b0:ac:
                    a0:83:2d:be:25:b0:2d:05:5d:26:0d:59:c0:58:d2:
                    77:3a:1b:c4:09:b6:4b:7c:7d:69:3a:36:44:b3:f2:
                    6c:73:64:ef:89:ed:d0:1e:a0:e9:9c:4f:0a:5a:2d:
                    5e:7a:97:ae:c8:dd:75:c8:83:4a:0b:05:af:a0:7c:
                    81:7b:ba:e9:26:14:4e:30:3f:68:54:a9:54:e2:90:
                    7a:0f:c8:00:20:42:c6:9c:4f:d5:b7:8d:6c:75:5f:
                    fe:5a:20:22:18:df:25:48:5a:a8:c7:1c:82:6d:e0:
                    71:c0:48:0d:d1:e2:61:62:4d:f2:ef:f1:e8:74:8b:
                    57:fb:f7:b6:c5:3a:ae:ff:e2:d7:28:92:33:03:da:
                    10:7b:60:a6:a9:d0:20:11:57:09:be:75:88:d0:6b:
                    06:f9:a7:2f:07:ef:7e:4e:e3:6f:59:eb:ea:f0:18:
                    2b:dc:65:28:03:77:35:fe:29:17:51:9e:d3:82:2d:
                    ef:a1:e8:0c:13:8d:a6:ea:03:b4:78:50:f7:0c:b5:
                    80:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:91:38:E1:5D:E5:49:2A:2F:9F:19:95:1B:58:EA:FA:6C:00:B7:99
            X509v3 Authority Key Identifier:
                keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e33302e302f32342d3234203d3e203238303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:47:df:e8:f5:b3:d7:de:16:cf:30:d8:c3:83:4b:c4:bf:10:
         4b:36:1a:86:32:f3:26:4a:ee:23:c2:16:8b:23:5c:4d:cf:bb:
         7d:91:89:3c:0b:f8:eb:0a:d3:fe:47:33:1a:8c:1a:da:a2:a1:
         fc:99:cb:b6:7f:f5:37:8f:f5:20:8e:11:81:63:f6:99:b4:18:
         23:25:c8:74:20:44:ae:60:ad:b2:95:f1:e5:58:8b:69:5b:80:
         c0:07:f9:17:47:e7:00:ce:35:59:9a:62:fe:5b:e6:ab:64:18:
         21:dd:e0:cf:b1:e9:2c:35:49:3d:98:d6:66:7e:9d:91:aa:91:
         46:95:bb:32:74:fa:6c:8a:b4:7d:f6:cf:78:d7:8a:c2:63:77:
         7b:88:a2:76:f3:29:36:d7:95:67:2e:46:d3:67:2d:68:e9:52:
         e1:f7:f8:12:a2:d8:ba:61:14:73:33:1c:06:1f:42:bf:04:51:
         9f:c4:8d:f8:28:e0:36:39:51:04:2a:1b:d6:93:61:f4:5b:02:
         e9:d3:7d:b9:9d:fb:8f:88:80:4f:9f:35:8d:ec:2b:7a:fe:12:
         3a:f7:72:0c:63:a9:d3:c4:4a:ba:9b:27:79:88:e7:20:54:51:
         89:b8:24:a0:ed:2e:da:6b:13:8e:f8:67:aa:59:72:f1:2f:a1:
         f1:09:20:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----