Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130352e302f32342d3234203d3e20313734.roa
File:                     3139302e39332e3130352e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          19oVsimUDEoRg2jiS0ohSsf4U9ELPbwk0e9JNLbgQ/4=
Subject key identifier:   7D:2F:73:4A:5F:B5:31:9A:A2:04:B0:38:38:EC:AD:4E:FC:3B:28:CB
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       017E67E4D6F1F26E767B8A62A04590B370A22CA8
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130352e302f32342d3234203d3e20313734.roa
Signing time:             Tue 10 Sep 2024 13:10:00 +0000
ROA not before:           Tue 10 Sep 2024 13:05:00 +0000
ROA not after:            Tue 09 Sep 2025 13:10:00 +0000
asID:                     174
IP address blocks:        190.93.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7e:67:e4:d6:f1:f2:6e:76:7b:8a:62:a0:45:90:b3:70:a2:2c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 10 13:05:00 2024 GMT
            Not After : Sep  9 13:10:00 2025 GMT
        Subject: CN=7D2F734A5FB5319AA204B03838ECAD4EFC3B28CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3a:0e:41:6e:cd:c5:3a:cf:14:9e:ae:99:b2:
                    02:78:be:bb:10:54:38:e1:61:96:04:88:13:a7:bb:
                    37:d1:0f:83:02:73:06:80:95:2b:d6:02:9a:95:97:
                    e3:d8:d1:85:88:99:a8:57:52:f9:3c:cc:bd:99:5b:
                    c0:7d:d3:d6:a5:3a:ed:cc:67:65:a1:a8:18:e1:67:
                    44:35:41:23:a0:cf:24:89:c1:82:41:b3:f5:b1:78:
                    fb:f0:e8:43:de:25:ab:6b:2e:14:1d:96:35:4d:83:
                    32:02:45:0a:05:60:a5:2e:ff:7e:38:cd:0e:ef:d6:
                    38:39:4d:ea:a9:a9:f2:95:d5:72:d3:fa:ae:c6:89:
                    0d:0b:ab:f9:3e:7b:ed:6a:11:b9:17:6a:4e:00:5a:
                    6e:a1:d1:33:64:54:6f:65:dd:83:9a:95:2d:a9:28:
                    81:97:9b:06:e3:03:c2:e2:8c:57:f8:4b:79:2a:31:
                    3c:92:fe:98:b6:8d:39:04:fa:a7:ab:8c:f3:06:02:
                    94:9c:08:8c:0e:1e:27:c3:15:8e:9f:42:aa:d6:f5:
                    0e:ca:8d:0c:f7:60:04:d1:0d:70:ab:fa:55:ef:de:
                    fa:0b:b8:a7:46:6a:3a:d1:c3:5b:0d:b1:fc:71:82:
                    61:f8:6d:11:e1:cb:4b:3d:0a:b7:ab:be:28:06:be:
                    bf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2F:73:4A:5F:B5:31:9A:A2:04:B0:38:38:EC:AD:4E:FC:3B:28:CB
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130352e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:97:c8:b2:50:ea:6f:1f:8f:d7:30:ad:e5:b8:9d:7b:01:6c:
         6b:ec:5a:68:05:e7:33:85:22:e0:cd:29:ff:4c:a0:21:92:07:
         a1:55:95:2a:cd:06:c3:0c:1e:f5:b6:2c:ac:ee:bf:b7:56:ac:
         75:e2:3d:43:4b:eb:4c:13:00:f2:26:22:68:4a:17:2e:1f:8c:
         e6:fd:e9:96:85:45:1e:e9:26:98:6f:2b:0e:f2:11:f9:d3:e3:
         e4:37:f3:4a:8c:75:67:b0:34:bc:2f:38:46:2c:f8:0f:56:de:
         b8:92:19:4e:3f:f8:2c:9f:a6:51:a0:31:65:9e:fc:fe:79:04:
         25:ae:2a:2f:54:b1:95:ef:fa:be:e3:a2:26:27:c9:25:cb:24:
         ee:81:d0:60:cf:8d:4f:68:0d:e5:cb:61:92:60:c1:ee:fa:2b:
         e3:c6:c3:c8:b8:17:ca:a8:d1:bf:1b:dd:cb:5e:8a:74:6e:e3:
         28:75:f3:0d:5a:1c:ff:a3:80:77:db:94:bc:c2:fd:1e:de:1f:
         a0:4e:9d:ca:a8:0e:b3:b1:a5:51:0d:d6:33:72:a7:31:47:59:
         a5:6a:50:17:01:f4:51:7b:b4:26:9c:aa:61:ee:22:34:cb:1a:
         6a:ff:09:1f:eb:13:86:11:24:53:13:ca:be:1c:53:f1:76:12:
         88:1c:1e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----