Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130362e302f32332d3233203d3e20323730313638.roa
File:                     3139302e39332e3130362e302f32332d3233203d3e20323730313638.roa (raw, json)
Hash identifier:          GbRKrWstP9oXb+q6F0o4cXWjVt8Cm/iXIvIrv8WmObU=
Subject key identifier:   05:0A:D5:9E:8F:9D:60:55:12:A9:38:8F:F8:56:BD:82:68:96:1F:F7
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       52B2292F5452CE2556B52EE6A7D98DD015DB1BED
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130362e302f32332d3233203d3e20323730313638.roa
Signing time:             Tue 11 Jun 2024 12:10:00 +0000
ROA not before:           Tue 11 Jun 2024 12:05:00 +0000
ROA not after:            Tue 10 Jun 2025 12:10:00 +0000
asID:                     270168
IP address blocks:        190.93.106.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b2:29:2f:54:52:ce:25:56:b5:2e:e6:a7:d9:8d:d0:15:db:1b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jun 11 12:05:00 2024 GMT
            Not After : Jun 10 12:10:00 2025 GMT
        Subject: CN=050AD59E8F9D605512A9388FF856BD8268961FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1b:80:c9:76:f3:0e:76:db:12:99:12:01:04:
                    97:76:5e:64:aa:10:ac:a3:6c:b9:73:45:33:dd:22:
                    9c:7c:fd:a1:f3:e0:82:a5:82:01:4a:f3:dc:65:f7:
                    b5:f4:f8:ac:d9:fa:45:63:ad:dc:37:ac:1e:78:44:
                    fb:65:ee:56:22:25:64:16:e6:55:2a:dc:ac:23:3b:
                    5c:4f:27:8f:cd:ed:5d:80:66:bb:4e:0a:b8:ce:dd:
                    c4:89:12:56:68:c5:ea:24:07:7d:15:e1:8e:a3:eb:
                    c6:4b:81:5c:85:58:d0:de:d3:a4:80:56:8b:bf:72:
                    2c:45:62:b4:8c:67:ec:d8:c0:ce:f7:96:79:67:7f:
                    f9:e5:86:cc:ed:92:2d:f7:d8:0a:b3:f9:6f:34:eb:
                    c4:22:9f:5d:bb:8b:9a:ae:f2:cf:5b:f1:5e:5d:d5:
                    44:f0:4b:42:85:fb:1f:72:73:fe:a8:bb:ac:61:a7:
                    4c:26:3b:75:be:fe:f2:59:9e:7d:15:02:fd:ee:b4:
                    dd:dc:d9:43:d3:51:6c:7c:bb:de:89:8f:1c:c4:9a:
                    dd:91:66:78:58:99:f2:2c:08:59:de:e4:3f:44:58:
                    79:eb:94:c3:78:91:36:ce:86:77:43:6b:02:78:26:
                    a4:ff:7f:33:df:aa:81:c6:8f:d6:2b:fa:0c:62:3a:
                    df:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0A:D5:9E:8F:9D:60:55:12:A9:38:8F:F8:56:BD:82:68:96:1F:F7
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130362e302f32332d3233203d3e20323730313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:19:ba:22:f4:09:9f:04:31:09:08:76:48:49:9e:89:66:88:
         f3:af:44:8e:5b:c1:df:89:26:c7:f8:4b:5a:4a:7c:87:ee:55:
         d9:ae:56:8a:e5:95:b4:b2:a2:b4:08:de:bd:c0:c4:9f:99:e1:
         bb:6b:9a:22:f6:4d:b9:3b:33:7a:14:8a:96:13:73:7d:90:a4:
         26:8f:10:a2:f4:3f:2d:b1:ef:bb:4b:2d:f3:89:72:7d:58:72:
         9b:36:54:ed:5b:34:dc:ef:33:4f:0b:d5:76:0e:b4:01:61:97:
         49:35:ca:24:3b:cf:d7:68:23:ce:6b:57:22:05:41:69:82:6a:
         58:c4:62:71:d0:db:c6:c4:8f:cb:a2:03:9b:af:fe:d1:d7:5e:
         7f:97:76:ed:80:42:e2:ee:0c:f5:d6:38:43:87:33:7a:4f:5e:
         95:35:ff:3c:d9:c5:97:a1:6c:b2:ef:fd:03:f6:86:16:c9:90:
         5e:70:e8:89:95:db:17:f2:73:b9:29:dd:28:ec:7c:81:21:2f:
         50:02:60:9b:a8:26:a3:6c:67:28:0f:b1:d5:dc:d1:82:79:fb:
         54:0f:03:64:2e:a2:56:29:75:af:d3:aa:fc:3d:13:5f:14:7f:
         9b:ff:e7:b5:45:4b:30:b0:73:9e:c6:ab:14:0b:55:de:d5:eb:
         4c:de:f4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----