Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130382e302f32342d3234203d3e20313734.roa
File:                     3139302e39332e3130382e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          kLbv0kbxjKx6BKWGMuoMBAvGTSoxuyNYSDctkr6Mxas=
Subject key identifier:   4B:40:20:D6:51:63:89:7E:24:70:DF:79:11:3C:97:5F:1C:75:6E:B2
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       22ECDA743FD3767C377DB58E89084C4998A66CB1
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130382e302f32342d3234203d3e20313734.roa
Signing time:             Tue 10 Sep 2024 13:10:01 +0000
ROA not before:           Tue 10 Sep 2024 13:05:01 +0000
ROA not after:            Tue 09 Sep 2025 13:10:01 +0000
asID:                     174
IP address blocks:        190.93.108.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ec:da:74:3f:d3:76:7c:37:7d:b5:8e:89:08:4c:49:98:a6:6c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 10 13:05:01 2024 GMT
            Not After : Sep  9 13:10:01 2025 GMT
        Subject: CN=4B4020D65163897E2470DF79113C975F1C756EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:16:d1:a5:a2:90:85:ae:a5:15:4a:6f:60:76:
                    31:6a:bc:d6:ea:18:5a:0f:b1:95:4a:22:85:03:e6:
                    04:de:0d:c3:c2:8d:69:be:ab:59:b1:8d:7c:ba:32:
                    8e:22:22:c2:f6:2c:71:2b:37:f2:b4:1f:18:39:bc:
                    39:d8:6e:3d:a9:64:89:c4:fb:bb:72:07:d9:b4:c4:
                    5a:21:1f:11:03:9b:6c:61:45:e0:f4:40:e6:3e:32:
                    3d:e8:81:1b:f8:69:e8:ee:c7:9e:6f:28:a0:c2:b4:
                    09:b1:73:ce:1a:3a:a7:46:e8:eb:c3:2c:c6:a4:93:
                    18:5f:08:24:7c:f1:65:ce:0a:1b:9a:52:ae:3d:6a:
                    e9:b8:0c:34:af:36:c9:b6:3d:c7:04:52:6c:bd:1d:
                    33:e9:52:30:ab:ce:78:59:e1:fb:31:68:f4:26:eb:
                    08:61:67:c1:20:58:ef:af:ca:8a:c4:47:02:bc:5f:
                    6a:f1:e2:0c:51:67:5f:20:f9:8c:65:8d:dd:4a:f6:
                    27:fc:ca:39:52:31:b3:54:b3:ad:53:de:59:99:46:
                    01:30:53:7a:1a:90:11:be:b2:f1:18:c5:80:20:08:
                    ca:c6:97:ca:7c:86:cc:53:82:35:6d:bf:76:d1:67:
                    c0:d1:2e:9e:f2:e0:f3:14:91:f1:71:79:d0:c2:bf:
                    4b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:40:20:D6:51:63:89:7E:24:70:DF:79:11:3C:97:5F:1C:75:6E:B2
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130382e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:db:fd:72:be:1d:c4:80:cf:c2:5e:d9:d6:fd:87:18:2f:73:
         3b:a0:08:da:40:be:78:3f:b5:ad:f0:b5:2c:9b:2e:e3:45:bb:
         61:e4:6f:e7:bf:dd:a3:0e:9c:12:d5:2a:af:0b:a4:ea:04:e4:
         38:45:15:cb:c3:24:2c:71:04:e5:6a:0f:08:dd:a9:1b:0f:af:
         55:0d:c1:09:88:e2:c0:79:6a:e4:89:2a:39:c7:aa:8a:85:ad:
         cf:87:af:8a:e8:40:96:c1:11:83:57:14:0a:74:8c:35:6d:c2:
         b7:b2:c5:b0:70:e6:3e:b9:e9:a8:ce:63:f8:fe:78:29:bf:bc:
         90:ad:f1:6a:df:f2:8a:29:ac:c2:2d:83:98:39:60:0b:f5:2e:
         00:02:e8:91:e4:d1:6d:47:2c:55:d6:dc:35:f8:4a:69:9f:69:
         93:27:36:4c:b9:74:2b:58:42:bb:e2:4b:bf:84:28:74:6f:fd:
         43:42:b9:e2:e7:85:fc:26:00:53:95:f4:40:6a:aa:ce:80:3f:
         5c:45:2d:92:20:d4:29:38:cf:03:13:29:13:a2:ab:83:c9:29:
         78:82:d6:b9:a9:6b:b7:15:16:5e:bb:4e:8d:1a:f4:38:1b:86:
         69:f8:54:53:4c:fc:71:31:1d:21:a7:db:7b:4e:01:3c:81:75:
         c6:e1:d2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----