Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130392e302f32342d3234203d3e20313734.roa
File:                     3139302e39332e3130392e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          DN9UEQWx1HLmHaR5OeksnKiNaDOOH2Ez+XIxPO2azRY=
Subject key identifier:   C6:06:E9:1B:42:49:D5:59:FE:65:2D:3F:9A:CF:E5:1F:ED:7E:C7:88
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       72C9C911134FA50FA0DDCAB1AF8DE68D2180E226
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130392e302f32342d3234203d3e20313734.roa
Signing time:             Tue 10 Sep 2024 13:10:01 +0000
ROA not before:           Tue 10 Sep 2024 13:05:01 +0000
ROA not after:            Tue 09 Sep 2025 13:10:01 +0000
asID:                     174
IP address blocks:        190.93.109.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c9:c9:11:13:4f:a5:0f:a0:dd:ca:b1:af:8d:e6:8d:21:80:e2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 10 13:05:01 2024 GMT
            Not After : Sep  9 13:10:01 2025 GMT
        Subject: CN=C606E91B4249D559FE652D3F9ACFE51FED7EC788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:37:83:89:56:77:0e:3d:b5:d5:92:cd:63:06:
                    ad:c8:0c:98:c8:8b:3e:37:77:21:99:ef:be:e6:31:
                    ce:35:a5:4e:cf:f6:ad:21:14:88:8c:7c:b8:3e:21:
                    eb:52:f2:3a:d0:4c:97:4d:f2:ce:aa:45:6f:13:fa:
                    55:89:c5:e1:ff:09:67:3c:7c:ae:6b:3c:b3:56:7e:
                    db:55:83:c5:30:1a:6f:28:a6:c0:ec:2b:b2:ef:0b:
                    5a:c3:05:e8:b6:71:4b:5f:dc:53:bf:ac:50:62:9c:
                    f4:47:d3:23:18:97:fa:bb:f4:d7:54:25:31:5e:3f:
                    29:f0:5a:ed:0a:c7:98:4d:61:02:61:2c:86:0c:84:
                    93:3b:52:98:7a:77:f3:a5:fa:52:3f:9c:bb:5f:95:
                    87:a6:29:2c:31:67:15:a8:8e:e8:bc:fe:1d:db:d5:
                    9a:19:a7:7b:a2:88:13:46:8e:e4:56:8d:58:9e:ef:
                    2c:87:80:83:25:f8:99:a8:05:c2:d4:c0:b7:6d:00:
                    e3:3c:a8:fd:3d:d9:2a:44:86:f8:6f:33:6e:39:06:
                    2f:17:63:f2:45:18:bf:fc:4d:50:05:09:70:85:db:
                    0c:f5:73:1e:1d:91:e5:78:0c:1e:32:36:92:38:12:
                    2e:fb:5c:94:4a:40:19:d6:b0:34:4a:c3:9c:40:3d:
                    b5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:06:E9:1B:42:49:D5:59:FE:65:2D:3F:9A:CF:E5:1F:ED:7E:C7:88
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130392e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:cf:6c:0a:58:80:3d:4f:1d:c7:33:70:f2:6b:10:90:4b:95:
         bf:99:f4:f8:0e:ec:ef:e3:27:4f:33:29:54:97:31:ee:35:45:
         ae:32:59:b6:0f:b3:e1:fd:0d:a8:be:d5:22:51:18:52:cb:47:
         e1:6e:2d:7a:1e:c5:a5:9f:6a:e5:3c:7c:e2:a0:09:59:9d:d7:
         7a:db:ee:5a:5d:8b:8a:4b:d5:7c:65:ea:6c:4d:c3:2f:ff:17:
         91:26:b8:10:64:b9:d4:31:ad:ab:6d:eb:d0:26:6b:20:e6:19:
         d2:e7:9a:dc:ff:fd:f0:65:1a:8c:42:64:6a:0f:cc:73:c3:11:
         86:08:14:ac:1c:70:f6:e1:75:47:5e:ec:15:0c:29:57:f7:8f:
         6a:c9:bc:5c:8c:40:89:6b:e8:fa:0e:3d:b6:32:62:59:3d:25:
         d0:33:86:f4:09:ba:b2:6e:57:fc:0c:8e:32:6a:4a:b8:ea:7b:
         c4:26:64:48:1c:06:77:9a:94:ca:1c:f3:40:a5:fc:dc:ef:1c:
         3f:09:b3:fe:37:ee:bc:e3:5d:f0:0e:37:63:f1:bc:24:39:8b:
         5d:58:74:a9:e7:0c:ac:af:60:de:28:8e:9b:a7:ed:1b:67:d1:
         1c:2b:66:23:5d:d6:c8:87:75:29:f8:9c:bb:c9:ab:22:8d:74:
         ca:fd:f7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----