Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130392e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e3130392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          MUq99SqQ1fMYlKPXw8/BFTmtLYxzWotjgtDudyUHFUs=
Subject key identifier:   35:C7:10:E1:92:E0:70:CF:CB:A6:3E:F5:C1:95:75:86:17:B5:26:7E
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       08434D34C1B1BF10C117207E3DC5D45B77673B1B
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130392e302f32342d3234203d3e20383334.roa
Signing time:             Mon 30 Sep 2024 15:10:01 +0000
ROA not before:           Mon 30 Sep 2024 15:05:01 +0000
ROA not after:            Mon 29 Sep 2025 15:10:01 +0000
asID:                     834
IP address blocks:        190.93.109.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 01 Oct 2024 14:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:43:4d:34:c1:b1:bf:10:c1:17:20:7e:3d:c5:d4:5b:77:67:3b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 30 15:05:01 2024 GMT
            Not After : Sep 29 15:10:01 2025 GMT
        Subject: CN=35C710E192E070CFCBA63EF5C195758617B5267E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c4:36:ba:5f:c2:c4:8d:83:81:18:a3:cd:9e:
                    9e:7c:d8:fa:ee:80:91:90:1c:c8:37:7f:fe:91:b2:
                    9b:3e:40:42:cd:79:64:11:21:5e:16:51:7b:68:25:
                    03:f1:1a:58:81:d3:5d:ae:1e:46:df:38:0b:5e:d9:
                    98:ea:e7:2e:a9:f1:6e:23:d7:a5:eb:25:ad:da:92:
                    93:f8:3f:79:b9:b4:0e:60:70:bb:49:be:7a:bc:02:
                    8c:34:76:e1:cd:19:07:3d:dd:42:5c:5e:32:ac:fd:
                    8d:27:31:c5:e2:a4:19:76:5b:6b:17:3e:5e:c5:f2:
                    79:b3:fb:dd:e5:ef:9e:0a:ea:ac:d2:d9:41:33:47:
                    88:f1:7f:50:54:eb:1f:c9:af:7e:23:c9:f0:90:ba:
                    ea:a1:8f:2d:d2:2b:49:aa:40:ff:7d:ed:83:5c:94:
                    21:ed:0f:03:11:8c:d9:dc:e8:8a:6f:7e:b7:e7:55:
                    56:12:68:78:3f:de:89:4d:9d:bb:70:50:9c:ec:99:
                    fd:87:e2:2a:75:78:af:9a:9c:93:f5:ad:2d:18:ea:
                    21:d4:7f:58:88:3a:a4:64:02:bb:94:e2:fe:cf:e0:
                    48:6f:79:4d:7e:e9:64:3b:60:94:61:d5:6e:0a:0c:
                    91:a5:3a:4e:c5:94:53:64:83:f9:bd:73:02:6e:34:
                    06:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C7:10:E1:92:E0:70:CF:CB:A6:3E:F5:C1:95:75:86:17:B5:26:7E
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:b6:d7:9e:81:b7:b2:dc:c6:55:33:58:75:37:33:19:e8:ad:
         c3:ce:eb:6f:38:b1:8b:a6:37:d5:09:30:19:24:56:fa:83:14:
         9a:d8:f5:ac:14:39:bc:d9:de:e1:23:49:39:d9:42:1a:d0:b6:
         4f:a4:94:33:c6:e2:af:ae:91:6a:8a:2c:61:3c:c2:bb:39:e9:
         85:28:8e:95:c1:23:a3:94:72:6e:ef:e5:42:26:a5:6d:45:c5:
         b6:05:2c:6e:39:77:a2:d9:eb:69:48:95:66:a6:ac:e6:33:02:
         9e:be:4b:4c:5f:80:32:92:f0:32:69:6b:d7:52:9e:94:86:dc:
         46:9b:21:ce:83:cf:d6:7d:9d:aa:cf:b4:00:cd:c7:fe:2e:12:
         68:c0:7a:5b:bc:c3:d3:92:60:21:78:67:09:4f:7f:c3:52:73:
         90:e8:8d:72:c9:f3:3f:3e:f1:c1:b4:16:89:6d:e5:41:f4:da:
         6f:0f:95:96:22:87:f1:c1:6c:f6:c4:bb:ae:a5:a3:5a:c5:6b:
         6e:47:5e:22:1b:b7:c9:48:6e:f2:dd:55:41:f7:2b:65:97:be:
         04:fa:e3:06:0a:a0:e0:37:99:b9:54:3b:bc:ab:fe:f0:b7:84:
         01:cf:66:44:a8:64:21:30:fc:b0:74:f0:72:9e:8e:65:69:1c:
         05:85:dc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----