Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131362e302f32322d3234203d3e203237373839.roa
File:                     3139302e39332e3131362e302f32322d3234203d3e203237373839.roa (raw, json)
Hash identifier:          8OkrJIlPl65SWcfIzsGGwwa90Z0uykobf2v8iVFWa98=
Subject key identifier:   1A:E9:0A:2D:BA:0A:20:A7:78:0D:1A:70:8E:B5:3E:D8:FA:89:6C:32
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       4BED4460D15DF40B34FD7C74FFFEF6BCFD8D3558
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131362e302f32322d3234203d3e203237373839.roa
Signing time:             Fri 25 Oct 2024 11:30:01 +0000
ROA not before:           Fri 25 Oct 2024 11:25:01 +0000
ROA not after:            Fri 24 Oct 2025 11:30:01 +0000
asID:                     27789
IP address blocks:        190.93.116.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 25 Oct 2024 18:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ed:44:60:d1:5d:f4:0b:34:fd:7c:74:ff:fe:f6:bc:fd:8d:35:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Oct 25 11:25:01 2024 GMT
            Not After : Oct 24 11:30:01 2025 GMT
        Subject: CN=1AE90A2DBA0A20A7780D1A708EB53ED8FA896C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:81:77:6a:65:16:b4:4c:a1:96:6a:b1:31:f2:
                    91:f9:14:3b:a6:8e:e9:c6:98:61:01:99:99:49:ff:
                    b1:b8:07:11:25:d8:a0:9c:71:7b:52:fb:31:ae:5e:
                    0b:23:9c:f6:6c:2d:5e:8d:1a:45:8b:d5:13:8f:77:
                    41:0e:3a:11:e9:42:02:53:d2:a2:b8:37:be:08:3c:
                    3e:cc:9a:95:e3:72:b8:03:39:32:84:e0:a5:51:ec:
                    2e:82:8d:ba:37:46:9c:c1:6e:31:0f:6c:ab:cb:ef:
                    17:db:49:16:a8:bb:31:c1:a0:e5:f3:a6:80:1f:5d:
                    95:ce:57:8c:98:a9:dd:3a:a0:6d:d5:34:bf:ec:f3:
                    2f:00:f4:91:3f:97:aa:16:61:24:50:e9:ea:c7:03:
                    9f:89:dc:8a:1b:2d:27:d6:23:90:dd:15:a9:52:f7:
                    0e:80:20:a9:24:fb:31:55:d7:3b:27:20:a5:e6:6c:
                    17:8e:97:47:25:4f:d6:5e:21:92:eb:d4:f8:9f:a6:
                    5d:13:b5:13:a8:5f:96:65:11:62:32:e2:49:fc:45:
                    37:d1:de:e8:35:bb:0e:6b:d4:ff:a6:9d:2d:0d:3d:
                    b3:e0:e5:cb:9b:04:2f:52:e5:8c:ba:d5:67:92:06:
                    47:cf:39:ff:40:c9:b3:d3:69:a4:84:25:0c:6e:39:
                    a3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E9:0A:2D:BA:0A:20:A7:78:0D:1A:70:8E:B5:3E:D8:FA:89:6C:32
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131362e302f32322d3234203d3e203237373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:c7:a2:a0:dd:04:1d:6f:83:c3:bf:f8:2c:51:8c:65:f6:30:
         37:2a:f5:35:04:35:b1:69:ff:81:09:8a:a3:b7:32:c2:a2:fb:
         21:88:47:ee:20:78:bd:ca:3f:7e:6e:15:4c:34:da:44:c1:5d:
         41:9d:c0:3c:6d:19:e4:35:02:8f:08:fd:c1:8c:2d:7d:92:12:
         70:fa:af:f7:ea:96:94:c9:7f:a1:26:ee:86:dd:bf:c9:a6:2b:
         d8:de:cc:70:87:6a:a4:fa:f4:5f:e6:a1:1c:4d:be:44:40:bf:
         b0:ea:54:96:e2:74:b4:10:12:e8:38:29:e1:d2:00:65:a5:9d:
         2c:ea:65:f4:28:e6:63:6c:40:cd:dc:79:5c:06:27:31:e4:26:
         d1:d3:b8:11:8c:40:15:d6:c7:65:35:c9:26:c3:cc:f1:2c:30:
         fb:76:76:9c:4f:76:c2:cc:7d:10:c0:d0:25:c1:f8:05:c2:fb:
         c0:04:36:ad:f8:c4:e2:80:c7:9f:f6:cf:d1:6b:58:29:1a:ee:
         12:6c:a4:3a:ee:57:da:58:13:c0:c3:12:0f:d5:59:b4:c5:fb:
         f2:c7:89:1a:0a:7a:e6:e5:a9:8d:fa:85:d3:73:41:a0:6b:8c:
         24:17:d7:62:89:2d:4c:c2:3c:15:fa:66:29:97:c2:d9:66:1a:
         3f:89:02:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----