Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132362e302f32332d3234203d3e2035303536.roa
File:                     3139302e39332e3132362e302f32332d3234203d3e2035303536.roa (raw, json)
Hash identifier:          mH907OMIVomFmqIjxiUPf8ylPByENor6xOkeoei+hUk=
Subject key identifier:   00:55:02:BA:7E:2B:5A:ED:5E:31:CC:8F:AC:F3:8F:F4:48:9F:18:F8
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       35720718B9068F8CEE2B46D95DFE30F97D7D0CE4
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132362e302f32332d3234203d3e2035303536.roa
Signing time:             Tue 11 Jun 2024 16:25:00 +0000
ROA not before:           Tue 11 Jun 2024 16:20:00 +0000
ROA not after:            Tue 10 Jun 2025 16:25:00 +0000
asID:                     5056
IP address blocks:        190.93.126.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 12 Jun 2024 17:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:72:07:18:b9:06:8f:8c:ee:2b:46:d9:5d:fe:30:f9:7d:7d:0c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jun 11 16:20:00 2024 GMT
            Not After : Jun 10 16:25:00 2025 GMT
        Subject: CN=005502BA7E2B5AED5E31CC8FACF38FF4489F18F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:98:ed:a0:d1:72:87:f3:0b:11:a4:bb:7d:
                    c7:ca:e8:61:c1:e7:a7:ed:40:5e:e5:59:a2:c7:92:
                    58:e9:9d:64:6b:e7:11:cf:09:b2:b2:b4:23:a1:6e:
                    06:a7:15:b4:c8:67:7a:e6:ba:a1:ab:8c:60:b0:00:
                    e3:c6:f7:15:09:cc:48:94:bb:ef:8a:d1:3c:88:4f:
                    f4:03:95:44:04:58:f0:52:60:f9:58:6e:05:1d:dd:
                    19:f7:a3:f9:b0:eb:4d:2f:c5:b3:23:26:b8:32:77:
                    c5:e0:4b:a9:19:24:20:4c:c2:6d:79:43:b3:6b:51:
                    97:9f:ef:03:56:3c:a5:e4:a6:a9:11:02:38:23:6b:
                    81:16:c3:cb:e1:8f:bc:86:a2:ba:69:b0:ca:86:49:
                    c8:e6:5f:69:08:a7:54:d0:9a:6c:b5:a8:c0:8c:06:
                    b0:19:51:40:db:12:97:45:43:f7:76:ec:22:6a:c8:
                    f9:51:a8:28:50:d3:53:60:51:29:17:90:2d:e3:f1:
                    45:36:b6:b2:e3:0e:e6:a5:ce:4d:12:55:44:3b:c8:
                    7f:34:89:43:d0:ff:c3:79:a6:cf:9a:2b:e0:58:e3:
                    f5:ef:7f:22:27:66:b4:d0:08:e0:eb:8e:66:d2:7e:
                    14:b7:ca:f8:43:9e:43:33:93:55:2f:3d:a1:50:c2:
                    8b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:55:02:BA:7E:2B:5A:ED:5E:31:CC:8F:AC:F3:8F:F4:48:9F:18:F8
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132362e302f32332d3234203d3e2035303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:8f:3a:a2:5e:d9:70:a1:46:9d:09:16:e3:1f:ef:cf:9a:6f:
         51:5c:05:4c:dd:2d:3c:2e:9a:b2:7f:3a:66:c0:ba:31:a0:32:
         11:b0:f2:db:d2:6c:ae:f9:a5:a9:76:f0:79:1c:c6:aa:7a:69:
         0e:83:af:7c:96:12:52:8b:b9:b1:ef:24:9b:d1:14:fc:af:38:
         f0:56:cd:d0:00:92:dd:fe:9e:dd:bc:f5:ee:67:e5:c0:8a:08:
         ab:21:c5:b5:a6:24:61:34:f9:81:6c:7b:21:13:ed:d7:6b:b9:
         6b:8a:4a:88:ce:e1:87:ed:00:6f:94:00:cd:e2:8a:19:77:75:
         3e:10:5e:8a:a7:7f:bc:dc:74:3a:82:0d:e9:80:fc:4b:a1:b6:
         f3:15:9d:bf:97:c5:ee:3d:5c:a3:82:18:82:43:8b:80:b6:7b:
         2f:7e:b0:b5:a4:1d:5d:a6:57:5a:ce:95:16:26:21:42:db:f0:
         85:d3:fa:a4:d1:92:26:8e:49:fc:5f:4e:3a:0f:c8:52:5f:63:
         b2:8e:a0:b8:dd:ba:1d:3e:fa:26:a5:55:5d:e1:c6:3b:58:ac:
         67:bc:50:dc:9a:a1:c6:e0:77:34:23:e5:3b:0c:6e:32:fd:25:
         a4:7e:c4:e5:a5:66:f2:49:a5:56:ae:38:29:b3:a5:ec:61:ad:
         56:a6:30:d5
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUNXIHGLkGj4zuK0bZXf4w+X19DOQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNDA2MTExNjIwMDBaFw0yNTA2MTAxNjI1MDBaMDMxMTAvBgNV
BAMTKDAwNTUwMkJBN0UyQjVBRUQ1RTMxQ0M4RkFDRjM4RkY0NDg5RjE4RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+m5jtoNFyh/MLEaS7fcfK6GHB
56ftQF7lWaLHkljpnWRr5xHPCbKytCOhbganFbTIZ3rmuqGrjGCwAOPG9xUJzEiU
u++K0TyIT/QDlUQEWPBSYPlYbgUd3Rn3o/mw600vxbMjJrgyd8XgS6kZJCBMwm15
Q7NrUZef7wNWPKXkpqkRAjgja4EWw8vhj7yGorppsMqGScjmX2kIp1TQmmy1qMCM
BrAZUUDbEpdFQ/d27CJqyPlRqChQ01NgUSkXkC3j8UU2trLjDualzk0SVUQ7yH80
iUPQ/8N5ps+aK+BY4/XvfyInZrTQCODrjmbSfhS3yvhDnkMzk1UvPaFQwostAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUAFUCun4rWu1eMcyPrPOP9EifGPgwHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzEzMjM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzMDM1MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG+XX4wDQYJ
KoZIhvcNAQELBQADggEBAKaPOqJe2XChRp0JFuMf78+ab1FcBUzdLTwumrJ/OmbA
ujGgMhGw8tvSbK75pal28Hkcxqp6aQ6Dr3yWElKLubHvJJvRFPyvOPBWzdAAkt3+
nt289e5n5cCKCKshxbWmJGE0+YFseyET7ddruWuKSojO4YftAG+UAM3iihl3dT4Q
Xoqnf7zcdDqCDemA/EuhtvMVnb+Xxe49XKOCGIJDi4C2ey9+sLWkHV2mV1rOlRYm
IULb8IXT+qTRkiaOSfxfTjoPyFJfY7KOoLjduh0++ialVV3hxjtYrGe8UNyaocbg
dzQj5TsMbjL9JaR+xOWlZvJJpVauOCmzpexhrVamMNU=
-----END CERTIFICATE-----