Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132362e302f32332d3234203d3e2035303635.roa
File:                     3139302e39332e3132362e302f32332d3234203d3e2035303635.roa (raw, json)
Hash identifier:          gYt5+mqNlS+6XuNjrLNOQMzI+djX1cdo28ImBbNmwD8=
Subject key identifier:   95:89:3E:26:86:FB:F4:3A:DD:FF:56:35:E7:A6:1E:67:FE:CE:96:89
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       4F8EB4CA180CF13476F994B5404A469E5B38AEE6
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132362e302f32332d3234203d3e2035303635.roa
Signing time:             Wed 12 Jun 2024 17:15:00 +0000
ROA not before:           Wed 12 Jun 2024 17:10:00 +0000
ROA not after:            Wed 11 Jun 2025 17:15:00 +0000
asID:                     5065
IP address blocks:        190.93.126.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 11 Jul 2024 11:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8e:b4:ca:18:0c:f1:34:76:f9:94:b5:40:4a:46:9e:5b:38:ae:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jun 12 17:10:00 2024 GMT
            Not After : Jun 11 17:15:00 2025 GMT
        Subject: CN=95893E2686FBF43ADDFF5635E7A61E67FECE9689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:2e:fc:19:72:fb:64:a4:c7:34:ff:26:5f:
                    91:20:da:1a:1d:73:61:06:45:c6:a4:cf:af:f3:d0:
                    13:19:9b:02:88:41:6f:91:d0:ea:00:12:b9:a6:4e:
                    9d:a2:2a:c1:b9:c1:34:c1:bf:2d:8c:28:c7:46:d8:
                    42:57:4a:5e:41:65:16:1a:ce:14:06:65:96:f1:43:
                    36:8b:5c:87:95:10:ba:8b:0e:da:3b:e6:d4:ae:ba:
                    38:c3:1c:23:bf:6c:05:5b:3f:3d:11:14:f4:d9:4c:
                    49:9e:95:a9:f7:16:ac:72:c2:59:f7:6f:75:e4:16:
                    0a:4b:1e:ca:2d:5f:65:c9:0f:95:31:74:0f:a9:4b:
                    7d:63:d6:18:e7:48:ed:b1:51:e1:22:c3:28:40:d5:
                    6e:ca:69:4e:10:c3:b9:a1:da:48:fd:56:72:ae:87:
                    67:06:26:c1:b4:df:97:41:c1:4e:65:81:f5:92:58:
                    80:3c:f1:3d:bb:a3:5c:87:0e:ff:2e:63:fb:76:3c:
                    f9:2b:59:5e:03:4d:78:35:2d:b1:53:9d:e7:7f:91:
                    3f:e6:06:9f:45:b5:de:d3:99:b3:b2:ac:b4:a2:67:
                    71:a3:e1:d6:0b:32:e1:43:f7:79:52:1a:b7:ff:42:
                    9f:59:90:e0:f7:14:9a:d2:d5:e7:e0:5e:01:e4:b1:
                    94:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:89:3E:26:86:FB:F4:3A:DD:FF:56:35:E7:A6:1E:67:FE:CE:96:89
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132362e302f32332d3234203d3e2035303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:f1:82:95:62:9f:dd:93:26:24:43:bc:3a:0b:5d:80:14:44:
         24:5e:ad:3b:86:22:d0:61:22:60:1f:48:54:cd:da:f5:80:d9:
         01:06:fc:56:3a:90:30:5a:1e:34:b8:7a:36:38:3b:9d:41:7f:
         81:e9:e5:df:b8:67:7d:d1:7f:62:12:ad:c8:e9:d4:24:09:b7:
         fb:aa:c1:92:eb:97:90:fd:7f:25:2c:88:d1:af:d9:fb:df:9c:
         9c:0d:0e:e5:d2:ac:c4:f2:9c:b4:89:d0:c7:84:44:ec:08:ef:
         0f:40:0f:8c:ea:7c:5c:32:55:c8:29:2f:88:a2:e9:eb:1d:9f:
         8b:ca:d8:ca:7c:a8:9b:51:1e:da:2f:f2:e9:b7:74:e9:19:dd:
         32:a6:d0:86:c8:64:09:94:36:86:c9:51:13:8e:45:91:eb:c5:
         43:f4:78:66:23:db:74:a3:a1:ad:74:49:0c:24:5a:6e:a3:f0:
         d6:49:bf:6d:a2:8e:9d:b8:60:11:fb:44:23:73:9e:4b:51:88:
         5d:c2:bc:ac:b4:3c:0e:9c:d7:4c:bc:45:b1:58:50:c9:df:95:
         f9:0c:b5:44:c4:84:e6:1f:ab:1d:ae:4a:c8:46:ef:3b:b5:c6:
         15:64:7a:e3:65:50:67:60:a4:7f:8e:50:fd:d4:39:0f:6a:79:
         29:41:a7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----