Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37382e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e37382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          Os0EKAWzlA0K53Q5EhhAA6LyAKZ6BafbU0fsHBawR+Y=
Subject key identifier:   0E:7B:54:36:17:CC:E1:90:59:FC:9A:B6:69:AC:C9:CB:FD:9D:FF:BC
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       2AA1C907712515FF2DA3115088C8296B41BB7836
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37382e302f32342d3234203d3e20383334.roa
Signing time:             Wed 25 Sep 2024 11:25:00 +0000
ROA not before:           Wed 25 Sep 2024 11:20:00 +0000
ROA not after:            Wed 24 Sep 2025 11:25:00 +0000
asID:                     834
IP address blocks:        190.93.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 16 Oct 2024 19:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a1:c9:07:71:25:15:ff:2d:a3:11:50:88:c8:29:6b:41:bb:78:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 25 11:20:00 2024 GMT
            Not After : Sep 24 11:25:00 2025 GMT
        Subject: CN=0E7B543617CCE19059FC9AB669ACC9CBFD9DFFBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3c:b6:e4:3f:9d:0d:3f:44:06:15:b4:40:af:
                    d2:09:aa:63:e7:58:b5:9b:81:be:d6:a9:10:1f:21:
                    35:31:56:c9:72:6d:be:d2:b9:01:00:ad:f3:0d:1a:
                    b5:b0:3e:ed:f6:6a:cc:b7:a1:fe:49:3e:42:c4:1e:
                    4c:1e:77:df:bc:01:a3:3e:33:0b:c4:ed:da:d6:4a:
                    c5:26:6b:8f:37:4b:78:60:ea:61:a3:4a:11:94:8a:
                    ab:bd:6f:4e:6f:d1:24:3c:bb:da:03:3d:63:35:d7:
                    40:06:26:a6:3f:84:15:be:af:73:b5:f0:c3:c6:03:
                    4d:01:04:f2:43:c3:30:a9:ba:e1:d5:8a:0c:85:04:
                    3e:6f:3c:e7:18:c2:dc:b8:2b:4b:09:e4:03:c2:c2:
                    c9:7d:f7:95:c9:96:3b:d8:af:10:c0:3a:0a:9b:8f:
                    50:08:ce:dc:7b:e0:6c:95:ab:49:7d:f7:7c:f0:db:
                    12:56:45:e0:e3:4c:22:4c:17:62:1c:50:91:3a:8d:
                    10:15:38:49:01:01:60:cf:e0:99:a0:9e:56:d3:b5:
                    1e:0a:bc:3f:49:a5:6c:6a:fa:fd:e6:a6:c3:78:ff:
                    f6:30:7b:be:f0:b4:8d:26:50:8a:ce:53:70:60:0c:
                    1b:5c:ec:86:48:c6:57:a0:ae:de:e8:f5:91:77:c8:
                    52:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7B:54:36:17:CC:E1:90:59:FC:9A:B6:69:AC:C9:CB:FD:9D:FF:BC
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:02:c2:47:b1:07:76:47:da:7b:90:16:53:9d:2c:13:9c:e2:
         be:34:4d:8d:2a:ad:9e:0b:c5:97:71:4e:38:51:5b:94:55:f4:
         7c:00:73:15:a0:cd:9e:23:64:13:d3:f2:7c:81:dd:1d:65:12:
         f1:00:86:4f:22:73:9b:b8:50:1e:8d:d6:88:51:6d:dd:58:62:
         70:f7:68:75:8b:3f:e6:e8:ba:c9:af:3d:8f:4c:fb:e3:1e:94:
         19:c7:f2:ee:aa:0c:e2:84:06:78:ea:07:8e:a4:1c:d1:e0:b5:
         9f:8b:be:c9:4f:76:a9:54:b0:26:31:df:9f:fb:68:72:b8:09:
         28:9a:3a:f4:d5:ee:8f:d5:26:33:0b:e1:81:61:19:48:83:87:
         16:2c:f7:30:2c:2f:27:fc:91:f8:2d:8b:2f:12:f6:f9:f6:21:
         52:27:de:69:5a:71:89:d3:2f:42:8c:8e:2b:50:f8:16:e0:ba:
         f3:d7:85:56:4a:a6:de:85:35:01:e6:8f:f0:f7:52:df:23:8d:
         3f:96:d9:22:f7:52:ab:e4:19:ec:26:91:9c:20:ac:c4:c0:e6:
         6f:49:6a:7a:d6:21:f4:41:76:e4:ee:17:1a:6d:3a:1a:45:7b:
         3f:41:dc:fb:7a:85:8e:a7:fe:e5:58:9c:38:47:5a:32:7c:db:
         4d:a3:d5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----