Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38352e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e38352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          uteVHXD5Sv0OwNCKTJYMeiblPJwhNJXCU0vfLLgv7Tc=
Subject key identifier:   CC:6A:CA:F1:97:D7:A5:8C:E2:24:87:CE:6A:C7:C9:CD:7E:00:1F:BA
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       3E2A13522888825349F3C4A57A9433492CB3866B
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38352e302f32342d3234203d3e20383334.roa
Signing time:             Fri 13 Sep 2024 11:50:00 +0000
ROA not before:           Fri 13 Sep 2024 11:45:00 +0000
ROA not after:            Fri 12 Sep 2025 11:50:00 +0000
asID:                     834
IP address blocks:        190.93.85.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 25 Oct 2024 14:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2a:13:52:28:88:82:53:49:f3:c4:a5:7a:94:33:49:2c:b3:86:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 13 11:45:00 2024 GMT
            Not After : Sep 12 11:50:00 2025 GMT
        Subject: CN=CC6ACAF197D7A58CE22487CE6AC7C9CD7E001FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f5:d4:64:57:7a:4b:15:86:af:7a:4a:e1:4e:
                    97:11:fa:c2:8d:90:f9:8c:58:9b:b5:3f:f8:4f:cd:
                    71:7d:56:1e:10:4f:9f:4b:ca:a5:0b:64:4f:a4:b7:
                    47:7f:89:52:b0:33:7b:89:0b:b9:b8:4a:53:52:d0:
                    17:cc:65:02:7b:27:6e:70:f2:48:e9:ac:07:36:65:
                    6a:4a:ff:a8:64:de:84:76:fc:ec:2b:be:97:a9:81:
                    86:b3:be:78:d7:3e:dc:2c:20:cb:32:b2:62:8a:0a:
                    66:21:14:5d:6f:86:f6:a4:29:c3:44:8b:f7:b0:ba:
                    ba:ec:a5:37:ee:d1:1b:be:cf:4f:68:ef:c4:27:2a:
                    4e:e0:4d:31:db:7f:69:1b:0c:77:9f:6c:5f:06:fd:
                    27:61:fc:0f:4c:4a:df:fc:50:61:8f:4b:28:24:7c:
                    cf:4d:89:c6:48:04:27:53:ce:88:47:0a:03:af:4b:
                    9e:de:8f:6f:b8:8d:5c:16:ad:46:88:5c:1b:f9:c4:
                    bd:12:ab:1b:63:80:93:aa:2d:b8:27:31:81:f5:9a:
                    ae:b3:98:a4:90:ff:74:ff:be:99:06:9b:e7:fa:3c:
                    b7:26:c4:a3:4d:7c:d7:84:e2:f2:4e:c4:50:8d:0d:
                    87:6b:97:72:cb:3e:8e:4f:3c:bc:ad:b5:d3:5c:cf:
                    5a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6A:CA:F1:97:D7:A5:8C:E2:24:87:CE:6A:C7:C9:CD:7E:00:1F:BA
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:ad:b3:e5:9e:7a:be:d5:fb:c4:ca:fa:6a:61:27:fc:b3:69:
         7b:6e:f3:70:22:d8:51:e4:84:59:3c:9d:13:d8:ea:9b:c7:4d:
         49:2d:d7:7a:78:0d:80:b1:da:ce:ad:9f:d3:55:8b:88:d3:cf:
         c1:83:50:75:56:c7:67:a5:05:d6:3d:2d:d1:11:b6:7c:12:a0:
         60:9e:e0:ba:c7:e5:95:58:c0:45:ee:ba:2c:63:62:20:82:4a:
         90:bf:fc:04:ea:63:ec:14:43:3d:fa:dd:9a:57:d7:c5:f8:cb:
         45:37:d0:4f:a3:74:b7:a1:14:2d:96:3a:6f:d5:9f:7a:69:af:
         f1:d5:8c:e9:cb:8b:a1:31:0b:9a:66:8f:63:da:6f:24:ef:cf:
         34:96:79:1b:63:92:2d:c0:5f:0b:28:f8:54:00:40:ef:e3:fe:
         61:32:f6:43:be:d6:ce:0f:01:5a:90:b5:ef:df:74:90:f7:f5:
         c4:f2:06:2f:4d:a4:b1:68:b5:82:0e:a6:a2:3f:7f:a8:c0:9f:
         36:e9:89:0c:84:ea:7b:f8:b6:f8:c1:f7:41:bc:2d:b5:b3:e7:
         3c:33:ce:86:82:34:2b:e5:02:b5:8b:7b:8b:c0:87:c8:60:ec:
         a1:20:8d:8c:e2:3e:bc:bb:8f:f0:30:b7:ee:48:dc:0d:79:5a:
         8d:a8:e0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----