Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39392e302f32342d3234203d3e20313734.roa
File:                     3139302e39332e39392e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          8fv0NqjG9GIci1REkco6ldLVZWmY3LESjPQAZSypXNE=
Subject key identifier:   14:09:88:86:E6:D3:08:71:CD:CB:5F:85:7E:F0:11:EC:90:E4:28:F9
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       37BE131F00A7D3144F233DE73141875D81A49872
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39392e302f32342d3234203d3e20313734.roa
Signing time:             Tue 10 Sep 2024 13:10:01 +0000
ROA not before:           Tue 10 Sep 2024 13:05:01 +0000
ROA not after:            Tue 09 Sep 2025 13:10:01 +0000
asID:                     174
IP address blocks:        190.93.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:be:13:1f:00:a7:d3:14:4f:23:3d:e7:31:41:87:5d:81:a4:98:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 10 13:05:01 2024 GMT
            Not After : Sep  9 13:10:01 2025 GMT
        Subject: CN=14098886E6D30871CDCB5F857EF011EC90E428F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a1:54:01:0d:eb:e3:be:d8:a0:c7:64:23:e2:
                    68:91:cf:ad:33:6f:a5:3c:4f:44:ad:32:29:4b:05:
                    5c:d2:69:f7:3d:1e:d7:e7:d1:17:00:ec:34:a4:e0:
                    c4:19:77:32:2b:b2:70:4f:b8:6f:5f:67:99:26:a4:
                    07:17:36:d7:37:d8:73:9a:5d:62:11:76:b4:eb:7b:
                    2b:67:72:c8:e8:bd:8a:e3:6b:10:db:0b:93:a6:ca:
                    07:35:58:62:d7:e4:42:8e:4d:47:cc:7d:0e:bc:3d:
                    44:4d:9a:cf:e9:e5:9d:c9:48:7b:f0:52:de:8a:3f:
                    5d:5f:0d:a1:8f:63:46:84:40:06:73:5b:bb:55:5d:
                    d6:4d:d9:d4:21:32:33:a7:9b:79:42:e1:27:03:ad:
                    d2:c5:7b:e9:3b:28:e7:db:8a:89:27:33:c5:bf:8a:
                    d6:0e:d8:55:2f:d6:b4:50:c3:a7:f0:58:c0:1c:d5:
                    eb:6c:81:32:bc:a3:2f:46:c1:5c:70:56:6f:88:2f:
                    f8:06:e7:38:82:47:34:98:9b:21:a4:ba:ae:25:85:
                    ab:1d:9f:19:1d:a1:2e:16:82:b4:b9:92:ad:0a:9b:
                    81:98:8c:c8:c9:40:c2:c4:84:71:d4:37:d4:af:08:
                    01:60:55:22:20:8e:f6:96:fd:3c:a5:c7:f2:c8:89:
                    e1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:09:88:86:E6:D3:08:71:CD:CB:5F:85:7E:F0:11:EC:90:E4:28:F9
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39392e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:af:61:6a:db:c6:40:f5:52:b8:e3:04:28:1a:96:3b:10:b0:
         17:8d:64:60:8b:b3:c7:e2:c1:32:6f:ee:65:77:52:58:76:81:
         e5:07:0d:8f:62:35:05:bf:70:65:d1:db:4f:0b:bc:dc:bb:c2:
         b5:2b:06:22:32:35:e6:61:61:67:cb:37:bc:c6:c4:f4:9a:77:
         3a:be:6a:12:c7:ac:32:a8:3e:9a:c4:bb:22:ea:f4:3e:db:36:
         dc:d7:f6:e8:4c:4e:76:8e:6c:42:cc:ee:04:eb:c6:8e:2d:40:
         fd:6e:10:df:c2:e4:1c:b3:a7:ad:1f:98:96:02:36:f2:c9:53:
         0c:be:eb:02:31:74:de:63:66:e8:d0:c3:e6:8b:4e:4a:c3:02:
         38:21:00:f3:ab:53:69:89:fb:f8:7d:c3:db:39:da:f8:90:a3:
         e3:84:b5:ce:d5:64:4e:49:cb:91:70:12:78:e5:f9:8b:1f:9a:
         c6:50:6c:27:76:7e:c7:fd:2d:6e:10:7b:01:6d:e8:7d:53:32:
         c8:1f:61:50:1e:cd:64:d1:c2:5c:30:ba:67:f2:6c:7c:3e:51:
         83:a1:54:f5:b6:97:b9:c9:48:97:97:27:d7:24:01:c0:73:a8:
         f5:8c:5d:77:2d:05:13:53:27:4a:82:81:aa:8d:93:32:77:4b:
         26:1c:5c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----