Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39392e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e39392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          AbIEnBo0yjRgbEN5OQnQVwDLEI+YYER0YQM84RiOgQ8=
Subject key identifier:   D1:7B:0C:18:89:C3:6D:03:60:90:25:72:E8:B0:52:20:3C:FE:8E:C9
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       09757C995219D347914F12CEFE56697DB2E507E0
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39392e302f32342d3234203d3e20383334.roa
Signing time:             Mon 30 Sep 2024 15:10:01 +0000
ROA not before:           Mon 30 Sep 2024 15:05:01 +0000
ROA not after:            Mon 29 Sep 2025 15:10:01 +0000
asID:                     834
IP address blocks:        190.93.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 02 Oct 2024 12:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:75:7c:99:52:19:d3:47:91:4f:12:ce:fe:56:69:7d:b2:e5:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Sep 30 15:05:01 2024 GMT
            Not After : Sep 29 15:10:01 2025 GMT
        Subject: CN=D17B0C1889C36D0360902572E8B052203CFE8EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ef:59:f7:6a:ec:09:f3:51:9a:33:45:0e:bc:
                    42:96:d5:11:69:32:88:45:64:ba:d8:d9:e5:90:eb:
                    4f:ed:df:14:1e:00:61:50:4b:58:46:6f:d7:62:27:
                    86:20:44:77:95:96:2d:2b:dd:58:c8:c7:f0:51:c1:
                    58:4e:df:0b:28:36:65:8c:b3:3f:4a:8c:4c:cc:03:
                    5c:48:83:d0:10:25:82:a9:37:8c:5c:9b:e1:c3:db:
                    c2:4a:69:83:36:fb:29:53:92:c4:53:3e:b8:5a:1d:
                    0f:ee:d0:e2:74:f0:f1:d7:33:0b:8d:85:91:c2:ff:
                    94:c6:86:05:b1:55:ad:f6:db:d0:fa:8d:f2:3c:96:
                    c6:60:b2:5a:64:23:55:6b:5c:6f:bb:c9:af:00:cf:
                    8e:06:c3:dc:74:a2:ef:5c:8e:3f:b5:fd:32:02:02:
                    03:1d:7c:c1:27:07:77:79:04:57:70:11:f0:00:a7:
                    91:c9:2b:0f:21:e4:33:dd:52:e2:f3:92:81:d9:d1:
                    f7:01:3d:d3:64:f5:32:a6:5e:3f:f6:ea:30:bf:64:
                    1d:19:5e:df:27:88:79:25:d9:2b:98:93:5e:81:dd:
                    88:7b:64:a7:0e:82:f6:5f:21:12:ce:2e:00:f1:b7:
                    10:cf:28:39:79:c6:7a:f5:59:71:04:7e:b2:0e:b1:
                    bc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7B:0C:18:89:C3:6D:03:60:90:25:72:E8:B0:52:20:3C:FE:8E:C9
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:b4:06:01:e4:34:22:a0:2a:9e:cc:96:85:e7:05:23:47:57:
         52:de:2a:35:8d:db:4a:42:38:84:ba:8b:71:c9:88:6a:aa:ba:
         81:8f:af:f0:72:8f:5f:2c:ec:5c:37:c7:4e:15:ad:90:5b:f4:
         05:eb:59:18:fb:20:8f:5d:2f:57:71:d6:9c:4c:a9:f4:fd:87:
         fe:b4:67:24:b2:34:19:81:13:93:93:5c:45:75:78:18:8b:b6:
         7d:e3:bc:41:5d:be:9d:06:d6:df:e1:e6:3c:04:f2:c6:09:72:
         24:b3:d3:16:cd:f0:ca:5a:cd:5e:aa:fa:ba:fa:9d:b9:4a:d5:
         30:09:5e:fb:e5:7b:2f:82:5f:45:89:08:7f:ea:b3:ca:84:1c:
         a3:af:0e:43:2d:99:b9:19:93:f5:6d:9a:2e:51:84:f0:8a:06:
         fa:17:71:74:a4:37:99:07:cb:cf:b9:63:25:62:cb:43:76:59:
         0b:33:d6:c7:33:48:cd:bf:1e:fb:ce:a1:73:56:e1:8a:34:98:
         6e:3e:0f:6e:89:0d:18:86:06:1d:d5:ab:9b:74:27:fb:16:38:
         12:dd:a8:00:7d:51:ce:c8:28:f9:74:8f:49:43:36:d6:6d:01:
         80:00:8a:81:5c:27:6c:4b:2c:dc:ed:a7:49:19:a3:1b:7b:8f:
         b9:ee:fb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----