Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e39382e302f32342d3234203d3e20323632313435.roa
File:                     3139302e3231312e39382e302f32342d3234203d3e20323632313435.roa (raw, json)
Hash identifier:          Cibzwfo3GqGDF2U0vHqsp/hH93yC+RwxKj3XK3srOjI=
Subject key identifier:   44:5D:4D:70:DC:7E:AA:91:86:13:7B:C2:E5:E3:D8:53:6B:1C:BE:41
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       5207FCBEBF64162A324B855F7A9E70CAEAA46607
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e39382e302f32342d3234203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:15 +0000
ROA not before:           Tue 05 Mar 2024 17:42:15 +0000
ROA not after:            Tue 04 Mar 2025 17:47:15 +0000
asID:                     262145
IP address blocks:        190.211.98.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 08 Aug 2024 21:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:07:fc:be:bf:64:16:2a:32:4b:85:5f:7a:9e:70:ca:ea:a4:66:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:15 2024 GMT
            Not After : Mar  4 17:47:15 2025 GMT
        Subject: CN=445D4D70DC7EAA9186137BC2E5E3D8536B1CBE41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:37:40:45:c9:e9:2f:54:2b:7d:8f:29:ac:96:
                    72:92:79:00:1f:4d:4b:35:93:cf:ff:f2:be:af:96:
                    9c:7a:e9:9c:06:f1:3b:ea:66:c7:9d:49:0e:e6:9a:
                    ff:b7:0b:bb:3e:e3:a8:92:45:79:38:5c:31:e8:92:
                    39:6f:67:79:91:da:15:8f:5a:e7:dd:85:c9:2d:3e:
                    1d:2b:83:db:d7:10:57:62:7a:02:24:60:89:80:03:
                    04:57:4c:d7:d0:38:77:bd:d7:63:05:95:73:fe:09:
                    8a:74:94:7d:4c:ad:08:1c:0a:77:6c:03:38:0f:1d:
                    aa:a1:ca:59:6c:74:8f:b0:db:2f:0c:76:16:08:f0:
                    1b:2d:93:eb:3b:41:05:12:72:10:08:73:44:f3:58:
                    f3:89:d6:d4:f2:a4:31:8a:c5:45:c6:6f:60:5e:d3:
                    44:2f:da:10:19:57:e3:90:6a:31:8f:91:37:bc:f0:
                    1a:4c:0b:e3:df:23:22:77:ea:bc:46:e9:6d:fa:a3:
                    b7:92:c5:dc:d1:dc:dc:ea:f6:29:b6:26:db:68:65:
                    27:5f:7b:e5:fe:0f:9c:17:1c:7c:0b:a4:9f:99:77:
                    07:bb:c7:ee:29:28:03:1c:55:fe:74:49:04:f4:68:
                    ea:64:09:b8:59:74:aa:eb:c3:8c:1d:5d:b1:36:1e:
                    67:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5D:4D:70:DC:7E:AA:91:86:13:7B:C2:E5:E3:D8:53:6B:1C:BE:41
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3139302e3231312e39382e302f32342d3234203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:1b:9f:ca:a1:3f:89:ba:57:d5:4f:18:8a:9f:89:c0:c4:49:
         0b:d7:68:39:c9:01:88:44:c0:bc:ef:d1:d7:b7:45:80:4b:b4:
         84:49:1f:aa:68:dc:7c:86:7d:a2:f4:3c:98:a4:87:5c:86:4a:
         29:57:18:0d:a5:d1:90:cb:70:ce:f8:5d:c8:9a:ba:da:d7:33:
         7e:1d:80:e7:89:97:b5:83:2a:52:37:00:a1:84:32:dc:22:0c:
         94:ba:86:3a:ec:81:28:7b:ea:6e:06:19:ac:f6:8a:99:79:fa:
         9a:e1:e3:dd:c1:90:18:04:7e:a0:4c:1c:5f:00:1c:97:fa:e1:
         ed:17:d9:3f:2e:23:3e:60:13:de:81:fc:9c:cd:e3:c6:36:13:
         28:7f:d6:eb:42:b7:b5:25:63:f5:fb:96:58:a3:b7:8e:f4:21:
         fe:f7:67:49:5c:42:fd:52:d3:bd:a7:8e:ab:bf:88:d7:23:3e:
         c4:68:86:a0:c2:39:1f:d9:d8:8d:a0:2d:7c:d4:b0:5d:f6:7c:
         23:03:04:8a:8d:4c:f7:40:c4:da:bc:1f:ff:3b:e2:fc:5b:59:
         6f:83:c8:be:2d:7a:0e:d9:95:65:48:3c:90:48:7e:59:8b:e2:
         60:19:28:bb:29:21:28:ed:3b:0c:8a:cc:99:28:3d:91:d4:d1:
         6d:87:c6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----