Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/3139322e3134312e33372e302f32342d3234203d3e20323635373837.roa
File:                     3139322e3134312e33372e302f32342d3234203d3e20323635373837.roa (raw, json)
Hash identifier:          zOPTuAkXKrm3ynVOhA/SXVSZ3rKvQVIxxel+fYVt8/s=
Subject key identifier:   08:36:B5:82:02:36:5F:9D:E2:A0:3A:F0:75:B2:95:2B:41:01:85:E2
Certificate issuer:       /CN=7CE45D98F41C9AB7061F84A19C190414D5CB4FCA
Certificate serial:       02057D3B43EB935B7C4A2B8AE1B983F637366981
Authority key identifier: 7C:E4:5D:98:F4:1C:9A:B7:06:1F:84:A1:9C:19:04:14:D5:CB:4F:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/3139322e3134312e33372e302f32342d3234203d3e20323635373837.roa
Signing time:             Tue 05 Mar 2024 17:47:13 +0000
ROA not before:           Tue 05 Mar 2024 17:42:13 +0000
ROA not after:            Tue 04 Mar 2025 17:47:13 +0000
asID:                     265787
IP address blocks:        192.141.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 06 May 2024 15:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:05:7d:3b:43:eb:93:5b:7c:4a:2b:8a:e1:b9:83:f6:37:36:69:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE45D98F41C9AB7061F84A19C190414D5CB4FCA
        Validity
            Not Before: Mar  5 17:42:13 2024 GMT
            Not After : Mar  4 17:47:13 2025 GMT
        Subject: CN=0836B58202365F9DE2A03AF075B2952B410185E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:78:b9:dc:52:16:a7:25:b6:74:ba:66:3f:94:
                    96:48:3f:07:81:82:71:a5:47:30:8e:62:94:81:96:
                    71:d8:7b:23:e6:06:f8:aa:61:b5:a6:bb:83:96:7f:
                    c0:b9:53:8c:7e:0c:66:01:71:78:fb:da:1c:0d:a6:
                    1e:ca:b8:77:42:ae:94:f9:b7:b0:13:7b:a5:6d:65:
                    a6:7f:db:43:58:74:9e:28:1b:dc:02:58:19:5a:9a:
                    f2:97:8d:1b:7c:c1:75:aa:a7:2e:bd:e1:20:23:77:
                    97:6a:c8:5a:83:fa:40:4e:0e:a1:4c:7f:0e:8e:53:
                    d5:dd:e4:44:6d:4e:01:b5:ea:fa:df:aa:bb:7c:fd:
                    e3:c2:12:a5:ff:61:86:f2:44:12:d0:70:68:e8:94:
                    f6:5f:c9:fe:85:2f:63:8c:91:28:28:74:bc:6b:83:
                    bc:cc:2f:3e:e0:fd:b1:ee:7f:18:19:04:1d:12:3e:
                    41:6b:b2:01:af:a5:f9:7d:75:54:05:f8:18:d1:f4:
                    c2:0a:e4:80:c2:2c:22:57:e8:16:4b:ef:14:01:4c:
                    fc:ee:dc:ab:ff:2b:a8:31:96:95:a1:0d:2d:a3:54:
                    a2:3b:56:2c:31:11:72:2c:20:02:61:7b:cc:ba:c1:
                    e7:fb:1f:9d:0e:5c:6d:bf:07:05:9f:32:6f:ed:61:
                    ce:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:36:B5:82:02:36:5F:9D:E2:A0:3A:F0:75:B2:95:2B:41:01:85:E2
            X509v3 Authority Key Identifier:
                keyid:7C:E4:5D:98:F4:1C:9A:B7:06:1F:84:A1:9C:19:04:14:D5:CB:4F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/3139322e3134312e33372e302f32342d3234203d3e20323635373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:dc:87:40:96:c7:cb:90:6c:7b:54:9d:84:b2:f2:f0:4d:a9:
         17:fc:95:ac:a7:aa:12:24:72:b8:2e:d0:1b:ac:15:90:78:4e:
         7f:e8:6c:d2:95:85:f4:d0:cd:6d:71:cc:0c:f5:68:b9:7f:d2:
         f9:9e:e7:c8:1e:70:84:71:86:58:7e:30:e5:e9:d7:ba:f1:9a:
         a1:74:da:d0:29:ca:b4:c1:f5:b9:72:1c:b7:a0:5d:91:24:e9:
         bd:d1:86:0b:d9:97:bc:bf:6f:71:3d:fb:47:aa:eb:89:5e:bc:
         49:6c:d6:27:f1:40:76:5f:18:f8:3a:17:06:33:4b:aa:f7:d4:
         8d:d7:6a:95:8c:97:b7:a7:a1:61:4b:bc:64:29:76:3e:38:d1:
         d5:f4:84:ee:d5:06:62:8c:c3:b1:8d:e7:eb:67:f6:7f:10:f0:
         db:88:30:4e:71:c2:eb:3c:4e:d0:17:c1:78:4d:15:a3:af:f0:
         f2:78:80:03:5d:df:79:98:57:ce:33:51:5d:46:67:ce:a7:96:
         b2:25:b3:82:09:fa:7f:47:79:41:c8:cd:ae:29:dc:92:39:cb:
         30:3d:d1:d5:84:dd:67:4f:ed:ca:ea:76:cb:e4:dc:18:6d:3d:
         07:d0:17:c2:0f:8b:18:29:ec:ca:3e:71:db:8a:c5:a9:d4:ee:
         fc:99:60:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----