Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/3139322e3134312e33392e302f32342d3234203d3e20323635373837.roa
File:                     3139322e3134312e33392e302f32342d3234203d3e20323635373837.roa (raw, json)
Hash identifier:          i+IAi+JU7L2DQ+KPnHQZYQS3ZatpZ6EIDVikkCk1BSU=
Subject key identifier:   87:ED:43:03:F0:31:16:6E:1D:87:92:65:03:27:B6:70:7E:16:1C:70
Certificate issuer:       /CN=7CE45D98F41C9AB7061F84A19C190414D5CB4FCA
Certificate serial:       101CAFBB54E68E078C6682B3E3324C048F512A26
Authority key identifier: 7C:E4:5D:98:F4:1C:9A:B7:06:1F:84:A1:9C:19:04:14:D5:CB:4F:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/3139322e3134312e33392e302f32342d3234203d3e20323635373837.roa
Signing time:             Tue 05 Mar 2024 17:47:13 +0000
ROA not before:           Tue 05 Mar 2024 17:42:13 +0000
ROA not after:            Tue 04 Mar 2025 17:47:13 +0000
asID:                     265787
IP address blocks:        192.141.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 06 May 2024 15:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:1c:af:bb:54:e6:8e:07:8c:66:82:b3:e3:32:4c:04:8f:51:2a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE45D98F41C9AB7061F84A19C190414D5CB4FCA
        Validity
            Not Before: Mar  5 17:42:13 2024 GMT
            Not After : Mar  4 17:47:13 2025 GMT
        Subject: CN=87ED4303F031166E1D8792650327B6707E161C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e7:e4:8a:9b:99:79:68:96:63:9c:d9:bf:f9:
                    d6:28:7e:2b:5a:c3:75:b4:35:00:ff:74:2c:95:eb:
                    eb:b4:55:7a:f5:ea:56:02:9d:e5:12:ce:a4:13:cd:
                    18:61:ed:02:42:11:39:5e:30:49:14:88:47:3c:3c:
                    2e:d3:21:df:34:2a:69:39:d4:3a:3c:ff:63:89:33:
                    59:3a:f6:28:83:83:36:5d:6b:ce:03:37:59:d3:b9:
                    4d:31:3a:2c:77:0c:b0:49:4c:e9:e0:a4:10:03:da:
                    26:10:54:0d:22:37:56:06:bd:65:65:6e:91:52:14:
                    a2:fb:ac:0b:86:36:4c:72:8b:f6:5e:96:3e:92:90:
                    6f:83:eb:57:4b:2e:12:f3:7d:99:14:6f:e6:c9:1c:
                    56:92:f9:22:45:d8:18:15:e2:68:07:be:fb:e2:32:
                    a5:0e:60:49:11:7d:d7:da:d1:0d:74:ea:41:fe:43:
                    f9:54:08:25:96:21:a8:1a:e7:f7:5f:77:d1:d0:9c:
                    97:38:da:92:c3:d3:83:e3:51:cc:bd:33:59:b1:a1:
                    1d:ed:41:88:0e:a3:05:87:99:9b:9d:04:d6:f2:4c:
                    78:de:ba:e7:c4:d2:c8:14:70:07:41:06:92:2f:8e:
                    5b:ed:fb:8e:59:bb:db:47:08:94:f1:90:50:0d:e5:
                    2c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:ED:43:03:F0:31:16:6E:1D:87:92:65:03:27:B6:70:7E:16:1C:70
            X509v3 Authority Key Identifier:
                keyid:7C:E4:5D:98:F4:1C:9A:B7:06:1F:84:A1:9C:19:04:14:D5:CB:4F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/3139322e3134312e33392e302f32342d3234203d3e20323635373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:7a:1e:d7:a6:06:d0:c1:aa:e5:a0:28:8c:05:49:76:3d:22:
         80:8e:f6:32:dd:75:ce:a8:e1:31:c5:8b:b1:1b:11:0e:85:9e:
         fc:6d:79:4b:4b:7d:30:11:84:8a:c0:35:b9:5f:9b:ec:b1:b8:
         a1:b1:ea:c9:07:26:54:3f:f4:c2:20:2a:f3:57:f4:45:b8:9e:
         93:09:dd:9a:f4:3a:65:05:93:40:4c:ed:4e:08:cc:50:9a:b8:
         3c:03:ec:90:d7:6e:8d:9d:ec:a6:66:99:91:8e:07:86:dd:a0:
         46:d8:a9:91:d6:82:f5:f8:d8:ef:e7:78:01:1a:e0:fa:8f:b7:
         1c:5c:af:68:98:60:05:b9:00:bc:12:8a:2b:c7:fe:d2:e3:a2:
         ff:f2:86:c0:1a:23:2b:5f:b3:7c:9c:04:fd:56:87:cd:3c:b4:
         68:04:90:79:6d:9a:e8:8d:52:26:cb:db:87:cc:ec:ef:7a:bc:
         90:f0:df:e7:ce:69:67:96:bc:4e:14:15:00:34:4d:20:89:a4:
         28:95:f3:da:3f:49:0e:7b:1c:b9:c9:95:5a:21:d7:fd:fe:ec:
         6a:32:12:e3:31:bb:33:fb:bf:6a:81:50:6b:8d:fa:f5:ae:53:
         db:b4:3a:0a:dc:d6:75:d7:d5:ee:38:8e:37:d3:85:6c:47:33:
         57:b7:75:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----