Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/3138312e3233332e3136392e302f32342d3234203d3e203237393531.roa
File:                     3138312e3233332e3136392e302f32342d3234203d3e203237393531.roa (raw, json)
Hash identifier:          F2T955Kg/gC3E1ZoZ7bEECCIsalxgfw/CbGFSg1Lvwg=
Subject key identifier:   DC:21:BC:A7:FC:C7:ED:6B:C2:0F:EB:F0:75:F8:25:86:04:59:A5:7D
Certificate issuer:       /CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
Certificate serial:       4AF8B0BC0F8CA58D5318BBC0584D3134A12209A9
Authority key identifier: CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/3138312e3233332e3136392e302f32342d3234203d3e203237393531.roa
Signing time:             Fri 13 Sep 2024 17:25:00 +0000
ROA not before:           Fri 13 Sep 2024 17:20:00 +0000
ROA not after:            Fri 12 Sep 2025 17:25:00 +0000
asID:                     27951
IP address blocks:        181.233.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 17 Sep 2024 02:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f8:b0:bc:0f:8c:a5:8d:53:18:bb:c0:58:4d:31:34:a1:22:09:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
        Validity
            Not Before: Sep 13 17:20:00 2024 GMT
            Not After : Sep 12 17:25:00 2025 GMT
        Subject: CN=DC21BCA7FCC7ED6BC20FEBF075F825860459A57D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:05:b3:00:d0:ac:46:51:18:d8:98:dd:3b:4a:
                    40:dc:0f:4e:be:85:bf:95:95:b6:de:34:c9:35:42:
                    50:73:80:c6:ed:ad:44:ac:63:a7:d2:81:9b:0f:ec:
                    b9:c8:e4:79:87:39:a6:24:23:15:22:ba:31:9e:63:
                    43:d6:56:94:e2:7f:07:31:96:c7:bf:ab:d7:b0:bf:
                    94:10:6f:64:b4:ef:05:3a:37:91:4f:ee:f0:05:ee:
                    5c:13:81:35:f9:29:97:8d:ba:cc:95:68:bb:e3:6c:
                    3b:99:53:a5:ae:fe:08:92:43:03:5d:31:62:1c:dd:
                    22:09:05:a4:e7:0f:c0:87:9f:18:53:4a:b6:76:91:
                    22:48:30:d9:e2:6b:22:d1:4f:85:dc:ce:2b:24:3e:
                    39:0f:fd:9d:a3:c2:91:01:45:73:86:38:d7:88:13:
                    f4:ae:bf:d6:1f:68:93:98:24:1a:06:e5:ac:16:16:
                    57:8a:57:06:f1:62:d1:84:8f:9b:c8:8a:2b:13:aa:
                    1a:c5:8b:ad:9c:0f:ed:b8:27:b6:99:34:f4:e2:35:
                    bb:14:fb:08:a1:d4:71:9d:b1:18:16:ba:ef:d9:e1:
                    dd:b5:1d:9d:cb:ec:3a:77:b2:ba:de:99:4f:78:51:
                    2c:75:cc:45:04:55:ae:cd:35:8b:95:e7:81:e0:04:
                    6e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:21:BC:A7:FC:C7:ED:6B:C2:0F:EB:F0:75:F8:25:86:04:59:A5:7D
            X509v3 Authority Key Identifier:
                keyid:CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/3138312e3233332e3136392e302f32342d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:b6:6e:6f:04:bc:c7:97:2a:5c:38:21:d7:57:b9:07:81:ac:
         a2:a1:c8:e2:76:d9:a3:c5:78:d5:c7:ff:b2:f1:1f:60:62:db:
         b1:58:83:4a:67:a9:dc:fa:28:f3:b3:df:b2:fb:35:40:b8:aa:
         e3:4b:ee:d2:d5:d8:d9:a3:fe:e8:df:7f:29:5f:47:11:f6:2d:
         89:39:04:c3:2d:e9:b3:37:ac:fd:43:9e:3c:90:fb:94:df:eb:
         0a:bf:3e:39:49:d6:13:6f:d6:ee:c0:6b:95:66:c3:6a:7b:a2:
         ca:4d:9e:ee:50:73:15:f7:ff:bf:00:d9:41:9e:0b:0e:9e:e6:
         01:3c:76:4d:1f:86:fd:fa:e0:2b:29:37:a2:64:64:d4:ff:9c:
         72:40:00:46:70:38:4b:72:2f:be:61:5a:87:86:92:7d:b2:9e:
         c4:1b:da:49:fa:e3:29:8d:60:24:b5:67:e9:7f:76:06:fe:11:
         d5:2a:6e:1e:09:35:f4:17:97:ad:e2:e8:3e:e8:f0:89:82:79:
         f9:5b:7e:6c:0f:a0:dc:82:6f:80:64:b5:2a:a7:74:2b:9d:99:
         4c:b9:07:99:fa:b8:bd:99:3b:30:b3:ff:39:f5:fa:ed:02:09:
         44:9a:59:4d:10:88:cb:ac:92:a6:74:41:a5:fc:4a:5f:2e:d6:
         ac:24:7c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----