Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32382e302f32322d3234203d3e203531323032.roa
File:                     3133312e37322e32382e302f32322d3234203d3e203531323032.roa (raw, json)
Hash identifier:          4wCkLraLz6eHi7jNDESFjughMnwxUNDzcGvq4v2qFa4=
Subject key identifier:   0F:00:E3:87:38:30:11:04:C9:C4:E9:CD:5D:FB:33:B0:B9:53:B4:99
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       2742303EABDDD039F338B25345FDACC4E70B12E2
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32382e302f32322d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:40:00 +0000
ROA not before:           Mon 08 Jul 2024 00:35:00 +0000
ROA not after:            Mon 07 Jul 2025 00:40:00 +0000
asID:                     51202
IP address blocks:        131.72.28.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:42:30:3e:ab:dd:d0:39:f3:38:b2:53:45:fd:ac:c4:e7:0b:12:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:35:00 2024 GMT
            Not After : Jul  7 00:40:00 2025 GMT
        Subject: CN=0F00E38738301104C9C4E9CD5DFB33B0B953B499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c4:f3:6f:1a:8e:b3:2d:f6:74:aa:a8:b3:d0:
                    02:df:31:d6:32:54:e3:f4:77:41:6e:f3:77:c9:66:
                    ea:46:98:33:34:a8:a7:04:7d:ac:63:f6:a2:d3:54:
                    6e:c5:13:f0:48:de:8e:bd:0c:da:3b:66:d2:f9:d1:
                    c1:f9:ca:49:fa:1e:21:08:b5:10:39:36:68:52:8c:
                    75:5e:26:37:1b:a7:72:68:17:1a:c2:e9:4f:ec:e9:
                    51:cc:63:ee:c4:70:f2:63:6e:b1:31:f0:4b:33:ca:
                    7c:aa:72:b1:81:26:3d:ba:88:1a:5c:d5:a1:08:4d:
                    47:51:91:20:ba:6b:67:d4:f5:a0:7b:04:af:51:ed:
                    f1:4f:1b:43:55:66:e2:a5:72:b5:be:14:85:6d:5e:
                    10:88:7d:b6:44:d1:50:38:b7:ab:34:d8:04:59:3a:
                    90:04:30:0c:ca:8d:22:83:21:36:6f:c0:42:e4:ff:
                    b6:21:94:1b:ef:a0:88:89:d6:1a:7e:2f:82:76:1e:
                    79:93:25:e4:c8:e6:55:fa:53:89:1f:57:cc:7d:a0:
                    73:f2:4b:8c:ad:f3:cb:ce:3c:04:7a:7b:35:37:88:
                    d1:ae:aa:49:b7:1f:59:c3:3f:b4:28:e0:1a:f4:9e:
                    4c:bc:5d:80:a0:4c:d2:6b:4c:b5:99:0e:06:fd:b5:
                    71:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:00:E3:87:38:30:11:04:C9:C4:E9:CD:5D:FB:33:B0:B9:53:B4:99
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32382e302f32322d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:9b:5c:74:17:d8:9d:27:bf:5c:3a:86:80:ab:08:57:a7:4d:
         4a:b9:65:bf:f8:b2:e2:ab:79:09:63:33:89:dd:41:ed:53:e7:
         36:50:e4:ab:f9:db:cb:ba:b3:cb:2c:95:3d:07:e2:3e:58:ea:
         c3:ac:13:20:0e:36:67:7f:dd:74:8d:94:c3:44:43:78:09:11:
         8e:2e:97:f7:73:90:3f:a5:1e:65:a1:33:ea:d3:f3:8a:3b:32:
         7e:47:36:82:15:a1:a1:ee:d1:47:c9:d9:9f:ae:99:0a:61:83:
         49:5f:e3:84:76:74:b4:21:5a:5b:a0:84:b0:ca:98:de:0d:0d:
         73:57:74:d0:b1:4d:f1:4c:46:36:97:b0:8a:02:6c:0c:ca:ed:
         6b:02:a3:03:d1:23:82:d4:47:b9:91:9e:fd:c4:fb:93:20:ab:
         9f:d0:d6:ec:b3:38:3b:5e:e3:51:8d:8d:53:69:75:12:70:fd:
         2b:7c:73:b6:0a:f7:13:08:0d:ec:5b:e9:01:ab:71:70:ae:5f:
         f2:75:52:cf:76:5b:d9:76:41:38:40:1a:5a:87:ae:b6:0b:e5:
         ca:3c:60:18:ef:31:41:7a:d3:c7:c6:f3:95:72:b3:42:e4:17:
         08:e2:97:db:a9:d7:ad:97:98:95:f0:81:02:25:bd:37:18:57:
         42:3c:6e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----