Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e33312e302f32342d3234203d3e203531323032.roa
File:                     3133312e37322e33312e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          jr/W7TDieU7efWptQOb0nn8DP3pC2eHAqY+4MkmQlJU=
Subject key identifier:   97:A7:B2:E4:08:DB:BC:E7:2C:49:3E:3D:8F:AA:9C:79:7A:7D:F0:9E
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       70726212902CEC9ABF5B05768EB0E02599703D75
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e33312e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:02 +0000
ROA not before:           Mon 08 Jul 2024 00:15:02 +0000
ROA not after:            Mon 07 Jul 2025 00:20:02 +0000
asID:                     51202
IP address blocks:        131.72.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:72:62:12:90:2c:ec:9a:bf:5b:05:76:8e:b0:e0:25:99:70:3d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:02 2024 GMT
            Not After : Jul  7 00:20:02 2025 GMT
        Subject: CN=97A7B2E408DBBCE72C493E3D8FAA9C797A7DF09E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:99:35:0e:08:07:f8:91:8d:7b:f5:07:ed:
                    a5:b1:a3:26:de:7e:a4:68:8e:e5:e1:ae:c6:5b:79:
                    38:72:f6:a7:b9:5e:31:27:25:59:77:60:54:08:7b:
                    e9:fe:3d:0a:56:c4:f2:da:bf:3b:95:e5:66:9f:14:
                    2f:cf:99:db:df:49:ad:44:50:d9:20:dd:8d:74:aa:
                    21:35:66:ef:a3:2d:04:53:54:02:11:2d:73:b3:dc:
                    4e:ca:39:0a:9a:01:e6:e6:c7:ee:da:c2:8c:6a:b3:
                    fd:61:e5:53:49:4a:cd:3e:62:aa:39:38:eb:d3:6b:
                    ca:f5:07:e6:92:3f:03:95:72:e4:41:43:09:ed:8e:
                    60:58:6b:94:65:72:2b:8e:7e:6e:99:06:b0:72:fe:
                    1b:5d:03:b2:f1:0a:ef:a0:33:71:0b:1f:3f:41:08:
                    18:82:68:6d:52:3a:d6:88:af:73:0e:28:da:e3:ac:
                    be:6b:44:8f:99:88:08:04:d1:86:20:fc:4a:16:b9:
                    9d:1c:e0:c4:33:87:55:b8:d8:7a:ac:84:9f:2e:4e:
                    05:12:d2:7c:c1:ff:7c:26:7f:e9:23:a5:59:6f:64:
                    c5:f6:90:2d:20:72:3e:1e:ae:b1:e5:39:0f:7d:af:
                    70:3e:47:22:74:99:ed:01:51:c8:25:1b:cf:c2:66:
                    4a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A7:B2:E4:08:DB:BC:E7:2C:49:3E:3D:8F:AA:9C:79:7A:7D:F0:9E
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e33312e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:73:6b:f3:a9:c0:f0:92:7f:37:ae:75:96:35:0c:c2:ee:65:
         dd:51:76:16:c0:df:ca:b5:06:b2:29:f3:38:17:9c:19:53:b8:
         ec:4c:e3:4e:13:85:ee:a9:e6:25:1b:8a:57:9b:1f:9c:04:e0:
         8c:d8:f5:0f:cf:81:c3:f8:c1:20:d6:ed:32:cc:2a:66:38:27:
         90:5f:35:fc:7a:16:15:87:e9:1b:2c:4c:71:88:d0:78:53:fb:
         db:5b:d4:00:41:ac:04:f6:91:95:bc:b0:f9:c1:09:b1:a1:9d:
         75:15:e6:85:d3:4c:af:a5:8d:c4:c1:d0:3e:28:70:1f:1e:6f:
         e2:ad:b6:e1:0d:7a:29:71:d1:f6:bb:52:b1:91:9b:1d:e1:c5:
         bc:f8:3a:ba:ca:fd:76:38:97:84:c7:98:77:e9:4e:7b:29:e7:
         e3:9a:bc:53:67:e6:38:8f:bc:f9:5c:93:e4:bc:2e:38:a9:e3:
         55:5e:88:74:f9:5e:36:bc:93:7d:63:a7:32:a6:8b:69:99:24:
         94:2c:61:a9:42:37:bc:a3:ba:e3:3b:44:65:37:f5:a0:32:d2:
         df:f6:e8:69:63:f9:89:47:2a:39:4d:25:cd:ba:fc:51:a9:50:
         64:63:e7:18:11:8b:b8:e1:36:cd:29:87:2b:23:4b:6c:fe:c1:
         f2:88:e4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----