Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32322d3234203d3e203531323032.roa
File:                     3139302e3130372e3231322e302f32322d3234203d3e203531323032.roa (raw, json)
Hash identifier:          zUnqvWL8b9cbmJ24gcqZUM0dGuBdw1pAP0CTS8UymAg=
Subject key identifier:   20:5E:DE:90:D9:3A:9E:C5:F7:80:C6:14:6B:88:24:E3:17:97:27:92
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       577D53016A3CDF3A6EF646CFEEAA782FE161214F
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32322d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:40:00 +0000
ROA not before:           Mon 08 Jul 2024 00:35:00 +0000
ROA not after:            Mon 07 Jul 2025 00:40:00 +0000
asID:                     51202
IP address blocks:        190.107.212.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:7d:53:01:6a:3c:df:3a:6e:f6:46:cf:ee:aa:78:2f:e1:61:21:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:35:00 2024 GMT
            Not After : Jul  7 00:40:00 2025 GMT
        Subject: CN=205EDE90D93A9EC5F780C6146B8824E317972792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dc:70:5a:a4:20:60:9d:e5:ee:79:3a:e3:34:
                    c3:1c:a9:a2:24:7c:1a:03:5f:62:23:c4:75:53:9a:
                    8d:71:c8:66:ee:43:be:86:29:f8:f4:ab:96:0b:94:
                    08:73:d3:be:b7:b9:1f:42:f8:45:7e:f3:04:f1:ec:
                    a6:ae:11:1c:75:b7:cb:06:fd:0b:5b:b8:0d:bc:f5:
                    15:be:24:19:e1:5d:ee:8c:72:75:3b:40:5b:ca:65:
                    f6:7c:f4:05:e0:60:fc:04:f2:fd:21:eb:61:6a:c0:
                    0f:9f:44:7a:fc:00:d0:a1:dc:07:d7:07:de:16:b2:
                    07:84:45:03:5a:2b:c3:f3:58:e6:9d:bc:7a:7c:ef:
                    67:a9:31:14:10:16:3e:2d:69:81:30:88:48:6c:1f:
                    56:6f:03:dd:9c:c7:ba:da:f4:f8:d5:0d:56:b9:d4:
                    0e:8b:c5:36:b4:62:72:b0:f7:b8:15:11:ae:45:61:
                    c4:c3:37:43:0f:06:a2:26:d4:82:e3:27:86:ac:09:
                    ce:37:82:61:1b:e8:a2:44:61:d1:df:50:5a:04:84:
                    65:13:09:ab:7f:2d:e9:17:70:86:2d:8a:36:d9:8c:
                    0a:c8:67:04:27:c6:0c:46:9a:63:f9:9e:82:f6:96:
                    b6:ea:6a:be:a8:17:7e:83:ce:45:65:3c:d6:d3:c1:
                    2e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5E:DE:90:D9:3A:9E:C5:F7:80:C6:14:6B:88:24:E3:17:97:27:92
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231322e302f32322d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:b8:1b:ff:ae:9b:90:f9:74:b6:d2:ff:04:ba:3e:d1:f7:c4:
         28:9c:73:3e:08:18:ee:a8:e7:be:7f:93:5c:f6:74:cc:57:d3:
         25:b6:21:89:c6:a8:8c:ca:38:b6:25:aa:67:4a:fd:16:96:31:
         6c:c4:eb:71:b8:b0:9a:27:35:82:53:aa:24:cd:92:81:39:f2:
         af:e9:ca:f1:df:0c:8b:4c:55:da:d3:4d:cf:ad:28:32:18:80:
         4b:e1:48:88:25:e4:8d:0e:29:cb:d6:fd:c3:85:25:66:7e:60:
         fd:05:1d:bd:6f:d3:ee:e9:2e:17:0b:ed:9d:ec:e1:d1:9e:b7:
         63:a8:94:1d:41:52:b0:07:5e:54:c1:02:5e:92:9b:2a:b0:28:
         b9:79:56:d5:4d:f7:28:64:75:5a:5a:3b:e9:60:2b:8d:e2:5c:
         d9:fa:2b:1f:62:6a:96:e9:50:38:6a:60:f0:4c:df:14:53:b0:
         40:1c:13:e5:2c:a6:7f:b3:ca:07:53:e8:cb:c1:da:e5:4d:4b:
         0c:84:2e:e5:07:73:1f:1e:27:12:fa:a8:c6:b4:5a:28:b7:d3:
         39:f0:cf:94:5d:16:40:1c:17:39:1c:08:a5:69:ff:ff:8e:91:
         8b:ea:57:c0:c0:ac:01:55:f2:c6:06:9f:0d:ed:19:5a:16:ce:
         e6:b7:2f:5b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUV31TAWo83zpu9kbP7qp4L+FhIU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNDA3MDgwMDM1MDBaFw0yNTA3MDcwMDQwMDBaMDMxMTAvBgNV
BAMTKDIwNUVERTkwRDkzQTlFQzVGNzgwQzYxNDZCODgyNEUzMTc5NzI3OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT3HBapCBgneXueTrjNMMcqaIk
fBoDX2IjxHVTmo1xyGbuQ76GKfj0q5YLlAhz0763uR9C+EV+8wTx7KauERx1t8sG
/QtbuA289RW+JBnhXe6McnU7QFvKZfZ89AXgYPwE8v0h62FqwA+fRHr8ANCh3AfX
B94WsgeERQNaK8PzWOadvHp872epMRQQFj4taYEwiEhsH1ZvA92cx7ra9PjVDVa5
1A6LxTa0YnKw97gVEa5FYcTDN0MPBqIm1ILjJ4asCc43gmEb6KJEYdHfUFoEhGUT
Cat/LekXcIYtijbZjArIZwQnxgxGmmP5noL2lrbqar6oF36DzkVlPNbTwS6lAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUIF7ekNk6nsX3gMYUa4gk4xeXJ5IwHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzMDM3MmUzMjMxMzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMxMzIzMDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvmvU
MA0GCSqGSIb3DQEBCwUAA4IBAQCMuBv/rpuQ+XS20v8Euj7R98QonHM+CBjuqOe+
f5Nc9nTMV9MltiGJxqiMyji2JapnSv0WljFsxOtxuLCaJzWCU6okzZKBOfKv6crx
3wyLTFXa003PrSgyGIBL4UiIJeSNDinL1v3DhSVmfmD9BR29b9Pu6S4XC+2d7OHR
nrdjqJQdQVKwB15UwQJekpsqsCi5eVbVTfcoZHVaWjvpYCuN4lzZ+isfYmqW6VA4
amDwTN8UU7BAHBPlLKZ/s8oHU+jLwdrlTUsMhC7lB3MfHicS+qjGtFoot9M58M+U
XRZAHBc5HAilaf//jpGL6lfAwKwBVfLGBp8N7RlaFs7mty9b
-----END CERTIFICATE-----