Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231332e302f32342d3234203d3e203531323032.roa
File:                     3139302e3130372e3231332e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          imAfx6T9nZ/TOaK/gdDvbWt3UT3Gx2lV61XZyLZBe+4=
Subject key identifier:   1D:88:29:47:3E:BB:E3:35:50:56:33:D5:7E:81:AD:F4:CF:33:26:79
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       434FBF2E5838FF839AE74E781E16FB6E4461A167
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231332e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:04 +0000
ROA not before:           Mon 08 Jul 2024 00:15:04 +0000
ROA not after:            Mon 07 Jul 2025 00:20:04 +0000
asID:                     51202
IP address blocks:        190.107.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4f:bf:2e:58:38:ff:83:9a:e7:4e:78:1e:16:fb:6e:44:61:a1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:04 2024 GMT
            Not After : Jul  7 00:20:04 2025 GMT
        Subject: CN=1D8829473EBBE335505633D57E81ADF4CF332679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b2:5d:a3:c3:93:45:9a:8b:95:85:95:37:c5:
                    5c:e4:33:f3:cb:db:59:d3:6c:91:9f:aa:dd:0c:a0:
                    95:dc:fe:ca:ca:ec:8c:00:88:41:3f:2e:d3:51:03:
                    9a:94:b1:6b:1f:2a:5b:07:a0:a4:7a:90:dd:ef:a1:
                    4e:35:77:7a:cf:85:62:21:3f:40:b0:c8:55:c3:04:
                    33:17:f5:65:72:cc:a1:d0:e4:fa:f3:69:f9:73:a6:
                    a0:a2:a0:73:7c:af:3b:17:fb:5e:17:1a:dd:de:f3:
                    c4:64:85:52:30:15:d2:62:a1:e0:20:df:eb:4d:8b:
                    b9:5f:44:f6:db:80:ba:e6:42:0f:5c:7e:58:2b:93:
                    14:56:7a:db:bb:d6:82:8b:b3:fc:21:ce:ed:69:20:
                    c2:6f:ed:52:cd:7f:92:c3:76:26:5b:4a:04:5f:d6:
                    90:4d:61:44:49:1e:bf:c9:00:d7:53:4e:ca:85:37:
                    1f:53:a3:bc:9a:70:dc:a2:e8:3c:56:63:5d:e1:2c:
                    58:c0:0c:35:e6:c1:89:82:41:dc:22:2f:01:67:d3:
                    85:c7:46:6e:22:84:8e:a6:73:8a:9c:91:06:4f:c1:
                    d4:47:ed:b0:05:78:f4:12:73:46:58:78:b2:38:84:
                    69:44:9c:a9:a0:d7:86:e9:13:3a:4d:a1:87:0e:b9:
                    f0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:88:29:47:3E:BB:E3:35:50:56:33:D5:7E:81:AD:F4:CF:33:26:79
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231332e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:d4:a4:94:91:c3:5b:e2:3b:1c:b7:bc:6d:94:b6:77:a8:56:
         c7:a6:fc:f2:65:1b:2d:a0:9f:ba:f3:ee:94:2f:07:10:1e:75:
         26:8d:7a:9b:d4:10:92:5e:bf:e4:45:18:b5:dc:cf:d4:12:f9:
         91:93:7e:1c:48:1e:25:4a:f6:b4:0f:f3:46:cf:44:e8:82:4a:
         f4:7f:d9:ed:fc:7c:e2:91:87:74:e2:9c:2a:1c:d1:f7:20:b1:
         1c:bf:64:40:8b:b1:33:6a:35:79:5c:67:1f:50:0b:d0:93:5c:
         b7:ed:c0:1c:1e:e7:60:0a:53:ab:36:9e:cb:47:a4:75:1c:d5:
         cc:ad:60:8d:2d:0b:75:e8:f8:63:39:da:77:7a:d3:12:32:fa:
         87:f0:72:9b:1f:84:a8:48:0b:0a:24:6c:e1:10:de:7d:37:58:
         2b:2c:43:53:c7:fb:c9:d2:b9:9b:46:ba:20:15:e7:01:23:f4:
         3d:6f:07:92:a0:59:42:0e:bd:7c:d7:0d:48:aa:f6:c6:4b:f9:
         51:dd:33:38:20:fd:2a:29:33:cf:fe:e6:7c:82:a0:cc:b2:d7:
         36:85:57:ce:f2:c1:2c:94:26:9c:62:45:7f:7c:f7:08:02:84:
         73:bb:a2:2b:d6:eb:0f:75:b6:31:12:51:4e:c9:2e:06:a4:cc:
         46:3e:55:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----