Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231342e302f32342d3234203d3e203531323032.roa
File:                     3139302e3130372e3231342e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          RXAUiJpXE2YJ/LpXlQH+mgQWpPSpsPu2NgrlfUVjyM0=
Subject key identifier:   C5:2E:9E:D5:2B:73:9E:6C:A6:13:58:CC:1D:64:7E:A1:2C:4F:4C:51
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       4C795A71E73CD42B70AC25B00377956DE700AF2B
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231342e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:02 +0000
ROA not before:           Mon 08 Jul 2024 00:15:02 +0000
ROA not after:            Mon 07 Jul 2025 00:20:02 +0000
asID:                     51202
IP address blocks:        190.107.214.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:79:5a:71:e7:3c:d4:2b:70:ac:25:b0:03:77:95:6d:e7:00:af:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:02 2024 GMT
            Not After : Jul  7 00:20:02 2025 GMT
        Subject: CN=C52E9ED52B739E6CA61358CC1D647EA12C4F4C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:89:e5:19:bc:e5:a0:d2:e8:81:66:81:9a:
                    e5:e5:41:37:08:e4:77:ac:b0:e0:41:f1:e6:a7:26:
                    23:c0:1a:d0:69:61:bd:ba:23:ee:a0:b6:91:a4:79:
                    39:6b:bc:11:bd:5f:c8:15:1c:15:11:a5:e5:31:10:
                    a9:d9:73:91:c9:9c:c6:a3:42:11:3f:f7:55:b8:31:
                    ef:15:ab:22:66:14:ff:bb:27:c6:f9:01:cf:78:43:
                    39:b9:51:b8:43:9f:5e:19:91:04:a3:13:63:3e:de:
                    ff:17:ad:14:fd:6e:fa:d5:f0:42:b4:d7:30:cd:d0:
                    d8:41:1a:5a:60:ff:ed:c9:43:7c:da:89:74:d3:69:
                    81:2e:ec:af:15:4d:4b:d1:49:20:11:64:9d:08:0a:
                    47:e6:8a:d9:fc:af:fc:48:fa:06:c0:d3:18:98:3b:
                    45:78:24:ff:3f:c5:0e:51:0d:5d:47:99:4e:e3:e9:
                    cb:32:9f:d6:a1:04:58:42:98:ae:3a:b2:08:35:e6:
                    9a:b4:59:e4:05:57:1a:3f:44:17:92:6f:39:fa:17:
                    55:24:be:09:ef:3a:f8:c0:da:91:cc:00:da:34:8f:
                    7e:d6:ac:ca:37:2a:27:75:04:7a:09:9b:32:dc:09:
                    eb:3a:e6:66:aa:d3:9a:26:e6:00:b3:95:e6:82:50:
                    f1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2E:9E:D5:2B:73:9E:6C:A6:13:58:CC:1D:64:7E:A1:2C:4F:4C:51
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231342e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:e2:5c:bf:c2:41:4f:ef:fe:ca:2c:3d:70:41:ce:f7:a3:35:
         f7:bf:d5:ca:f4:c3:6d:e5:ec:35:b8:30:08:00:09:7d:a4:4c:
         ec:38:0c:a7:63:8a:ed:6b:f6:3d:f6:d0:e0:4b:ba:48:c2:d5:
         2c:8b:ac:74:03:6a:b4:60:d4:cc:a0:14:86:db:c3:c0:24:35:
         fe:dd:5b:f3:e3:87:16:7a:8a:53:3e:c6:ed:00:92:62:f5:49:
         47:31:17:a6:fc:4a:96:f4:e7:88:82:13:e4:48:c4:17:59:3b:
         b7:50:83:7a:b1:31:1e:52:73:a8:08:cb:0b:72:3d:13:fe:d8:
         d7:23:2d:79:56:cf:f5:b0:a5:8e:6b:04:35:81:49:53:5c:81:
         8c:45:b7:a8:64:9b:3e:ae:48:13:3b:46:51:3b:18:cd:d0:17:
         e6:9e:49:38:f6:08:3a:8e:5f:8c:2f:cd:23:3b:57:0b:ea:0d:
         73:d9:98:64:77:ff:8d:f3:9c:e7:31:0a:25:cd:5f:d6:32:45:
         40:dc:9a:ce:0b:6f:d1:cf:b9:2a:f4:09:52:4d:3f:6c:6c:b3:
         53:72:f8:6c:22:01:fd:81:5b:30:c0:4e:13:44:44:fe:99:c2:
         91:03:7a:41:1e:08:b0:c1:f4:f3:62:c2:ae:48:a6:ad:f0:82:
         62:4c:f0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----