Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3232302e302f32342d3234203d3e203531323032.roa
File:                     3139302e3130372e3232302e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          MZKYWPez1lLKiNwG/AhsutSIIw7Iv9xl7nGfiUT/rXQ=
Subject key identifier:   97:5D:D5:F4:C8:ED:55:E4:E6:B7:2C:20:80:B3:15:1F:18:75:AB:57
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       74F48EFE9CCCF9EB7BE786D2836549C53D34FDC1
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3232302e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:00 +0000
ROA not before:           Mon 08 Jul 2024 00:15:00 +0000
ROA not after:            Mon 07 Jul 2025 00:20:00 +0000
asID:                     51202
IP address blocks:        190.107.220.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f4:8e:fe:9c:cc:f9:eb:7b:e7:86:d2:83:65:49:c5:3d:34:fd:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:00 2024 GMT
            Not After : Jul  7 00:20:00 2025 GMT
        Subject: CN=975DD5F4C8ED55E4E6B72C2080B3151F1875AB57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:dd:7a:6e:7a:57:21:62:95:db:80:49:29:
                    0b:8c:fc:b1:bb:b8:45:f5:70:63:e1:6a:b9:d1:fe:
                    3f:fd:7d:95:e0:32:fe:97:f0:96:7a:cc:23:b6:41:
                    a6:3d:5e:13:4a:42:30:ef:b4:24:94:09:06:bc:c4:
                    df:65:5b:5b:d1:e9:d6:4a:c0:02:51:9e:3d:f4:47:
                    f4:ff:6c:0c:42:73:fe:59:87:22:aa:3e:00:fa:bb:
                    3b:27:09:73:23:af:11:aa:c8:ba:66:41:55:1c:09:
                    af:37:56:f3:61:1a:a3:19:3e:d6:6e:d3:9a:c3:5f:
                    29:db:a8:89:e2:f5:09:32:6c:09:48:c1:7d:28:9f:
                    57:fc:77:10:4d:21:7f:ae:3e:50:e8:bb:9b:23:00:
                    9b:f3:33:cd:9b:ff:10:0a:01:7f:ad:d5:1b:13:3f:
                    58:c7:6b:f7:f4:9d:fb:66:1c:aa:d9:a5:9b:a4:c4:
                    fc:92:56:66:fd:4b:94:79:a5:02:08:6d:6e:e3:91:
                    95:19:0a:7d:c4:21:9a:51:89:63:b3:13:fe:d1:e7:
                    b4:b3:8e:a4:57:62:51:57:5b:0c:e3:2c:3b:8a:58:
                    c2:15:2b:da:29:b3:07:b8:a0:e1:ea:9c:28:53:95:
                    c9:89:7d:b1:44:1f:5c:f3:97:8a:56:53:3d:50:e9:
                    93:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5D:D5:F4:C8:ED:55:E4:E6:B7:2C:20:80:B3:15:1F:18:75:AB:57
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3232302e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:57:e0:ea:68:36:73:3c:18:ab:62:67:a8:a4:79:79:be:59:
         ba:c0:89:36:19:8b:7e:e7:80:a9:08:55:e0:19:70:0e:d3:54:
         67:9b:42:b0:aa:7e:b1:ed:da:9a:2e:dd:db:4f:aa:9f:e5:7a:
         19:1d:c5:4e:32:41:c4:75:01:60:6a:17:ee:18:fe:4a:20:8a:
         57:36:65:6d:61:39:b0:db:3f:c0:42:3e:af:e0:04:0d:ac:2f:
         46:89:93:d9:1b:d8:6d:0b:c2:ec:12:7d:d3:a2:ca:85:61:58:
         aa:25:26:32:4d:86:77:e5:93:f7:9b:55:b6:7c:a1:9a:a2:5a:
         1b:82:67:c0:b8:1d:e2:71:e4:fd:b5:80:65:24:39:c4:82:6b:
         d5:b7:94:b3:de:f0:a8:b2:5e:86:93:c9:fb:38:7a:e8:59:bc:
         88:65:7b:28:95:12:dd:f6:97:51:1f:b0:5b:18:f1:2c:b0:0e:
         99:64:52:4b:4e:86:a2:bf:ae:70:a2:6f:c5:c0:04:f8:72:92:
         d5:20:c1:25:c9:dd:c0:e3:29:ea:e9:7e:cc:01:3e:71:5e:e3:
         ce:e2:48:98:ce:b4:f8:4f:be:b0:98:3a:21:31:82:50:54:5e:
         66:40:f4:67:5e:be:e2:59:1b:95:7a:d0:6b:cf:4a:db:ff:b7:
         42:17:ed:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----