Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131322e302f32322d3234203d3e203531323032.roa
File:                     3139302e31332e3131322e302f32322d3234203d3e203531323032.roa (raw, json)
Hash identifier:          SYyiMxuNvKKe4xUaVg21viBbIltsxwuPaB7LGgh/Rlw=
Subject key identifier:   BF:81:85:5E:B2:11:95:DB:69:A5:B8:84:9C:74:46:68:24:5F:FB:26
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       50D5C2587D65712B26848D782847096715150026
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131322e302f32322d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:40:01 +0000
ROA not before:           Mon 08 Jul 2024 00:35:01 +0000
ROA not after:            Mon 07 Jul 2025 00:40:01 +0000
asID:                     51202
IP address blocks:        190.13.112.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d5:c2:58:7d:65:71:2b:26:84:8d:78:28:47:09:67:15:15:00:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:35:01 2024 GMT
            Not After : Jul  7 00:40:01 2025 GMT
        Subject: CN=BF81855EB21195DB69A5B8849C744668245FFB26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5a:5b:82:fc:cb:a2:01:3c:f0:27:aa:8e:65:
                    93:0b:ad:07:a0:f5:ef:5b:79:68:65:e3:a8:bf:4a:
                    38:d9:6b:07:fd:a4:d6:07:bc:b0:d3:ea:99:d8:4f:
                    ff:53:d7:37:1f:c8:ee:ae:0a:e5:cd:e1:7d:78:f4:
                    84:4f:21:21:bb:54:80:0d:cb:d2:f5:e4:d0:ab:1d:
                    9e:90:a6:f2:58:06:d0:9f:b8:34:91:da:6d:81:9f:
                    3b:c2:60:ed:11:7a:b2:00:34:b0:bb:7e:63:cc:bb:
                    b5:60:ba:12:a1:a3:56:a7:58:03:3a:2c:99:20:09:
                    cb:a7:09:2f:eb:ab:1a:2c:9c:fb:41:33:ac:be:fc:
                    fa:37:59:56:a8:32:f2:fe:ca:46:f1:d9:2e:e4:8d:
                    44:03:2e:a6:18:4c:cc:d0:74:a7:c7:e7:c5:de:9b:
                    f9:98:f5:d6:91:93:7a:c3:16:8c:d3:ca:23:45:0b:
                    b4:6d:4d:50:18:46:fe:f8:ec:cd:8c:f6:f3:82:02:
                    b9:5d:3d:5a:b9:26:74:ca:08:6e:e3:c4:51:c6:2a:
                    f3:9b:77:b2:42:10:e9:a0:b2:eb:70:eb:8b:99:a8:
                    dc:66:20:dc:0e:d9:e5:3f:6e:a7:c3:82:dd:5d:e2:
                    03:51:41:2a:f5:84:02:1d:c3:d9:91:28:e9:34:f8:
                    07:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:81:85:5E:B2:11:95:DB:69:A5:B8:84:9C:74:46:68:24:5F:FB:26
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131322e302f32322d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:9e:e3:fc:02:07:cf:da:ce:56:7b:d4:31:53:da:0c:9a:56:
         e7:1b:2e:18:df:46:c5:93:07:75:d7:1f:c7:dd:d7:a7:5e:9f:
         18:57:ea:69:27:eb:bd:ac:15:f7:f4:5f:fb:e8:65:6f:f1:69:
         f0:e8:5f:f0:ce:35:2c:74:8a:1e:45:4f:f6:06:bb:c7:ed:91:
         4c:57:93:14:73:9f:25:84:73:b4:12:fa:fd:c1:48:d0:d2:9c:
         6d:2d:0c:d1:98:2b:87:84:26:0d:cb:88:a0:fe:e6:a0:8e:66:
         84:a9:e7:d4:fb:12:7c:3d:88:5a:20:3c:20:71:17:e3:2a:94:
         4f:4f:d8:53:ef:71:28:01:fd:9b:cb:8b:4b:63:e6:9e:8b:54:
         3c:2a:92:da:cc:ef:43:23:c2:f6:3f:c7:a7:52:40:33:88:cb:
         d5:e9:83:eb:46:9c:bb:4d:ff:c1:3b:af:70:c4:f2:c6:9b:10:
         62:a7:55:3b:88:2f:74:41:58:f3:4d:40:8a:2f:58:28:6e:d5:
         52:b9:91:82:ad:20:6c:99:d4:86:46:d7:2f:dd:b6:96:61:0a:
         8b:ef:b6:0c:ee:12:95:ca:dd:e9:69:be:ae:7a:6d:dd:bb:94:
         b4:e6:11:2f:b0:43:80:f4:4d:3b:49:8d:05:1d:3e:67:6d:75:
         2a:2d:9e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----