Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131322e302f32342d3234203d3e203531323032.roa
File:                     3139302e31332e3131322e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          EJLPtfkaDbydRKhpGaD4Pf2NKt8FQJBeFXBkUlL6WDw=
Subject key identifier:   BF:53:1B:5C:04:1C:E2:BC:52:75:A1:62:36:10:A8:AE:CC:73:98:69
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       25DAB7D24AF47929B7E03D7983F399EEA27EA912
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131322e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:08 +0000
ROA not before:           Mon 08 Jul 2024 00:15:08 +0000
ROA not after:            Mon 07 Jul 2025 00:20:08 +0000
asID:                     51202
IP address blocks:        190.13.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:da:b7:d2:4a:f4:79:29:b7:e0:3d:79:83:f3:99:ee:a2:7e:a9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:08 2024 GMT
            Not After : Jul  7 00:20:08 2025 GMT
        Subject: CN=BF531B5C041CE2BC5275A1623610A8AECC739869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d5:f1:66:18:e3:0b:7a:8e:d1:e9:8c:42:de:
                    f0:9e:8e:fa:c7:d9:31:4f:84:0c:36:9a:ae:36:aa:
                    5c:f8:3b:78:06:42:50:3e:89:be:21:c3:19:b0:a5:
                    3e:af:f0:39:0c:32:01:f0:f8:a9:3a:6d:78:a5:f0:
                    c1:4d:09:50:de:e0:d6:9e:80:16:05:82:2b:ee:f5:
                    8c:95:cb:28:49:81:48:9d:a0:19:c7:02:5e:c8:2e:
                    59:74:51:f1:cd:60:4d:94:23:ac:34:05:10:e9:37:
                    5e:93:67:86:86:7c:7d:8d:41:78:59:ed:d7:58:e3:
                    d2:2e:eb:16:64:7a:e6:7f:e2:4b:05:2d:13:df:72:
                    82:11:af:8a:02:e5:a3:ff:f3:b0:0d:94:3b:34:6b:
                    04:37:a4:c0:27:a9:c1:ac:64:19:9c:07:9a:e4:42:
                    01:a8:7f:82:36:f8:ac:11:bb:37:e2:ff:9a:81:e3:
                    49:0b:32:79:0a:8c:3b:11:55:a5:bd:f0:18:8c:bf:
                    a1:35:df:ea:d6:e1:6d:96:55:70:b1:f3:1d:33:06:
                    e2:34:86:27:e4:c5:31:ed:92:17:7f:48:f9:d6:b8:
                    16:fb:48:ed:ba:a8:de:87:3b:4b:87:02:19:7d:21:
                    61:a4:2e:de:33:a0:c9:cf:cb:83:0a:26:3e:17:95:
                    ee:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:53:1B:5C:04:1C:E2:BC:52:75:A1:62:36:10:A8:AE:CC:73:98:69
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131322e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:ee:b9:31:c1:4e:2d:f6:85:79:49:ec:e4:46:c5:b5:0d:c6:
         b3:8b:74:11:72:ae:bc:6b:af:4c:6e:e6:52:99:59:5e:b6:c4:
         99:b1:b4:c1:ef:22:e0:0f:24:ee:09:84:ab:70:88:4b:c4:59:
         fc:d3:91:2a:70:30:10:2b:44:5d:44:fa:b1:86:55:71:f0:0f:
         76:98:52:99:39:39:24:2e:10:47:2b:a4:a5:0d:e9:75:94:5d:
         0b:f4:12:a9:e8:6e:26:fa:62:89:48:b9:97:f7:fe:53:c1:7b:
         ad:ff:fd:3f:5a:49:05:14:ef:1b:77:4e:b5:87:ec:86:3b:49:
         ba:49:4c:21:b9:9d:ab:e6:63:47:32:8b:05:e2:23:01:f0:03:
         f2:57:dd:a3:39:85:71:bc:22:3e:96:0a:3d:85:ab:63:7e:cd:
         5f:69:e4:5b:44:05:90:2d:2b:ad:a5:fb:8c:6a:83:80:78:ad:
         7c:6c:fc:b9:59:5a:0c:b5:c7:96:6e:0c:03:c2:4b:38:40:1f:
         99:41:16:a3:a7:62:0f:30:ec:bb:6a:bb:d3:99:3f:aa:11:59:
         6d:16:4e:57:fb:05:20:38:c5:26:5b:6b:fe:1f:65:e6:58:1e:
         1f:4b:3c:44:d1:cd:ec:b1:8c:68:67:be:9f:05:9e:e9:a5:c5:
         45:cb:cc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----