Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131332e302f32342d3234203d3e203531323032.roa
File:                     3139302e31332e3131332e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          2+tMJ/06yvf2vpfDxg65aDz69u4uKmegL0d4L6MPndA=
Subject key identifier:   83:37:96:0E:7A:99:65:A6:BD:F8:99:FB:17:3F:80:6C:F4:ED:4C:39
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       7FF7EEEC79AC99ED512D9F22966A2C91E394CCE0
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131332e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:08 +0000
ROA not before:           Mon 08 Jul 2024 00:15:08 +0000
ROA not after:            Mon 07 Jul 2025 00:20:08 +0000
asID:                     51202
IP address blocks:        190.13.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f7:ee:ec:79:ac:99:ed:51:2d:9f:22:96:6a:2c:91:e3:94:cc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:08 2024 GMT
            Not After : Jul  7 00:20:08 2025 GMT
        Subject: CN=8337960E7A9965A6BDF899FB173F806CF4ED4C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0f:b0:4d:5e:70:d1:19:5d:e8:53:36:50:aa:
                    51:3b:37:88:53:0b:55:b2:3a:62:ed:fa:c4:8f:28:
                    c4:3c:a0:34:1f:eb:19:4a:28:c6:41:da:24:c5:4c:
                    97:f8:0a:4e:e6:2b:9c:99:94:cb:a0:b4:48:4e:6d:
                    b9:68:27:0d:90:57:2e:59:f5:b0:f3:f4:89:94:81:
                    54:a6:6d:69:b4:e1:4f:c0:78:62:ab:3d:d2:ec:e6:
                    ef:de:c0:65:30:f9:7c:6c:0f:9e:5a:7c:f8:23:16:
                    0e:0f:cb:14:0b:f2:4c:24:d8:51:ce:e9:0e:f4:b2:
                    b4:57:37:aa:42:53:af:97:9a:ad:5b:72:b8:9c:c0:
                    29:c2:81:86:22:3a:4b:58:5a:be:94:18:07:23:da:
                    ce:d8:75:6e:fe:5b:46:a4:fc:9f:76:33:5a:78:3b:
                    56:c0:d9:08:14:8a:3d:04:b2:e5:c8:80:69:3c:ee:
                    18:66:29:c1:cf:2b:53:b2:12:85:0c:32:43:ef:ff:
                    80:e9:11:66:b3:dc:3d:42:8a:50:50:6b:42:60:c0:
                    fb:01:62:db:a4:2b:e1:31:3f:a9:ec:b4:fb:f2:88:
                    63:0d:7f:12:f1:10:b4:66:85:16:c5:ff:c5:3e:16:
                    4a:7c:22:90:fd:e0:18:92:e6:15:6f:50:5e:5f:37:
                    59:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:37:96:0E:7A:99:65:A6:BD:F8:99:FB:17:3F:80:6C:F4:ED:4C:39
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131332e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:25:f1:24:20:03:00:e0:7b:f1:a9:df:b2:27:15:36:01:80:
         a6:7a:7c:5f:fb:ef:48:24:93:61:f5:8b:a0:cf:92:3d:f3:fe:
         1f:ea:d1:d8:3b:fe:b0:9d:f9:b3:6e:b1:34:98:8a:e3:e4:ff:
         b9:38:0e:e3:24:2a:5f:97:46:23:98:ed:3c:2e:fe:64:fb:e1:
         76:9f:9c:a5:91:82:da:81:5f:9a:ed:ea:fe:5d:ad:df:bc:5b:
         c7:fa:ec:ee:7b:4d:b8:4b:76:eb:47:90:02:73:bc:10:49:e2:
         a5:1a:4a:c1:ad:87:df:ff:ac:4b:b1:8b:18:8d:ba:6d:81:32:
         47:26:f3:d3:ac:83:60:89:e3:2c:dc:42:0a:56:f6:fd:38:72:
         46:cf:fb:01:50:48:b0:56:dd:26:62:78:94:50:68:b8:8f:20:
         b1:f6:e0:f3:38:2a:8f:0d:d4:c6:23:3e:be:d2:ff:35:81:a1:
         7a:8a:bf:59:c1:7d:31:d9:6c:37:54:db:43:eb:7e:04:dd:b3:
         a6:44:6b:6f:03:a5:fd:34:e5:da:9c:fa:d6:ee:66:5c:9c:a9:
         75:73:70:1e:2c:ca:7d:04:ea:da:fa:6d:47:1d:de:0c:1e:21:
         cc:cf:39:c8:dd:c9:34:b8:ef:f2:ff:94:c8:77:0c:67:e2:19:
         81:99:38:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----