Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131342e302f32342d3234203d3e203531323032.roa
File:                     3139302e31332e3131342e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          lUmVaSbQSgLDdfxP6Ps/dKaf/Qp2kOmtjzEGaHNhrLQ=
Subject key identifier:   B7:71:93:3E:FB:44:41:C0:20:0F:38:7D:5D:6B:CF:CF:2A:B0:CC:26
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       27385D3E3796EF16F83F98D6B191318DD08BDC8A
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131342e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:00 +0000
ROA not before:           Mon 08 Jul 2024 00:15:00 +0000
ROA not after:            Mon 07 Jul 2025 00:20:00 +0000
asID:                     51202
IP address blocks:        190.13.114.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:38:5d:3e:37:96:ef:16:f8:3f:98:d6:b1:91:31:8d:d0:8b:dc:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:00 2024 GMT
            Not After : Jul  7 00:20:00 2025 GMT
        Subject: CN=B771933EFB4441C0200F387D5D6BCFCF2AB0CC26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:99:14:9f:57:d3:31:98:6e:62:df:74:1a:
                    62:9e:00:0e:42:4b:40:48:32:f8:37:28:25:0a:91:
                    cf:72:4b:ee:6f:91:8e:b8:dc:08:b6:24:4e:7f:5c:
                    22:c3:a8:dd:72:f3:46:6b:0d:6f:a1:a5:a9:65:7c:
                    cf:49:20:f2:9f:26:97:6e:18:0b:69:07:0d:5a:6f:
                    c3:d4:7e:86:aa:b4:b3:b8:5d:8c:1b:7b:2f:ae:b3:
                    dc:bb:4d:65:73:e9:b5:39:9a:ba:aa:b6:fa:a7:3b:
                    e0:6c:68:c9:76:bc:c6:4b:a4:1c:bb:ff:5b:cb:6e:
                    44:df:69:5e:f6:96:94:20:fb:e1:d1:09:a6:72:3f:
                    66:98:2f:80:17:5e:7f:0d:3b:3f:4e:e1:a6:fc:ad:
                    a0:fc:40:ca:c5:64:a4:4b:a4:22:36:8b:9f:f0:72:
                    bb:d2:e7:22:e1:e1:e1:15:ce:68:33:d3:d4:1a:67:
                    82:90:2a:f1:a9:f9:2e:c3:0d:98:f4:d6:da:34:e9:
                    16:21:02:35:2f:c0:7c:e1:28:c1:12:17:be:36:0c:
                    73:46:31:96:86:41:8b:78:ec:a7:cd:f4:b0:7b:3a:
                    dc:5f:25:2b:49:d7:99:05:ea:2f:f9:af:ec:db:71:
                    17:38:cd:fe:9a:79:07:61:a7:17:82:73:6c:bc:d9:
                    ea:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:71:93:3E:FB:44:41:C0:20:0F:38:7D:5D:6B:CF:CF:2A:B0:CC:26
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131342e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:61:46:67:29:a1:7b:44:17:aa:68:70:ed:8f:d2:aa:f9:35:
         90:d8:ee:f2:f5:29:e7:df:84:3c:ac:4c:ae:6a:ff:13:67:b6:
         41:a2:3e:8b:ec:41:a8:48:3d:7f:5c:b8:ef:1c:cb:0b:53:f7:
         33:d1:d3:93:ac:21:d7:47:c1:7b:a6:82:83:68:f8:29:59:04:
         68:98:28:7c:6e:91:66:23:3f:d9:f1:1c:1e:77:96:d8:12:66:
         24:99:7b:8a:70:2e:45:87:40:1c:d1:25:13:44:83:97:be:53:
         57:51:51:25:97:87:d9:14:50:e9:63:d9:d7:70:f8:a5:02:ac:
         fe:2c:78:1e:18:7a:0a:2b:de:34:60:47:e0:46:26:00:42:44:
         a1:24:43:b6:4f:a1:1a:e4:ee:e4:b4:04:bb:5f:44:d2:68:27:
         b9:de:db:19:0a:42:80:02:2d:f5:58:70:5b:e3:0b:42:4c:66:
         2d:bc:00:66:9d:da:bb:7e:4a:c8:6d:e3:27:c2:ea:4e:e6:78:
         42:b6:e3:c9:f3:1d:dc:aa:79:52:b0:1a:9f:3a:fa:4d:72:26:
         9f:98:d4:7e:e8:c5:32:c8:7a:0b:7d:b8:8a:8e:a0:a6:08:af:
         34:eb:e7:d8:3a:f5:01:a7:03:e7:eb:5d:f0:a0:a8:07:c2:b5:
         5c:fb:bf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----