Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134342e302f32302d3230203d3e203532333339.roa
File:                     3139302e3135312e3134342e302f32302d3230203d3e203532333339.roa (raw, json)
Hash identifier:          BlaSXz+Iqe+e4agxD7jMrESe0LQGMKgZSMv5nJEb5hQ=
Subject key identifier:   8E:FA:8B:DC:17:B1:F4:BF:1F:36:28:25:06:A0:86:63:55:82:CC:42
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       082D13B309EB99059084F33A5C8408E9F127AEF8
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134342e302f32302d3230203d3e203532333339.roa
Signing time:             Tue 05 Mar 2024 17:49:21 +0000
ROA not before:           Tue 05 Mar 2024 17:44:21 +0000
ROA not after:            Tue 04 Mar 2025 17:49:21 +0000
asID:                     52339
IP address blocks:        190.151.144.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 01:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2d:13:b3:09:eb:99:05:90:84:f3:3a:5c:84:08:e9:f1:27:ae:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Mar  5 17:44:21 2024 GMT
            Not After : Mar  4 17:49:21 2025 GMT
        Subject: CN=8EFA8BDC17B1F4BF1F36282506A086635582CC42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:39:24:fe:34:c5:0a:d3:42:4d:16:45:79:41:
                    f0:41:82:6d:72:af:e9:bb:2a:f1:12:65:95:84:01:
                    b1:95:8e:0d:30:d9:78:f0:4b:93:3d:3c:26:fb:78:
                    e7:07:96:11:0a:2c:38:a0:f1:8a:b7:fc:58:d1:7f:
                    57:6d:d5:d7:fc:cd:c7:77:80:86:a5:f3:ba:6c:1e:
                    87:68:e3:a9:65:27:3f:fb:31:2d:f3:8f:44:8f:7c:
                    49:31:0c:3f:1b:ef:17:ad:b3:3c:66:9f:b7:33:0d:
                    e3:a3:bb:1e:4b:91:bd:9e:45:22:48:6f:8e:a4:24:
                    9a:49:c8:3b:02:5e:63:87:52:17:58:81:c1:34:80:
                    48:93:11:16:8f:6a:8e:bc:da:cd:f6:62:e8:a4:31:
                    2a:fe:24:0d:78:47:78:aa:19:90:a7:0b:0e:a2:d9:
                    72:b1:6c:2b:c2:57:67:fb:e9:2b:96:a2:d7:86:53:
                    6a:54:81:5a:85:03:cb:e5:be:54:a7:28:cd:bb:98:
                    1f:ad:0f:e1:5e:f6:31:ee:55:26:b2:6d:32:0f:93:
                    2d:89:74:3d:41:4a:79:e5:0d:bd:e9:15:4b:ca:81:
                    9b:b8:36:c8:b0:c5:c6:f4:01:07:45:10:6c:4c:71:
                    97:d0:92:29:4a:3d:e5:16:ab:8a:7d:92:c6:11:78:
                    a7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FA:8B:DC:17:B1:F4:BF:1F:36:28:25:06:A0:86:63:55:82:CC:42
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134342e302f32302d3230203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:87:e4:5c:db:67:b6:94:a1:8c:da:48:ba:85:b7:73:59:aa:
         71:df:e5:18:21:07:18:01:bd:c7:cb:7b:b0:8b:ce:33:77:75:
         bf:8a:8f:5a:d7:18:c9:cd:ac:4a:f3:c6:f7:13:b2:db:c3:b8:
         d1:1d:b8:a3:77:91:32:a5:f5:4f:62:c5:51:e0:46:3e:b4:2c:
         2b:ae:58:39:00:9e:ca:24:e4:46:6f:02:35:ac:07:38:fb:93:
         07:6e:58:cf:99:fb:b8:c7:29:46:1e:67:5a:88:a6:da:66:2a:
         dd:6b:46:c9:3e:bb:5e:5c:62:9b:5d:f6:cb:99:5b:e2:ef:94:
         9f:d6:15:a2:d6:46:73:ce:86:24:9d:ce:b4:2e:02:e9:5b:e2:
         12:0a:09:b4:e1:03:01:79:c0:e5:0b:2d:dd:f8:30:d8:47:97:
         e1:77:22:98:b6:3c:a1:d7:23:8d:6c:b1:74:04:b4:dc:69:a3:
         5b:ae:1a:98:f9:9c:ed:50:da:19:f0:c5:53:75:3f:75:bd:45:
         ff:2b:fb:e7:0d:67:ee:cb:d4:0e:0b:0d:bb:bd:f3:f0:5d:8a:
         d3:f0:de:d1:ca:de:d9:59:17:98:fd:0f:cf:68:53:f7:81:7b:
         c1:e7:25:ee:83:d0:39:2a:3e:1a:bf:e5:98:f4:69:ec:4c:2a:
         8c:c5:09:83
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCC0TswnrmQWQhPM6XIQI6fEnrvgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNDAzMDUxNzQ0MjFaFw0yNTAzMDQxNzQ5MjFaMDMxMTAvBgNV
BAMTKDhFRkE4QkRDMTdCMUY0QkYxRjM2MjgyNTA2QTA4NjYzNTU4MkNDNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSOST+NMUK00JNFkV5QfBBgm1y
r+m7KvESZZWEAbGVjg0w2XjwS5M9PCb7eOcHlhEKLDig8Yq3/FjRf1dt1df8zcd3
gIal87psHodo46llJz/7MS3zj0SPfEkxDD8b7xetszxmn7czDeOjux5Lkb2eRSJI
b46kJJpJyDsCXmOHUhdYgcE0gEiTERaPao682s32YuikMSr+JA14R3iqGZCnCw6i
2XKxbCvCV2f76SuWoteGU2pUgVqFA8vlvlSnKM27mB+tD+Fe9jHuVSaybTIPky2J
dD1BSnnlDb3pFUvKgZu4Nsiwxcb0AQdFEGxMcZfQkilKPeUWq4p9ksYReKe1AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUjvqL3Bex9L8fNiglBqCGY1WCzEIwHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzNTMxMmUzMTM0MzQy
ZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNTMyMzMzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvpeQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBPh+Rc22e2lKGM2ki6hbdzWapx3+UYIQcYAb3H
y3uwi84zd3W/io9a1xjJzaxK88b3E7Lbw7jRHbijd5EypfVPYsVR4EY+tCwrrlg5
AJ7KJORGbwI1rAc4+5MHbljPmfu4xylGHmdaiKbaZirda0bJPrteXGKbXfbLmVvi
75Sf1hWi1kZzzoYknc60LgLpW+ISCgm04QMBecDlCy3d+DDYR5fhdyKYtjyh1yON
bLF0BLTcaaNbrhqY+ZztUNoZ8MVTdT91vUX/K/vnDWfuy9QOCw27vfPwXYrT8N7R
yt7ZWReY/Q/PaFP3gXvB5yXug9A5Kj4av+WY9GnsTCqMxQmD
-----END CERTIFICATE-----