Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134342e302f32302d3234203d3e203532333339.roa
File:                     3139302e3135312e3134342e302f32302d3234203d3e203532333339.roa (raw, json)
Hash identifier:          o5MbA7cZaC3QEgFhyZYGzfTk/f9L8JlKUi6I5DD0axo=
Subject key identifier:   7D:EF:2B:93:91:D0:23:17:64:7F:A2:57:F3:C2:27:A0:4E:78:03:CE
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       5D6ECD59471EF8190FC985EA652BF618F2E3AD11
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134342e302f32302d3234203d3e203532333339.roa
Signing time:             Tue 05 Mar 2024 17:49:20 +0000
ROA not before:           Tue 05 Mar 2024 17:44:20 +0000
ROA not after:            Tue 04 Mar 2025 17:49:20 +0000
asID:                     52339
IP address blocks:        190.151.144.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 02:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6e:cd:59:47:1e:f8:19:0f:c9:85:ea:65:2b:f6:18:f2:e3:ad:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Mar  5 17:44:20 2024 GMT
            Not After : Mar  4 17:49:20 2025 GMT
        Subject: CN=7DEF2B9391D02317647FA257F3C227A04E7803CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:ba:c0:3a:61:7e:70:5a:7b:24:5f:54:14:
                    60:a7:08:b9:36:ef:8d:72:89:22:92:3b:a2:2d:eb:
                    1a:6b:fa:44:77:1b:48:56:39:e9:98:83:73:87:9b:
                    60:73:90:ce:54:19:bc:60:7e:ff:7a:a0:f5:3c:8c:
                    79:11:47:dc:8f:5f:11:fd:62:51:51:e5:e8:3b:65:
                    62:82:29:d3:8a:74:fe:7b:99:98:b5:15:7e:0b:9e:
                    dc:a7:a1:36:7d:6e:94:64:d9:a7:e4:69:c1:71:6c:
                    68:50:df:e9:27:36:b3:56:fb:de:64:83:33:9b:da:
                    65:11:3f:92:74:bf:86:2b:0e:f6:4b:53:a4:ff:f8:
                    0a:15:6d:57:0e:fd:ad:e9:bf:ea:32:53:0a:bb:f5:
                    85:bc:b8:28:bb:d1:6d:e9:7f:e9:6c:b5:24:b0:ba:
                    37:3e:ef:d5:7a:c6:46:5d:fd:84:68:d3:af:f0:81:
                    ed:36:f8:70:d0:bf:44:d0:51:90:5f:d4:5c:3c:80:
                    6a:c3:37:27:56:f0:be:e2:eb:4c:d8:78:1f:3d:71:
                    fa:92:29:1d:97:78:e1:b3:cd:57:d6:95:2a:b4:66:
                    f8:b2:a5:c3:fe:03:ef:3c:6c:10:e9:28:6e:3e:cc:
                    e4:be:ce:c8:d5:38:ce:07:21:67:e1:5e:9d:af:ef:
                    71:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EF:2B:93:91:D0:23:17:64:7F:A2:57:F3:C2:27:A0:4E:78:03:CE
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134342e302f32302d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a8:f3:8c:b9:12:54:58:d5:92:26:13:8c:9e:9c:55:7d:00:39:
         38:5f:fe:88:88:04:31:c5:1b:dd:d6:69:8e:5f:b6:2a:54:e6:
         e3:28:41:0e:e6:6e:90:b8:ae:6f:ef:67:a0:5a:b0:ca:86:0f:
         a5:7f:c9:0f:54:23:f9:ef:de:71:04:d9:c4:c0:29:04:9c:a8:
         a0:85:07:fd:ba:7f:40:95:06:58:7f:50:fe:2d:bb:95:f0:9a:
         50:2e:b1:90:20:60:25:55:83:fc:22:76:7b:2e:3d:58:04:f0:
         99:b5:2c:36:60:60:91:34:55:fb:8f:2b:2c:d2:fb:94:5c:ef:
         ad:36:54:a2:8a:9c:5a:04:7b:82:76:f3:f9:ff:da:78:33:6b:
         dd:a7:62:92:bb:25:97:40:17:a6:65:4f:c2:7c:d0:ab:c7:92:
         dc:f6:79:10:c8:80:89:03:64:d5:2f:aa:89:61:09:96:d0:b5:
         b8:0c:48:b2:fd:c2:20:9c:b7:5a:c4:55:e8:9a:1c:99:e7:95:
         ef:46:b9:da:55:9b:e0:dc:85:51:09:3f:8f:50:47:e2:fc:2a:
         90:c4:70:15:b7:4b:eb:ad:b9:1b:48:fb:7b:34:a7:0b:c8:64:
         5f:ff:7a:81:60:07:a2:66:51:a3:d0:90:87:8d:8a:6a:91:ef:
         3d:1f:45:8e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXW7NWUce+BkPyYXqZSv2GPLjrREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNDAzMDUxNzQ0MjBaFw0yNTAzMDQxNzQ5MjBaMDMxMTAvBgNV
BAMTKDdERUYyQjkzOTFEMDIzMTc2NDdGQTI1N0YzQzIyN0EwNEU3ODAzQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrbrAOmF+cFp7JF9UFGCnCLk2
741yiSKSO6It6xpr+kR3G0hWOemYg3OHm2BzkM5UGbxgfv96oPU8jHkRR9yPXxH9
YlFR5eg7ZWKCKdOKdP57mZi1FX4LntynoTZ9bpRk2afkacFxbGhQ3+knNrNW+95k
gzOb2mURP5J0v4YrDvZLU6T/+AoVbVcO/a3pv+oyUwq79YW8uCi70W3pf+lstSSw
ujc+79V6xkZd/YRo06/wge02+HDQv0TQUZBf1Fw8gGrDNydW8L7i60zYeB89cfqS
KR2XeOGzzVfWlSq0ZviypcP+A+88bBDpKG4+zOS+zsjVOM4HIWfhXp2v73GjAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUfe8rk5HQIxdkf6JX88InoE54A84wHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzNTMxMmUzMTM0MzQy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMyMzMzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvpeQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCo84y5ElRY1ZImE4yenFV9ADk4X/6IiAQxxRvd
1mmOX7YqVObjKEEO5m6QuK5v72egWrDKhg+lf8kPVCP5795xBNnEwCkEnKighQf9
un9AlQZYf1D+LbuV8JpQLrGQIGAlVYP8InZ7Lj1YBPCZtSw2YGCRNFX7jyss0vuU
XO+tNlSiipxaBHuCdvP5/9p4M2vdp2KSuyWXQBemZU/CfNCrx5Lc9nkQyICJA2TV
L6qJYQmW0LW4DEiy/cIgnLdaxFXomhyZ55XvRrnaVZvg3IVRCT+PUEfi/CqQxHAV
t0vrrbkbSPt7NKcLyGRf/3qBYAeiZlGj0JCHjYpqke89H0WO
-----END CERTIFICATE-----