Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134342e302f32342d3234203d3e203531323032.roa
File:                     3139302e3135312e3134342e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          jTsdMIxm2MkJhlckobzPsAyVIOlIyCwgfDEy42PAIq8=
Subject key identifier:   FB:8D:4C:21:E9:9F:52:86:5B:97:4F:14:45:72:3C:82:5B:10:CF:F6
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       3BF0BC5EE47C98DF5EB8714BA3F318F5F18D1755
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134342e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:07 +0000
ROA not before:           Mon 08 Jul 2024 00:15:07 +0000
ROA not after:            Mon 07 Jul 2025 00:20:07 +0000
asID:                     51202
IP address blocks:        190.151.144.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f0:bc:5e:e4:7c:98:df:5e:b8:71:4b:a3:f3:18:f5:f1:8d:17:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:07 2024 GMT
            Not After : Jul  7 00:20:07 2025 GMT
        Subject: CN=FB8D4C21E99F52865B974F1445723C825B10CFF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:6b:7b:0d:e0:ac:fa:d5:e8:8f:f6:1d:6d:
                    f6:ae:bd:ca:e2:68:6e:fd:b9:5e:1e:f1:99:d3:62:
                    39:23:62:43:2d:4e:f2:5b:38:4f:e1:2e:55:95:13:
                    68:66:e5:38:19:e2:ac:c2:d3:64:70:60:6b:f4:39:
                    80:96:28:20:ac:da:f6:24:7e:e0:4d:d2:c5:f3:bc:
                    77:4c:67:9e:2d:73:d1:6b:61:df:ea:7c:ea:2c:ee:
                    17:7d:47:9a:07:90:76:11:b7:74:bd:ff:2f:98:d3:
                    bd:27:39:a9:9a:18:fb:20:f4:4a:0a:ca:5c:f5:c8:
                    50:e0:1a:7c:7c:22:dc:86:d9:ff:b5:8d:39:54:aa:
                    b7:72:60:3f:95:82:2c:f5:3d:a7:d1:ab:55:33:68:
                    10:2a:60:0b:6f:b9:fa:3c:76:9e:54:83:80:20:5f:
                    9e:f1:bd:d7:10:5f:5a:dd:15:58:61:8a:f0:f8:8b:
                    2a:2b:48:c7:d7:63:5b:7c:ae:a4:b9:95:88:e0:e0:
                    60:b2:1e:81:8d:e4:39:59:60:0f:3d:a9:27:89:f3:
                    56:af:85:75:4d:ca:3c:bf:7c:ee:8c:58:1d:b3:86:
                    6d:2b:c0:5c:0d:40:2b:a3:4b:06:6f:c5:e6:f2:90:
                    b2:bb:8d:53:65:23:46:ed:40:41:dc:2b:c8:af:e3:
                    f5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8D:4C:21:E9:9F:52:86:5B:97:4F:14:45:72:3C:82:5B:10:CF:F6
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134342e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:f0:b6:38:a2:48:b1:d7:4d:55:2a:4b:a2:d0:46:e8:a2:3f:
         41:48:0e:76:c4:f2:93:bd:0c:77:35:5d:b1:4d:83:c5:6a:b8:
         62:7e:5b:36:05:c0:ed:eb:ac:b5:8a:ed:0a:72:51:11:5e:38:
         45:f3:75:15:da:8f:41:bc:ef:6f:45:75:54:73:26:65:8a:12:
         43:20:f0:d4:8d:cb:35:24:30:b4:47:56:e1:04:d0:79:5a:09:
         c1:fe:dc:3e:93:ec:c5:10:d0:9c:29:ad:30:52:5a:cb:79:9b:
         50:eb:09:b5:47:f6:96:d0:b0:cf:4c:4b:d8:51:2f:6e:8b:68:
         d4:af:12:35:29:9a:ed:b9:83:d5:a0:a1:d0:9a:09:75:40:33:
         df:2d:b9:0d:83:9d:b2:67:3d:62:19:d0:ed:42:a7:6f:9f:a0:
         c5:dd:a3:8f:4d:0f:13:5a:d5:ad:b9:57:eb:7f:09:7b:20:06:
         ad:49:5c:1b:c7:9d:fc:df:9f:42:85:14:5b:bc:d4:4a:f9:90:
         d8:5f:5a:aa:a1:c5:1d:5a:ba:f7:fd:a1:9a:46:89:e7:1e:61:
         06:d6:c7:55:be:08:c3:58:46:ff:05:e9:bc:37:2b:b1:f2:d0:
         6c:88:bc:5f:e9:df:da:3d:e5:a5:79:a8:a5:af:24:c2:24:af:
         4d:a7:23:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----