Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134352e302f32342d3234203d3e203531323032.roa
File:                     3139302e3135312e3134352e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          P8Yj3Gf5yQ9BIGMEG5mj2qdQIXdBuS7363yUT/salQI=
Subject key identifier:   0D:B9:86:60:ED:A1:0B:65:FC:3F:CB:8F:99:41:01:FA:CE:86:07:A4
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       519DB8873C38C7834FE1AEDCF2CEBF9A1D13B454
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134352e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:07 +0000
ROA not before:           Mon 08 Jul 2024 00:15:07 +0000
ROA not after:            Mon 07 Jul 2025 00:20:07 +0000
asID:                     51202
IP address blocks:        190.151.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9d:b8:87:3c:38:c7:83:4f:e1:ae:dc:f2:ce:bf:9a:1d:13:b4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:07 2024 GMT
            Not After : Jul  7 00:20:07 2025 GMT
        Subject: CN=0DB98660EDA10B65FC3FCB8F994101FACE8607A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:f1:79:94:53:c9:f3:ee:b5:c1:c6:95:0e:
                    5d:bf:a4:2b:b1:d4:9d:5f:51:b9:b1:8a:8a:39:42:
                    06:15:12:9a:c4:e2:ff:49:b6:4c:e8:09:fc:ba:eb:
                    50:2a:fd:6f:3c:39:bf:90:d9:e8:09:e1:42:a9:6c:
                    4c:29:7d:7c:83:d9:50:78:dd:41:5c:90:eb:14:9d:
                    ef:07:9b:2a:5d:e8:66:39:45:d1:61:ac:c1:b2:23:
                    02:1b:35:5a:cb:6a:ee:c0:16:91:82:08:39:be:cf:
                    78:33:45:ce:ca:4e:7b:32:27:1b:81:59:a1:27:04:
                    10:d4:32:90:6c:69:02:df:aa:fa:54:6c:dd:7b:c0:
                    9d:9c:9e:5a:8d:49:ca:b7:0e:da:9b:b2:e8:2c:4c:
                    c9:e9:79:d1:22:74:7c:52:ea:34:4b:e2:8a:47:48:
                    32:80:39:84:5d:69:c0:18:28:4e:f8:55:c0:34:f7:
                    df:c3:bb:4c:56:26:aa:99:d3:7b:9b:d8:82:cd:97:
                    68:0e:bc:7d:de:de:1f:5e:9b:c0:1d:1b:fb:33:4b:
                    e4:4f:b7:2f:11:e2:25:d5:dc:95:bc:8e:ac:b9:c5:
                    a4:f9:1c:86:81:45:c0:41:92:0e:66:e3:74:fa:97:
                    71:76:63:8f:02:e4:d0:7b:23:5c:cb:cc:cc:44:a6:
                    8a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B9:86:60:ED:A1:0B:65:FC:3F:CB:8F:99:41:01:FA:CE:86:07:A4
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134352e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:90:66:9a:af:8d:53:bc:8d:a2:91:2c:64:b5:15:1c:fc:a8:
         8b:db:29:0c:e1:53:d0:86:da:20:26:15:37:52:6c:cc:8d:fb:
         56:18:6c:57:36:4c:67:eb:73:27:fc:cb:29:4b:4e:5a:81:51:
         cd:78:b3:fb:0c:1a:63:01:fc:5a:ac:3a:e4:03:11:c5:3b:58:
         f0:66:1f:ec:2c:19:45:37:92:90:eb:6f:0b:b3:1b:fb:f8:46:
         27:22:97:36:87:29:05:e5:b5:37:87:8b:bf:6d:d5:f2:fc:2e:
         c8:50:28:95:22:bb:23:f6:19:2c:d0:8c:1a:4b:dd:b9:df:a4:
         41:4a:9d:28:90:57:26:fd:6a:75:b0:d4:11:75:50:5c:7c:98:
         4f:3b:f1:96:0f:53:c7:80:ca:25:0e:2f:d8:01:38:81:92:da:
         10:15:37:7f:fc:75:9f:a0:ef:a6:4a:3a:b3:84:1e:a2:10:61:
         86:b9:b1:e4:76:4e:36:9c:ed:75:7e:03:38:b6:92:a5:41:ac:
         90:7c:95:21:a9:e2:d6:a9:de:9b:12:49:4a:58:11:17:30:09:
         cd:b4:89:6d:ea:db:ca:c6:f5:77:ec:57:fc:77:47:a7:46:32:
         40:69:01:d5:8f:65:ac:b2:69:9d:44:dc:5c:ae:cc:24:d1:5a:
         a6:85:8b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----