Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134372e302f32342d3234203d3e203531323032.roa
File:                     3139302e3135312e3134372e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          b5qfhQ1tC7ct5B6s8i3syG/E7pPEncYm80Jrd54aSp8=
Subject key identifier:   33:58:4C:A0:1D:3E:89:4E:BA:49:34:A8:55:08:9C:2E:1F:19:E5:A7
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       11A25A92C075D8D320C129939CC91059C556A48A
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134372e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:10 +0000
ROA not before:           Mon 08 Jul 2024 00:15:10 +0000
ROA not after:            Mon 07 Jul 2025 00:20:10 +0000
asID:                     51202
IP address blocks:        190.151.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a2:5a:92:c0:75:d8:d3:20:c1:29:93:9c:c9:10:59:c5:56:a4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:10 2024 GMT
            Not After : Jul  7 00:20:10 2025 GMT
        Subject: CN=33584CA01D3E894EBA4934A855089C2E1F19E5A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:ac:c5:88:ca:90:ec:83:db:75:72:a2:90:
                    b9:e3:7d:47:c7:21:6c:17:59:43:98:ab:6b:53:33:
                    36:f1:93:7b:cb:66:cb:9f:96:45:24:7b:2d:d1:56:
                    e7:f0:17:d5:c5:00:89:e0:0d:2f:b0:71:e0:c4:46:
                    10:a1:cd:56:e7:66:da:01:65:37:32:4e:98:8a:f9:
                    0b:1f:36:61:ae:e9:96:c0:a6:84:6a:db:b4:23:49:
                    c7:65:c8:19:90:da:65:84:90:ed:df:98:a2:d2:26:
                    e1:c6:25:c1:b5:b0:35:ef:99:9c:e4:bb:5a:df:08:
                    6e:82:e2:b8:6a:20:df:8b:71:42:a7:2d:c8:a2:9c:
                    97:2d:e9:23:ea:60:63:05:3a:f4:2d:13:eb:7b:52:
                    f9:01:7d:37:02:84:26:f3:04:bc:b6:60:85:6f:87:
                    a8:5b:af:22:aa:0a:49:bd:14:e7:af:52:e7:b3:d0:
                    84:30:ba:af:5d:a2:41:01:9b:0a:bc:a9:27:bf:0e:
                    21:b8:68:40:fa:ea:41:33:e5:65:69:fe:a0:da:8b:
                    6e:4c:ea:fc:78:d9:59:e6:81:3c:fa:4e:be:01:ea:
                    89:7a:20:cb:5a:8e:61:9b:a9:3b:f0:70:4b:e3:18:
                    db:c1:b3:ba:fc:75:41:40:97:41:80:53:25:80:24:
                    a8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:58:4C:A0:1D:3E:89:4E:BA:49:34:A8:55:08:9C:2E:1F:19:E5:A7
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134372e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:b1:64:43:34:d6:b6:ab:83:43:77:f8:68:11:fb:5c:4a:4f:
         43:67:55:f8:15:9f:70:72:75:fa:39:6c:6c:35:64:d4:ba:0d:
         a2:39:31:03:fe:0d:69:87:2c:61:26:20:29:05:79:f1:ec:bf:
         2e:c1:82:4c:2a:d2:67:ee:b2:b5:08:17:b8:8f:b1:85:c1:e9:
         86:ed:2f:e0:aa:68:5a:89:3a:bc:f8:9a:69:82:6b:9a:83:8e:
         bd:3f:ef:d8:22:72:9c:c4:d4:b3:bd:f8:c2:96:00:29:f1:fd:
         c8:d7:18:23:8b:38:a2:79:fc:84:0d:99:39:2a:45:e5:38:45:
         0a:d7:2f:5f:77:6d:08:fc:f9:b4:ff:a7:5b:83:43:06:87:3e:
         96:30:38:f3:cc:6f:4c:31:da:d7:0e:dd:ce:4b:0b:0d:33:6f:
         5a:a7:26:33:b2:66:3c:36:dc:63:72:08:62:65:03:c8:46:20:
         e0:24:0f:25:70:f4:89:4d:2f:af:df:36:cf:ff:f9:08:76:37:
         aa:6f:77:0e:d6:a2:cc:9c:9a:55:1b:30:15:fd:67:88:6a:d9:
         61:4c:12:26:a8:d2:df:75:e7:5b:3d:6b:7f:7d:c3:21:85:74:
         72:5b:eb:12:79:c2:7e:03:36:d4:0e:c2:51:ac:0e:05:df:3e:
         3f:78:d3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----