Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134392e302f32342d3234203d3e203531323032.roa
File:                     3139302e3135312e3134392e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          BvtU8JqA6b2+NT/PxhTFwhSlI1pVhczQcmXDo/Y4UAQ=
Subject key identifier:   C6:2C:26:62:29:4E:A1:85:3F:53:02:53:A6:51:FC:8C:E2:39:AA:81
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       01B8DF83E71F80223814DBB25F28ED4A8A520560
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134392e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:08 +0000
ROA not before:           Mon 08 Jul 2024 00:15:08 +0000
ROA not after:            Mon 07 Jul 2025 00:20:08 +0000
asID:                     51202
IP address blocks:        190.151.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b8:df:83:e7:1f:80:22:38:14:db:b2:5f:28:ed:4a:8a:52:05:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:08 2024 GMT
            Not After : Jul  7 00:20:08 2025 GMT
        Subject: CN=C62C2662294EA1853F530253A651FC8CE239AA81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a4:f9:d0:99:e0:e3:86:fb:62:92:5f:42:52:
                    ad:66:57:ac:21:9c:36:99:e3:9c:4a:f6:5d:4e:8b:
                    de:f8:b6:b1:a2:88:08:6e:2b:bd:63:ed:35:fb:35:
                    5e:a6:24:76:d1:31:a4:dc:d5:57:62:5c:a1:fe:bc:
                    07:af:b0:ed:38:f4:bd:15:8e:66:2c:b1:d3:85:88:
                    75:5c:7e:4e:1d:ab:a8:9a:95:0d:83:1e:47:4d:3d:
                    52:cf:51:33:73:d1:d8:78:5f:79:79:b0:92:cb:e3:
                    82:d3:cb:2f:f1:cd:01:dc:3c:1f:49:03:7e:db:38:
                    31:51:07:c2:e7:6b:2d:9e:3a:c3:92:a6:fe:1e:64:
                    e7:7b:8a:c5:d7:44:8a:bb:e2:c4:ce:92:18:db:d9:
                    68:df:3a:cd:ae:50:7d:54:2b:c0:b2:49:43:3c:e8:
                    1f:31:65:79:86:b2:76:43:f2:75:f7:b3:41:23:a0:
                    ca:d2:54:60:ca:e9:e4:c4:ff:c5:3d:cc:5c:63:c1:
                    99:39:01:89:90:e7:f0:95:4b:20:5c:ed:4c:75:8a:
                    9f:28:39:6e:ab:f1:37:c1:86:f1:48:4e:21:94:00:
                    71:3b:f0:7f:87:f5:72:03:d1:13:1e:35:29:c4:2b:
                    aa:9c:61:3f:4a:19:19:b6:90:46:87:11:83:c2:3a:
                    e3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2C:26:62:29:4E:A1:85:3F:53:02:53:A6:51:FC:8C:E2:39:AA:81
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3134392e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:52:2d:a7:d0:43:30:ca:d8:91:8c:c4:1f:6c:93:6e:b5:59:
         17:7a:de:18:73:1c:29:3a:0e:65:07:1f:8b:15:f0:e0:80:93:
         8b:81:29:79:9c:30:81:99:d7:39:e0:e7:ec:e6:42:28:da:01:
         2d:13:4f:f2:aa:0a:74:b6:5d:a4:bd:40:4d:3c:a0:d0:a5:cd:
         92:4b:ef:34:c9:07:b3:f2:1f:8e:d4:c0:6b:9b:96:b1:44:ca:
         3a:7b:73:9f:36:40:07:40:9b:28:d0:f6:d7:e5:ab:af:d2:5a:
         98:53:76:d9:65:14:c7:9d:16:29:bb:73:8a:b0:2a:00:f0:26:
         94:ad:e0:82:d9:19:67:01:91:d1:6e:a2:84:4b:ca:d6:0e:cb:
         f1:b3:e6:3b:15:3d:d5:59:0a:ff:49:c5:63:10:01:57:4a:91:
         0c:5a:2d:f1:1b:bd:54:15:f8:20:12:7a:67:3d:a7:6f:e2:cd:
         49:6a:77:7c:e3:30:ab:e7:dd:ca:91:93:10:f4:4f:a4:49:dc:
         f8:84:6a:92:78:40:06:c3:cd:aa:87:0d:63:8c:ee:3a:c4:51:
         2c:de:57:1b:d8:4e:e5:97:ef:25:5d:d0:24:68:29:3a:45:6b:
         2a:1b:d4:97:0e:19:1c:52:5a:7d:c9:2c:f9:ed:01:c9:bc:b1:
         75:69:1e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----