Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135302e302f32342d3234203d3e203531323032.roa
File:                     3139302e3135312e3135302e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          Kbv9DpRrp0r/wgSjuenPqUUuvZYYNWLkdUgztuzVnls=
Subject key identifier:   B8:B1:B7:8A:D8:43:D3:8F:8D:47:C4:49:7C:81:B0:84:C3:01:49:80
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       7C5FB9BA50D868ABF87FFBFE29A537C7161A9537
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135302e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:02 +0000
ROA not before:           Mon 08 Jul 2024 00:15:02 +0000
ROA not after:            Mon 07 Jul 2025 00:20:02 +0000
asID:                     51202
IP address blocks:        190.151.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5f:b9:ba:50:d8:68:ab:f8:7f:fb:fe:29:a5:37:c7:16:1a:95:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:02 2024 GMT
            Not After : Jul  7 00:20:02 2025 GMT
        Subject: CN=B8B1B78AD843D38F8D47C4497C81B084C3014980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:aa:f2:42:37:b0:9a:99:7a:2b:26:df:cc:00:
                    31:44:b4:31:57:6b:e5:66:ee:f1:d6:ba:c9:36:77:
                    0b:8c:63:b1:a2:2c:77:45:6f:4b:f2:a7:0e:64:4e:
                    dc:b7:10:63:7d:e5:99:e9:32:64:02:fb:48:73:e1:
                    85:29:99:df:5d:db:37:77:0a:8c:1b:72:c6:e0:ae:
                    48:5b:f5:7d:31:47:46:20:04:37:f1:5e:44:9e:be:
                    ab:91:f2:20:bf:47:73:7e:f9:87:ad:fe:6e:b4:8e:
                    61:fb:ce:c7:bc:43:a7:39:04:f6:1a:7e:9a:13:69:
                    73:01:d8:bd:f6:30:e0:3f:b2:2e:52:b4:a1:59:56:
                    e9:da:e6:6b:0f:09:ea:b0:24:c9:3f:ed:4f:f9:42:
                    ab:fe:60:93:09:63:3f:87:d8:bb:c6:31:d6:3f:2d:
                    de:14:b7:ef:6b:05:9b:b3:ce:94:b3:0b:d1:30:e1:
                    33:11:ee:02:a4:c3:58:96:89:20:ab:80:bc:03:9e:
                    fc:cf:85:80:53:46:1d:8a:2b:a7:99:0c:33:21:5c:
                    53:9e:81:ed:ce:e7:18:2b:1b:e6:03:88:2d:07:c3:
                    8e:a8:2b:61:de:cd:4a:04:a5:06:e7:71:4d:4b:52:
                    e3:78:52:ba:30:7e:94:70:4a:7e:25:47:7c:30:57:
                    e9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B1:B7:8A:D8:43:D3:8F:8D:47:C4:49:7C:81:B0:84:C3:01:49:80
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135302e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:e0:bb:e1:b6:93:ae:60:fd:38:3b:37:07:24:b8:d6:8c:e5:
         a3:d5:23:3f:53:c4:74:87:3e:ab:fd:8f:b4:bb:c4:0a:30:95:
         4a:b0:df:82:61:1c:e2:d8:13:ec:e6:c3:5d:f0:03:a8:31:54:
         83:1b:03:58:5e:23:ed:1d:96:35:a8:6a:55:fa:74:66:a3:98:
         9d:09:66:95:c3:85:6b:4a:df:c0:5b:f8:1e:6c:12:3f:87:bb:
         fe:81:7a:d6:e7:f0:a4:a4:9e:bd:26:a7:f4:da:95:34:b9:6e:
         77:15:8c:16:39:be:46:da:13:33:f1:c6:79:2d:68:50:54:b3:
         66:a8:1f:e8:02:81:bc:dc:4b:2f:84:b2:f7:78:30:90:cb:45:
         17:4c:ec:75:15:1d:76:89:fa:de:3c:64:a2:c1:51:17:84:96:
         6e:e6:ff:44:8e:57:a5:48:b6:d8:0c:ed:59:4a:26:45:00:6d:
         99:58:bb:21:76:58:95:4f:f9:9f:0f:93:fb:e9:b8:ce:4a:1f:
         6d:e5:4c:aa:f2:d4:43:06:69:14:60:b0:6a:cd:ce:6f:65:c9:
         75:e5:88:df:07:b9:14:4a:78:cf:4f:b5:27:b0:10:37:36:46:
         b7:5d:42:7d:f9:b3:60:1f:99:e4:4b:9b:03:f8:ec:b7:3f:4a:
         83:09:c7:1b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUfF+5ulDYaKv4f/v+KaU3xxYalTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNDA3MDgwMDE1MDJaFw0yNTA3MDcwMDIwMDJaMDMxMTAvBgNV
BAMTKEI4QjFCNzhBRDg0M0QzOEY4RDQ3QzQ0OTdDODFCMDg0QzMwMTQ5ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvqvJCN7CamXorJt/MADFEtDFX
a+Vm7vHWusk2dwuMY7GiLHdFb0vypw5kTty3EGN95ZnpMmQC+0hz4YUpmd9d2zd3
Cowbcsbgrkhb9X0xR0YgBDfxXkSevquR8iC/R3N++Yet/m60jmH7zse8Q6c5BPYa
fpoTaXMB2L32MOA/si5StKFZVuna5msPCeqwJMk/7U/5Qqv+YJMJYz+H2LvGMdY/
Ld4Ut+9rBZuzzpSzC9Ew4TMR7gKkw1iWiSCrgLwDnvzPhYBTRh2KK6eZDDMhXFOe
ge3O5xgrG+YDiC0Hw46oK2HezUoEpQbncU1LUuN4UrowfpRwSn4lR3wwV+mNAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUuLG3ithD04+NR8RJfIGwhMMBSYAwHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzNTMxMmUzMTM1MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMxMzIzMDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvpeW
MA0GCSqGSIb3DQEBCwUAA4IBAQAi4LvhtpOuYP04OzcHJLjWjOWj1SM/U8R0hz6r
/Y+0u8QKMJVKsN+CYRzi2BPs5sNd8AOoMVSDGwNYXiPtHZY1qGpV+nRmo5idCWaV
w4VrSt/AW/gebBI/h7v+gXrW5/CkpJ69Jqf02pU0uW53FYwWOb5G2hMz8cZ5LWhQ
VLNmqB/oAoG83EsvhLL3eDCQy0UXTOx1FR12ifrePGSiwVEXhJZu5v9EjlelSLbY
DO1ZSiZFAG2ZWLshdliVT/mfD5P76bjOSh9t5Uyq8tRDBmkUYLBqzc5vZcl15Yjf
B7kUSnjPT7UnsBA3Nka3XUJ9+bNgH5nkS5sD+Oy3P0qDCccb
-----END CERTIFICATE-----