Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135322e302f32342d3234203d3e203531323032.roa
File:                     3139302e3135312e3135322e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          FnHsTd2EyOvqkH82CEW/dQ/z1wBaNQyGMpFag+ctYlk=
Subject key identifier:   7E:8D:84:8D:31:5A:C7:4D:47:29:AB:57:AB:1F:0C:E3:27:45:48:BD
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       1F80E639D9A6A63B162EA01BC0C515172704ECBA
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135322e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:09 +0000
ROA not before:           Mon 08 Jul 2024 00:15:09 +0000
ROA not after:            Mon 07 Jul 2025 00:20:09 +0000
asID:                     51202
IP address blocks:        190.151.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:80:e6:39:d9:a6:a6:3b:16:2e:a0:1b:c0:c5:15:17:27:04:ec:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:09 2024 GMT
            Not After : Jul  7 00:20:09 2025 GMT
        Subject: CN=7E8D848D315AC74D4729AB57AB1F0CE3274548BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3e:e3:6d:96:76:4c:66:dc:99:0f:1e:fb:e5:
                    69:11:fc:ba:ac:8b:8e:91:fe:5e:42:c6:7d:42:2a:
                    46:4f:51:c5:14:79:7a:73:f5:a7:3e:b3:c9:51:94:
                    b8:7f:61:47:82:5b:84:f1:cf:4d:d8:9c:7e:02:5d:
                    78:7f:8d:51:c6:19:fa:9f:7c:e8:03:ef:13:3d:b8:
                    0e:34:c5:62:cd:2e:ab:be:5d:01:4f:f1:2b:f6:7b:
                    0e:16:8d:04:fd:0f:d7:9a:41:1b:99:27:b3:c4:30:
                    34:8e:62:48:79:14:c1:c6:e7:d7:d8:22:5d:4c:9c:
                    37:20:d7:6e:b5:af:b8:e8:19:7b:ee:1c:ad:1f:61:
                    c0:21:6a:40:4f:18:f8:bf:60:96:67:be:8e:3e:5d:
                    92:22:87:cb:b5:2b:26:53:86:77:4c:4e:e8:5e:6f:
                    1b:ad:35:d6:81:61:61:2e:47:8c:0f:12:f6:51:4d:
                    db:8e:70:22:43:2a:ca:64:a6:34:fc:37:e3:7d:ba:
                    64:ec:73:ad:da:a7:36:76:3f:fc:2f:dd:8e:33:7a:
                    6a:fe:4c:b9:2d:dd:f8:ba:3b:8e:19:c0:2c:cb:6a:
                    f9:84:12:13:6f:4d:a8:46:61:ca:14:26:ae:16:8f:
                    7f:35:6e:44:50:ef:29:ff:f7:e3:57:bc:39:4b:76:
                    84:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8D:84:8D:31:5A:C7:4D:47:29:AB:57:AB:1F:0C:E3:27:45:48:BD
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135322e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:3a:c9:eb:47:fc:aa:f6:ee:95:19:d2:20:47:81:09:54:99:
         dd:fa:6f:ff:5a:7f:9a:ab:62:2b:6e:a5:55:af:c6:ad:57:1d:
         eb:a8:ef:af:12:b0:ad:33:12:32:bb:25:d4:fc:92:bc:98:e7:
         d7:08:fe:74:da:82:37:3f:27:85:13:4d:71:bf:df:75:22:e1:
         11:7e:f6:53:40:fb:78:93:a0:dc:9f:9c:09:36:75:c2:13:0d:
         bd:99:ad:1b:91:f1:58:05:3f:6e:6c:d1:b7:31:cf:b6:69:74:
         73:d6:b3:40:63:e8:15:02:45:6f:4f:c5:01:0d:e7:cc:53:fd:
         b8:28:9d:2e:9f:89:30:14:48:9d:69:9f:4d:16:1c:a9:a0:27:
         ae:e5:e7:c3:bb:c7:db:35:87:ec:b5:d0:a2:19:3a:9f:01:d8:
         b3:0a:77:99:36:14:67:74:cf:80:48:d6:b6:30:d4:1b:29:3f:
         f5:70:70:9b:9c:a3:81:02:5a:ea:6b:57:12:dc:4c:39:f8:28:
         9a:3d:b8:d6:73:09:a0:67:fc:da:45:12:a1:fa:2d:b9:a9:79:
         4c:db:73:fe:1c:75:dc:1d:9a:bc:96:8e:a4:41:d6:be:b2:06:
         e3:7b:0e:58:b4:b9:e3:ad:83:a0:4f:68:9f:bf:ff:b8:93:58:
         01:0c:74:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----