Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135332e302f32342d3234203d3e203531323032.roa
File:                     3139302e3135312e3135332e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          hHBlmCRWDXSZnhdQBJBQhSMLY0zSzcmntWl+STWxUNQ=
Subject key identifier:   FB:26:24:6B:5D:E8:25:07:BC:BD:A1:8D:1E:48:77:E6:5A:99:12:06
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       731DC4C4978C88139702F4773C642B34D362E886
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135332e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:07 +0000
ROA not before:           Mon 08 Jul 2024 00:15:07 +0000
ROA not after:            Mon 07 Jul 2025 00:20:07 +0000
asID:                     51202
IP address blocks:        190.151.153.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1d:c4:c4:97:8c:88:13:97:02:f4:77:3c:64:2b:34:d3:62:e8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:07 2024 GMT
            Not After : Jul  7 00:20:07 2025 GMT
        Subject: CN=FB26246B5DE82507BCBDA18D1E4877E65A991206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d9:83:1b:97:a3:88:c9:e1:2a:62:3e:19:ea:
                    d8:1c:c4:20:51:ee:9a:02:cb:e4:4e:c8:16:c7:b5:
                    b6:6e:b7:f0:0c:06:f2:96:6c:7e:8a:fa:cf:39:2a:
                    0a:94:8a:01:4f:0f:00:04:6f:b1:4b:e4:82:14:0d:
                    98:08:92:b8:ba:1f:26:3a:cd:b1:e9:30:ea:cc:4a:
                    ef:ad:a5:94:e5:f3:62:6d:e7:2f:76:95:62:f1:19:
                    89:95:cd:ce:39:42:0e:40:bd:d6:ea:32:02:3a:b4:
                    91:85:92:37:95:23:a4:50:6b:34:e6:b6:66:11:29:
                    a4:2e:39:d7:5d:b5:34:6c:46:19:d4:19:92:a1:ed:
                    9b:6e:c2:6f:4b:4d:ea:d7:6d:98:ea:42:3e:de:84:
                    d4:7f:15:71:bd:4d:79:7e:6b:d8:6e:0b:f0:12:a7:
                    ea:7b:9e:6a:f1:89:6d:ce:ab:4a:c7:bb:49:96:1b:
                    71:ba:82:3e:15:81:5b:a4:84:dd:2d:14:88:6f:8d:
                    2e:7f:be:ad:7b:4e:dd:52:55:b8:c8:ac:67:94:35:
                    25:1b:bc:e3:d8:51:be:ba:09:1a:94:78:db:98:90:
                    72:00:46:dc:8d:df:a8:6f:b2:5a:f1:a1:a9:0e:8b:
                    ba:32:82:7f:e2:52:d3:ce:87:2d:73:ea:af:1c:64:
                    10:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:26:24:6B:5D:E8:25:07:BC:BD:A1:8D:1E:48:77:E6:5A:99:12:06
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135332e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:6a:23:2e:b9:8b:db:17:41:f7:38:d7:e0:55:d7:bb:75:a1:
         a1:53:41:71:82:f1:f6:52:af:fa:ba:08:f5:bf:14:0b:a8:b3:
         4a:96:f5:3e:11:01:87:db:d1:9f:25:28:c5:ec:62:06:72:03:
         a9:e3:20:36:0e:26:69:df:45:71:c8:5f:6b:a3:aa:85:39:b6:
         7f:35:ee:bc:d1:a9:62:8e:5b:af:d2:c2:7f:57:96:6b:9b:59:
         d4:40:99:e3:c1:f7:50:53:12:a5:60:a5:8e:9b:e6:82:eb:2b:
         d4:bc:7e:b5:f4:57:f6:ff:54:55:b2:90:e2:f1:5f:5b:4c:b0:
         9f:8b:1a:bd:bd:56:db:9c:3e:e6:e0:2f:30:60:43:0a:36:a8:
         07:e5:ee:37:bd:32:4e:1a:ce:38:a2:d6:ea:fd:6c:02:9a:5a:
         2d:8a:ba:43:81:7b:23:10:8b:a7:86:58:27:9e:e5:a5:97:44:
         5f:75:dc:ab:a2:cc:9b:3c:c8:39:1c:26:3e:4d:62:63:b8:b8:
         26:9e:fe:de:55:9b:19:50:23:98:26:a2:bb:47:c2:09:78:a6:
         20:db:c4:9a:d4:39:3b:0b:8e:30:01:1e:91:e3:1d:c9:f7:39:
         dc:2f:b2:cc:56:02:a4:4d:9f:82:d5:8a:12:ba:c5:6b:9c:4f:
         5a:ab:6a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----