Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135352e302f32342d3234203d3e203531323032.roa
File:                     3139302e3135312e3135352e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          jherlBKPhKNQqA6t6e6fenj9H+G/IgGum2RVGp+ViJw=
Subject key identifier:   40:FD:64:B6:8D:54:09:55:08:B9:15:77:80:AE:F5:BD:10:C1:CB:C0
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       4410AA55C65BDCCDAD815927B053D5F97D867C7C
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135352e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:04 +0000
ROA not before:           Mon 08 Jul 2024 00:15:04 +0000
ROA not after:            Mon 07 Jul 2025 00:20:04 +0000
asID:                     51202
IP address blocks:        190.151.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:10:aa:55:c6:5b:dc:cd:ad:81:59:27:b0:53:d5:f9:7d:86:7c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:04 2024 GMT
            Not After : Jul  7 00:20:04 2025 GMT
        Subject: CN=40FD64B68D54095508B9157780AEF5BD10C1CBC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:07:3a:c1:c3:e3:9a:75:f9:7c:e4:35:23:c2:
                    93:1d:e1:e5:03:c5:78:3f:0e:4f:e8:1f:e3:d3:46:
                    86:b8:78:ef:16:09:3e:e2:17:9c:37:3c:f8:20:6f:
                    b1:51:20:fb:4d:5c:36:5d:56:aa:0e:1d:cc:57:1d:
                    3b:f7:1b:61:3e:13:66:08:41:f7:c2:14:77:1c:13:
                    96:81:b7:da:1a:7c:f0:e5:7f:c7:8c:d9:cb:1d:e8:
                    a6:55:b9:3c:33:f4:7c:9c:a6:b5:36:55:b8:91:41:
                    dd:ae:c3:36:db:12:2a:7a:af:52:73:97:ed:06:38:
                    7a:c2:40:cf:bc:1f:2f:65:8c:17:99:6e:fc:28:d1:
                    db:f4:e4:f8:c2:5f:39:af:31:9e:3a:a1:0c:36:00:
                    d7:5b:08:2b:34:6a:e2:e4:30:72:79:4c:06:42:ad:
                    71:de:63:b2:dc:02:8f:44:13:f6:9e:39:6a:26:e7:
                    6f:92:35:e8:a4:86:35:53:89:e9:62:88:3b:f8:62:
                    81:20:1b:72:2f:87:4f:78:11:a7:8e:74:fd:5f:09:
                    ab:ff:02:3e:b6:e8:ac:20:18:56:e2:f2:3e:a7:88:
                    8b:ae:06:62:34:69:e2:54:70:58:ed:d4:8b:f7:9c:
                    89:34:47:b0:8a:70:cd:1c:f6:44:74:0d:3c:52:ef:
                    4c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FD:64:B6:8D:54:09:55:08:B9:15:77:80:AE:F5:BD:10:C1:CB:C0
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135352e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:f5:68:d7:fe:3c:83:bc:0f:c0:d7:35:6b:41:09:cc:e4:4f:
         3c:bf:56:63:57:ba:3a:7f:b0:17:f0:81:0c:04:48:5c:5f:d7:
         ce:d9:70:7a:b9:38:a0:98:9b:11:a0:90:7f:28:f4:f8:5e:83:
         04:5e:5a:e5:ab:36:6c:43:fc:ef:ed:ad:49:58:eb:af:4e:46:
         b5:42:2f:bc:4c:99:0b:a7:12:37:97:58:27:4c:47:b2:3d:9b:
         0e:fa:3f:42:ea:ae:ab:67:f1:de:ce:7c:1c:87:e7:88:4b:a8:
         20:b5:43:a6:ef:9a:f4:a6:a1:5a:9b:a4:4b:14:c9:21:63:23:
         7b:a3:c7:34:c8:81:a3:0f:d5:8c:64:17:2a:dc:ff:30:d5:66:
         c9:e8:c6:10:f2:77:01:3c:dd:83:53:16:ae:66:ce:49:31:8b:
         3f:33:92:07:00:e7:5b:e9:5c:32:b3:46:0f:0f:f4:43:68:07:
         31:ca:6a:9f:03:09:5d:61:dc:00:85:dc:67:55:f2:ff:33:b7:
         e4:a2:58:18:5f:73:74:ee:d8:61:1a:65:c4:66:e4:fc:11:72:
         f1:f8:2e:6e:5b:dc:14:45:c3:7f:83:85:3b:3a:f9:87:69:90:
         8c:c6:03:85:6d:7c:cf:0e:e5:64:25:89:42:34:0b:17:66:12:
         f1:76:72:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----