Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135362e302f32342d3234203d3e203531323032.roa
File:                     3139302e3135312e3135362e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          PLTvgdX1R2qya/cB8MzPRN9CQ7Nley9Fhjhh76pxN78=
Subject key identifier:   72:76:52:C0:9C:51:64:8D:3B:E1:EF:BD:9F:08:04:5A:30:70:6E:31
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       4AE3223216D471079E7D280DC0293D7AF307B091
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135362e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:01 +0000
ROA not before:           Mon 08 Jul 2024 00:15:01 +0000
ROA not after:            Mon 07 Jul 2025 00:20:01 +0000
asID:                     51202
IP address blocks:        190.151.156.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e3:22:32:16:d4:71:07:9e:7d:28:0d:c0:29:3d:7a:f3:07:b0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:01 2024 GMT
            Not After : Jul  7 00:20:01 2025 GMT
        Subject: CN=727652C09C51648D3BE1EFBD9F08045A30706E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5a:89:92:63:90:78:6e:b0:80:c8:d2:87:50:
                    aa:b8:f1:01:af:01:4f:f3:2c:33:ca:b9:66:dd:1b:
                    eb:91:6d:1e:b9:43:52:21:96:85:24:7c:e2:7b:7e:
                    14:77:6a:a6:b3:ff:f1:c1:d7:14:86:7e:02:41:a3:
                    a2:d6:b8:fd:88:65:37:c3:87:7d:e8:bf:de:e0:04:
                    2b:8a:99:a4:e0:f0:00:b5:91:0e:11:f4:3e:f2:cb:
                    e9:eb:66:01:fb:36:68:56:d1:f9:bf:54:14:a2:91:
                    eb:5d:13:db:29:a6:02:cf:35:e8:22:2f:0f:79:e0:
                    ce:8a:fb:51:ce:17:2f:37:82:98:b9:2c:95:a5:ad:
                    45:a9:6a:bf:bf:16:ed:aa:99:de:c4:f8:2f:0e:bf:
                    00:92:bc:3e:b8:1a:fb:28:12:ce:95:42:3d:60:2e:
                    cb:e6:fe:ac:b7:cf:3f:ad:89:4a:68:8e:5c:db:c6:
                    73:05:63:c9:f3:7f:04:1c:68:2a:e1:83:87:a6:c1:
                    a9:9a:0e:78:cb:7e:7f:b7:e5:fb:6e:77:ed:59:fd:
                    2e:77:87:1b:bf:e7:62:83:34:f8:60:d9:8f:b4:8b:
                    c1:a5:48:d4:e7:49:60:ef:95:4c:21:75:95:9d:54:
                    b6:b3:99:82:9c:fc:6c:1f:1e:94:09:42:56:31:69:
                    48:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:76:52:C0:9C:51:64:8D:3B:E1:EF:BD:9F:08:04:5A:30:70:6E:31
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135362e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:80:11:9e:f6:4e:f8:89:ee:93:c4:89:59:df:59:5e:d1:91:
         0a:db:20:90:96:65:a3:54:a6:71:54:f3:ff:74:da:15:9f:d3:
         1e:67:c8:45:36:6b:56:eb:24:fd:c8:95:94:2a:a4:c0:fa:bc:
         be:1f:f3:a7:46:e9:08:0c:a7:5d:76:29:e2:d2:0e:d4:67:f1:
         66:55:c4:59:05:30:bc:56:49:3a:c7:e5:f8:df:df:3f:32:d7:
         f3:bd:1c:15:91:ec:c5:44:db:f9:cd:83:c7:a2:ee:0b:57:9c:
         6e:50:f0:97:3d:82:3f:fb:79:32:3b:d6:18:be:9e:64:1f:9d:
         87:18:a7:48:30:1a:e5:b2:a0:1a:5e:77:ed:f7:86:18:ee:bd:
         a7:d1:d9:ff:7f:ed:66:b7:57:0a:f8:76:27:4a:fc:02:fd:07:
         a8:eb:5d:53:4a:b7:43:f1:91:d2:e1:95:c2:b6:54:7f:8c:ee:
         9b:47:e4:13:da:d5:4f:de:5d:31:ec:90:1e:ab:e0:9c:de:94:
         5d:48:67:69:ea:8d:8b:f9:06:ad:1e:17:d2:8e:30:b1:08:5f:
         b7:25:ce:60:dd:3d:3a:e4:fe:70:69:45:73:7a:52:1a:2b:a3:
         3d:a9:44:ae:94:10:ca:1b:76:3c:2f:fd:82:61:9e:8a:da:ba:
         ac:dd:35:08
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSuMiMhbUcQeefSgNwCk9evMHsJEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNDA3MDgwMDE1MDFaFw0yNTA3MDcwMDIwMDFaMDMxMTAvBgNV
BAMTKDcyNzY1MkMwOUM1MTY0OEQzQkUxRUZCRDlGMDgwNDVBMzA3MDZFMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOWomSY5B4brCAyNKHUKq48QGv
AU/zLDPKuWbdG+uRbR65Q1IhloUkfOJ7fhR3aqaz//HB1xSGfgJBo6LWuP2IZTfD
h33ov97gBCuKmaTg8AC1kQ4R9D7yy+nrZgH7NmhW0fm/VBSiketdE9sppgLPNegi
Lw954M6K+1HOFy83gpi5LJWlrUWpar+/Fu2qmd7E+C8OvwCSvD64GvsoEs6VQj1g
Lsvm/qy3zz+tiUpojlzbxnMFY8nzfwQcaCrhg4emwamaDnjLfn+35ftud+1Z/S53
hxu/52KDNPhg2Y+0i8GlSNTnSWDvlUwhdZWdVLazmYKc/GwfHpQJQlYxaUitAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUcnZSwJxRZI074e+9nwgEWjBwbjEwHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzNTMxMmUzMTM1MzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMxMzIzMDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvpec
MA0GCSqGSIb3DQEBCwUAA4IBAQAmgBGe9k74ie6TxIlZ31le0ZEK2yCQlmWjVKZx
VPP/dNoVn9MeZ8hFNmtW6yT9yJWUKqTA+ry+H/OnRukIDKdddini0g7UZ/FmVcRZ
BTC8Vkk6x+X4398/MtfzvRwVkezFRNv5zYPHou4LV5xuUPCXPYI/+3kyO9YYvp5k
H52HGKdIMBrlsqAaXnft94YY7r2n0dn/f+1mt1cK+HYnSvwC/Qeo611TSrdD8ZHS
4ZXCtlR/jO6bR+QT2tVP3l0x7JAeq+Cc3pRdSGdp6o2L+QatHhfSjjCxCF+3Jc5g
3T065P5waUVzelIaK6M9qUSulBDKG3Y8L/2CYZ6K2rqs3TUI
-----END CERTIFICATE-----