Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135372e302f32342d3234203d3e203531323032.roa
File:                     3139302e3135312e3135372e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          INjeCvj0+yKJXXP96cR3gnu0PYM/YJynXGnV6BH+jTM=
Subject key identifier:   20:0E:1D:98:70:6D:4D:3A:AE:B8:95:A4:A9:9E:F8:15:3C:7D:E1:C7
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       163B8A9404E707155B7A47D5BA2FB9B28B5AB561
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135372e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:00 +0000
ROA not before:           Mon 08 Jul 2024 00:15:00 +0000
ROA not after:            Mon 07 Jul 2025 00:20:00 +0000
asID:                     51202
IP address blocks:        190.151.157.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3b:8a:94:04:e7:07:15:5b:7a:47:d5:ba:2f:b9:b2:8b:5a:b5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:00 2024 GMT
            Not After : Jul  7 00:20:00 2025 GMT
        Subject: CN=200E1D98706D4D3AAEB895A4A99EF8153C7DE1C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:94:10:66:75:c1:34:b3:42:5e:8f:63:21:fe:
                    13:0a:23:cb:28:ac:05:48:ee:6f:9d:87:02:b2:8e:
                    b0:e9:1f:27:4c:e7:d8:77:5c:04:92:24:3d:69:4b:
                    e6:db:28:ef:c7:f9:0b:99:e3:bf:73:e7:a7:76:c1:
                    1d:eb:d6:28:60:f6:ef:b2:fd:ef:67:33:85:fb:5b:
                    75:93:b1:f3:5d:9a:bd:83:2e:8a:cb:68:6c:14:b4:
                    b8:12:b3:94:f2:ef:b3:f4:9c:01:b1:e2:01:eb:7b:
                    a0:f5:27:d2:6c:54:1a:2a:d4:ad:21:9b:89:17:3e:
                    b1:51:61:6b:b4:98:5f:38:06:7b:6e:8b:62:5f:04:
                    b8:aa:a7:5c:ca:6b:0e:7f:01:c3:d0:1d:6e:29:4b:
                    cf:44:3f:2e:a6:a3:a3:8c:29:7d:7d:8d:57:51:1d:
                    d2:15:b4:cd:a2:d0:03:89:e4:7d:ff:15:74:aa:e5:
                    47:10:d6:9a:af:a5:75:29:53:60:b0:0e:63:1a:2f:
                    d0:5e:4c:bc:5b:19:b0:61:f3:3a:87:af:e8:c5:81:
                    43:6c:bf:20:0d:8d:e3:87:d9:66:90:29:6b:a0:fb:
                    54:f7:93:1c:ec:b8:cd:8a:1d:d0:6e:f1:62:e8:42:
                    52:b5:56:2c:51:72:93:a0:d6:ed:4b:2a:59:6a:54:
                    6c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0E:1D:98:70:6D:4D:3A:AE:B8:95:A4:A9:9E:F8:15:3C:7D:E1:C7
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135372e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:b3:77:72:9f:06:eb:e8:a0:04:76:9a:ec:e8:c2:6c:c8:c9:
         46:b5:ee:0f:4e:37:33:6c:7b:73:1c:b0:a5:a7:e6:48:1d:25:
         2f:48:88:54:0a:76:e0:c1:01:42:82:1b:0a:83:50:26:64:8a:
         ac:f2:79:f6:a6:11:ce:21:83:a5:30:d9:b0:7c:ba:33:54:47:
         b8:e9:c5:e7:8a:5a:73:a5:ef:c5:58:e7:01:2c:c9:e8:59:aa:
         dc:ef:58:c7:2a:b1:00:53:78:ce:55:e7:f2:23:35:8e:09:49:
         65:14:0b:35:5c:03:ad:42:7b:3d:f2:05:90:bb:f6:1a:1c:ec:
         0c:54:5d:f6:60:83:89:b9:02:57:f8:6c:08:e3:0d:07:48:d4:
         1b:72:94:f2:8d:dd:19:5b:f0:86:16:6e:64:1c:ae:88:be:36:
         07:bb:7a:03:54:da:a4:77:e2:f2:65:85:08:df:85:2f:64:74:
         14:26:ce:a7:2d:76:99:20:35:46:40:a7:56:19:d6:04:9f:91:
         44:6f:2f:c4:59:dd:e9:2f:eb:88:0c:20:39:3d:7f:50:dd:39:
         6e:c7:85:4c:6a:df:88:57:04:ce:bd:a2:eb:0c:43:c4:02:be:
         8b:26:17:10:99:94:e3:5c:37:f0:e5:23:7f:5c:35:a7:c1:bd:
         5a:85:50:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----