Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135392e302f32342d3234203d3e203531323032.roa
File:                     3139302e3135312e3135392e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          EUahzyUtq1BNR/gS92Qc2dOGK0glp9EZALweAWAqAOQ=
Subject key identifier:   4B:75:C7:92:30:87:E2:D6:6A:AF:D1:9C:0B:0D:31:43:B4:15:6F:E3
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       02BC3041FF8E99841E8F6E2AC6164F23EB09DB87
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135392e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:04 +0000
ROA not before:           Mon 08 Jul 2024 00:15:04 +0000
ROA not after:            Mon 07 Jul 2025 00:20:04 +0000
asID:                     51202
IP address blocks:        190.151.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bc:30:41:ff:8e:99:84:1e:8f:6e:2a:c6:16:4f:23:eb:09:db:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:04 2024 GMT
            Not After : Jul  7 00:20:04 2025 GMT
        Subject: CN=4B75C7923087E2D66AAFD19C0B0D3143B4156FE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:dd:c9:f4:1a:48:97:46:1b:fa:b2:55:87:
                    a0:a6:81:e5:15:a6:f8:ae:73:4c:4f:58:0c:d7:e3:
                    7a:72:55:fc:15:9a:08:2c:30:14:44:db:99:dc:35:
                    87:50:59:1c:43:20:3b:c9:e5:dc:11:da:91:d5:35:
                    d3:84:1e:a2:a6:43:d6:8a:04:e4:41:d9:54:c2:a5:
                    b4:3c:6c:35:82:ab:2d:d3:60:78:b5:5d:4d:0c:a0:
                    cc:03:cb:03:4f:c9:dd:c6:ae:df:df:db:37:c8:fa:
                    92:40:d8:0e:8c:25:62:1a:6b:ae:92:52:94:1c:dc:
                    70:b7:e6:90:8a:67:3e:6e:9f:55:82:33:be:42:85:
                    14:13:5f:85:96:83:fa:71:39:64:a1:b0:ba:8a:8d:
                    97:ec:ef:6b:69:a5:f8:9c:28:95:d7:e9:fe:bc:ba:
                    b2:eb:09:03:0b:9b:e1:92:3c:8d:20:0d:12:74:f6:
                    6f:94:b5:3e:2e:52:aa:58:42:8b:91:94:16:e9:b2:
                    80:e1:7f:7c:3b:3c:1b:39:38:57:6c:99:02:97:0d:
                    21:f1:36:71:f1:b6:82:25:83:f0:86:71:fe:a4:64:
                    13:03:c7:bb:6d:d8:1a:b9:2b:94:1c:e0:4e:20:75:
                    4a:24:11:37:1c:f5:77:09:04:3c:d8:32:e8:2a:b0:
                    ec:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:75:C7:92:30:87:E2:D6:6A:AF:D1:9C:0B:0D:31:43:B4:15:6F:E3
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3135312e3135392e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:40:1e:0a:21:a3:01:a1:be:b2:a3:d4:a0:d9:17:aa:89:a2:
         0a:5f:97:55:e2:d5:8f:d7:38:16:73:88:52:ab:85:1d:d3:1c:
         d3:69:4a:4d:70:c8:5b:16:23:61:d9:eb:96:d8:22:e2:53:49:
         cd:cd:7b:49:6a:89:5a:46:63:50:57:3d:7b:e1:45:2e:80:db:
         28:ae:59:be:05:51:4e:c3:40:ab:43:f6:fb:c7:d2:02:6c:69:
         5b:fc:c5:a4:99:0f:84:c0:e6:4e:69:c9:72:77:aa:74:3b:e0:
         be:14:bf:70:03:f0:a8:4f:8a:ee:8d:f1:bf:95:a8:ee:6d:c4:
         2e:c5:4f:dd:c1:f2:f1:7e:42:30:e4:8d:40:04:76:00:f9:bf:
         02:b5:8c:9d:25:0a:2c:17:e3:2e:af:c9:28:6e:42:b6:0c:3f:
         ea:54:72:80:1a:1a:bf:70:84:01:30:04:8b:a0:15:a8:03:b6:
         cf:16:1f:61:51:a0:87:97:2c:0f:ea:3b:45:cf:a0:dd:68:b3:
         22:ab:94:a8:43:44:b6:1f:9f:ff:79:3c:78:2f:a7:63:0a:14:
         12:cc:9b:5f:84:25:37:7b:b3:3d:e3:b9:9f:cc:cb:63:1c:15:
         54:54:49:b4:f1:1e:d8:fe:ef:59:ec:5a:a0:8c:59:91:9a:96:
         35:47:74:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----