Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32332d3233203d3e20323634383435.roa
File:                     3230312e3231392e3235322e302f32332d3233203d3e20323634383435.roa (raw, json)
Hash identifier:          E2iCDuYtUySIB53SGkSzsVqJJqPw/gJL6sYKXlEURx8=
Subject key identifier:   32:FA:77:2D:E9:B2:DA:A9:3C:0C:70:A6:31:0D:3E:06:F6:18:F8:36
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       5EF7DB5BCE219727547061E7B2BB67FF9A7A22B5
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32332d3233203d3e20323634383435.roa
Signing time:             Fri 19 Jul 2024 13:00:00 +0000
ROA not before:           Fri 19 Jul 2024 12:55:00 +0000
ROA not after:            Fri 18 Jul 2025 13:00:00 +0000
asID:                     264845
IP address blocks:        201.219.252.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 18 Oct 2024 15:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f7:db:5b:ce:21:97:27:54:70:61:e7:b2:bb:67:ff:9a:7a:22:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Jul 19 12:55:00 2024 GMT
            Not After : Jul 18 13:00:00 2025 GMT
        Subject: CN=32FA772DE9B2DAA93C0C70A6310D3E06F618F836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:80:52:56:2d:ce:bd:0b:19:77:44:e1:24:
                    63:f3:fa:96:aa:f0:04:2d:d5:da:e9:1b:38:4f:e9:
                    a3:8b:a1:28:56:f0:39:ba:a7:6e:8b:a3:19:c6:56:
                    45:20:ad:78:bf:f8:58:6a:16:9a:a0:cf:9b:3f:77:
                    c2:2f:20:52:cc:ec:a1:74:5a:50:ed:0f:cf:08:b4:
                    31:3d:f1:8b:f5:71:3a:40:15:e8:ab:a6:22:d5:4d:
                    9b:53:f6:0a:2e:9e:1b:f1:a7:a7:f9:9f:81:ba:e3:
                    f5:7a:1d:c7:16:9a:a2:9c:c3:cd:d1:cc:ac:37:7e:
                    c9:ba:32:9a:5a:ec:2c:2c:ff:ea:94:d9:58:36:ff:
                    ad:0b:3e:9d:ca:1b:4c:4e:81:e9:63:2a:4f:9a:30:
                    0c:48:d1:d9:4e:58:ee:6a:51:ba:08:89:2a:63:5b:
                    65:4e:9c:ce:f3:f0:f1:66:a5:06:af:29:76:8d:b8:
                    a8:a9:2f:6a:db:37:ea:b5:0e:ad:8e:f3:50:dc:9a:
                    af:ac:fe:31:ab:f2:b8:6e:5a:58:35:08:ed:2d:be:
                    84:ff:f6:e3:e6:d8:c7:af:15:77:e6:66:3a:ba:0c:
                    7b:b1:c4:15:93:a1:b9:18:cb:26:21:09:fa:70:1d:
                    57:13:03:a9:d8:b9:76:ad:83:0e:36:f2:03:71:77:
                    e0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FA:77:2D:E9:B2:DA:A9:3C:0C:70:A6:31:0D:3E:06:F6:18:F8:36
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32332d3233203d3e20323634383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:7f:16:b5:56:d7:c1:13:72:98:2c:97:cf:bc:d8:cc:91:51:
         fd:e9:91:70:b6:b2:ab:4a:a3:a7:0b:50:4f:44:8d:74:bb:a1:
         7c:c4:db:5c:e8:24:9e:4c:ae:0b:34:d0:31:59:13:a4:cd:ad:
         18:7f:49:8a:41:e2:41:51:c6:e6:a7:da:c3:bf:3b:d0:53:74:
         d4:81:db:e3:c5:c3:dd:ec:df:74:e4:a5:5c:ee:4b:f9:89:d8:
         20:f6:c1:88:08:16:80:54:dd:eb:ef:95:8f:17:15:cf:d8:bb:
         12:40:fb:66:93:68:de:6d:75:de:2c:09:92:2b:2e:63:ed:27:
         e5:fb:3f:3f:e3:5d:83:66:a2:fd:67:64:81:98:82:f9:2e:bb:
         02:32:94:b5:0a:29:28:f8:ca:cd:8a:a1:77:6d:ff:08:68:2d:
         ab:7d:52:9d:66:c4:b8:8f:0b:73:25:ea:4f:3a:fa:5b:43:56:
         de:50:5f:4e:84:ed:49:7a:11:a6:23:71:3e:c3:e1:0b:89:6c:
         e8:1d:ef:0a:e9:87:99:f8:48:4e:a0:06:98:e6:ac:03:d6:b8:
         f1:62:24:f9:e0:ee:0b:e4:32:00:dd:79:6a:8b:23:46:5d:33:
         21:82:e8:4f:d2:1f:9b:2b:95:34:96:b0:53:88:7e:39:35:f2:
         09:67:ff:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----