Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32342d3234203d3e203532323636.roa
File:                     3230312e3231392e3235322e302f32342d3234203d3e203532323636.roa (raw, json)
Hash identifier:          9br0l0YM/mByYVTtzf4O3I8wh0XZ6dmUE5ZxTKwDFVk=
Subject key identifier:   8E:DC:AA:24:A8:D5:C9:D3:1D:DC:64:A8:F2:78:5E:0C:28:EE:90:E2
Certificate issuer:       /CN=B5F100D6FEF4DD1887095595838207E669CA7479
Certificate serial:       34377EB02D59BD47580789E3D06281117738EE7E
Authority key identifier: B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32342d3234203d3e203532323636.roa
Signing time:             Thu 22 Aug 2024 19:10:00 +0000
ROA not before:           Thu 22 Aug 2024 19:05:00 +0000
ROA not after:            Thu 21 Aug 2025 19:10:00 +0000
asID:                     52266
IP address blocks:        201.219.252.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Aug 2024 19:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:37:7e:b0:2d:59:bd:47:58:07:89:e3:d0:62:81:11:77:38:ee:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F100D6FEF4DD1887095595838207E669CA7479
        Validity
            Not Before: Aug 22 19:05:00 2024 GMT
            Not After : Aug 21 19:10:00 2025 GMT
        Subject: CN=8EDCAA24A8D5C9D31DDC64A8F2785E0C28EE90E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:32:72:0f:85:bc:77:fe:70:78:b9:d8:d5:68:
                    b9:3d:c7:9e:06:18:19:fd:f1:b9:45:26:db:8a:e4:
                    07:27:76:73:59:95:6a:5a:55:c7:be:d6:99:16:d2:
                    d2:41:74:2a:85:d0:2f:03:81:a2:6b:36:cd:85:8e:
                    b5:dd:ec:6b:15:0f:61:bf:52:33:b0:f4:da:ee:3f:
                    68:eb:3d:dc:c4:ea:86:a5:01:d2:8f:c2:0c:d1:6a:
                    6c:66:8e:88:ee:84:e9:de:4e:e9:0e:4a:b8:b9:a6:
                    06:33:dc:6e:63:b7:38:d1:15:64:4b:ae:01:e7:ee:
                    91:8d:59:36:9d:ea:86:c2:14:33:06:3d:4b:ab:04:
                    02:e2:84:12:c3:db:00:9b:2c:c5:3d:03:8d:cb:21:
                    b6:30:a0:5b:bf:c8:be:f0:3b:07:36:a3:a2:3e:90:
                    c0:29:23:51:53:af:c4:61:c5:46:d4:8a:2b:b6:d4:
                    a7:78:d4:99:cf:b5:45:b6:8f:55:50:19:ba:e5:23:
                    50:ca:5a:74:c4:ed:9c:e9:0f:c7:cb:61:88:99:5c:
                    44:c6:7f:65:95:d4:75:a2:09:8b:e1:00:00:a5:cc:
                    69:1c:50:78:36:a9:de:27:bc:e2:9a:e0:d4:74:75:
                    fb:a5:ab:7e:d4:ae:ab:f9:55:5c:21:45:fa:2d:51:
                    88:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DC:AA:24:A8:D5:C9:D3:1D:DC:64:A8:F2:78:5E:0C:28:EE:90:E2
            X509v3 Authority Key Identifier:
                keyid:B5:F1:00:D6:FE:F4:DD:18:87:09:55:95:83:82:07:E6:69:CA:74:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/B5F100D6FEF4DD1887095595838207E669CA7479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5F100D6FEF4DD1887095595838207E669CA7479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/947CF2F0ED33864F09153D6224E1FCF708034026D4A1FF0E00B41E2775ED029E/0/3230312e3231392e3235322e302f32342d3234203d3e203532323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:14:f0:bc:12:f7:02:ce:96:3d:05:68:6d:0a:8a:be:53:97:
         bc:f2:71:e7:ed:e9:f3:b6:32:f3:a7:74:91:7a:fc:b0:57:ec:
         42:09:50:e2:a5:c3:25:72:9c:57:1b:63:f1:3b:7e:b7:fb:44:
         8b:11:3c:f0:7a:2e:9d:25:ec:83:ea:44:aa:cb:49:76:d1:5a:
         a3:03:89:92:30:46:9f:b5:05:d5:c4:af:9a:5d:a1:53:e8:83:
         aa:03:78:9e:81:7b:65:cc:33:6a:20:d7:1b:7f:f8:58:b9:c5:
         ba:9b:3e:eb:31:2d:72:e1:c6:c9:b2:0f:e3:a7:bd:4a:8a:f0:
         80:00:a1:b4:e0:1f:3d:c6:33:25:fe:e9:9a:d0:33:92:3a:ea:
         b1:43:0f:35:97:33:16:96:45:5a:fe:41:7f:dd:4e:06:f4:28:
         a1:32:b4:9d:c9:01:68:be:b6:a3:4f:a4:3d:c1:e8:0d:7a:0b:
         1e:cb:aa:0e:6f:0e:9f:a3:46:4f:a0:8c:06:25:f7:91:32:09:
         aa:75:6a:62:3e:46:b7:e8:e8:89:27:26:19:2e:32:34:18:b5:
         7f:09:94:85:8b:ec:37:d2:e2:e0:33:20:70:80:bf:f4:e1:e7:
         85:0c:3a:1e:ad:9c:e5:f8:c3:05:59:78:bd:1f:fa:b4:7d:14:
         39:5c:db:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----