Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e33322e302f32302d3234203d3e20323633323336.roa
File:                     36362e3132382e33322e302f32302d3234203d3e20323633323336.roa (raw, json)
Hash identifier:          WvO9ifpPt/mnuVRZjYFUqi38OU8zuYezT2PSBZsI2vs=
Subject key identifier:   4C:D8:EF:A2:44:92:B8:8F:34:06:36:B1:46:6D:D4:9C:09:09:1D:94
Certificate issuer:       /CN=160B7951E0606756250A049D4BCA8B87E03112C2
Certificate serial:       0E10F9E1AEE887C3D18D980333C268087D353FEB
Authority key identifier: 16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e33322e302f32302d3234203d3e20323633323336.roa
Signing time:             Tue 05 Mar 2024 17:41:46 +0000
ROA not before:           Tue 05 Mar 2024 17:36:46 +0000
ROA not after:            Tue 04 Mar 2025 17:41:46 +0000
asID:                     263236
IP address blocks:        66.128.32.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Thu 11 Jul 2024 19:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:10:f9:e1:ae:e8:87:c3:d1:8d:98:03:33:c2:68:08:7d:35:3f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160B7951E0606756250A049D4BCA8B87E03112C2
        Validity
            Not Before: Mar  5 17:36:46 2024 GMT
            Not After : Mar  4 17:41:46 2025 GMT
        Subject: CN=4CD8EFA24492B88F340636B1466DD49C09091D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:ec:61:0d:12:21:9f:15:82:88:ae:58:f5:
                    43:55:ca:ce:af:24:81:c3:9e:21:d9:52:de:f9:2e:
                    f1:2b:c6:95:91:97:0a:64:8a:a5:1e:e6:57:58:f0:
                    b2:c5:8f:79:ff:19:aa:c2:bd:91:c4:77:d2:92:93:
                    79:37:27:ef:33:91:9a:82:3e:f2:d7:74:07:a9:e3:
                    e2:0b:84:fb:50:d0:ea:c8:9e:fa:ad:60:cc:57:f9:
                    ee:ac:f0:69:84:0d:5e:c6:0c:bc:02:1b:18:df:35:
                    0a:77:a8:78:c2:8a:f9:0b:c7:e5:4a:50:d7:e9:bc:
                    68:6b:35:51:55:47:f0:dd:9b:55:13:0d:a2:5b:fc:
                    df:f3:c8:6a:69:56:9f:2c:70:40:58:7a:e9:6a:42:
                    e7:40:53:03:1c:7b:4f:ab:81:46:99:14:39:78:cf:
                    7b:eb:08:50:47:18:2e:8f:5f:0b:15:7c:7d:f5:a8:
                    86:0f:0c:8d:57:b5:92:c6:62:f1:ff:0c:a2:7b:a6:
                    b7:f3:e9:3b:e6:02:6d:8a:67:02:ac:ef:5d:b0:5a:
                    a7:23:1c:da:39:31:16:c5:78:fa:71:84:96:4c:b2:
                    81:46:13:cc:fd:bf:1c:03:8c:fa:48:74:78:c3:f7:
                    fb:5b:80:fe:ec:6d:1c:b1:95:d1:73:4b:df:62:e5:
                    a2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D8:EF:A2:44:92:B8:8F:34:06:36:B1:46:6D:D4:9C:09:09:1D:94
            X509v3 Authority Key Identifier:
                keyid:16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e33322e302f32302d3234203d3e20323633323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:43:46:d7:c3:de:98:86:fa:a2:69:a0:69:21:e8:30:0d:f6:
         72:4c:e1:74:f8:8f:5c:48:38:b4:d6:15:9c:d3:7e:19:30:68:
         fd:61:1d:e5:4b:f9:7e:1a:57:b4:96:e9:87:b0:84:57:ea:04:
         86:dd:fe:b6:20:df:d0:d5:f1:07:45:c4:59:f2:65:33:e0:86:
         ae:95:d3:7d:1c:8f:d0:9a:ce:78:d3:dc:bc:53:60:db:13:12:
         e4:a3:e8:4a:0f:0a:21:47:59:e1:80:23:f3:a6:4a:8d:48:e3:
         27:8e:ea:05:dc:65:ce:62:50:ca:3b:c0:8a:27:7c:1c:c8:f4:
         27:2d:6e:9f:2c:e8:11:6a:d4:3a:31:c1:69:ec:65:1d:c5:41:
         44:a0:92:19:66:2d:27:7b:0e:50:b3:31:0b:9d:92:90:72:d6:
         33:6e:cb:bc:a5:d6:f3:13:93:f3:e0:a3:be:cb:9d:3e:00:ec:
         34:97:02:fe:5b:b4:e2:19:5d:79:3f:30:36:ce:b0:5d:ff:0d:
         35:c2:a2:0c:ca:cd:eb:cc:59:57:82:dc:3c:85:fe:bb:0f:df:
         14:81:b3:f0:b4:ae:47:8c:5b:2a:fb:ff:bf:e0:0d:df:5f:f9:
         39:e0:90:a1:68:45:42:84:46:9a:33:3c:f3:90:b2:fc:54:05:
         8f:d3:04:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----