Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e33362e302f32342d3234203d3e203531323032.roa
File:                     36362e3132382e33362e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          smtospzsgmPhWDgmvIG/SqxC+sqp4DfGw6NktygL0DY=
Subject key identifier:   72:50:39:80:C9:D3:D4:C1:9C:5D:0F:EF:9B:71:F6:D5:7D:A0:9C:51
Certificate issuer:       /CN=160B7951E0606756250A049D4BCA8B87E03112C2
Certificate serial:       419097E1317560A27606B479505F2FB72A181C29
Authority key identifier: 16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e33362e302f32342d3234203d3e203531323032.roa
Signing time:             Thu 11 Jul 2024 19:25:00 +0000
ROA not before:           Thu 11 Jul 2024 19:20:00 +0000
ROA not after:            Thu 10 Jul 2025 19:25:00 +0000
asID:                     51202
IP address blocks:        66.128.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 11 Jul 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:90:97:e1:31:75:60:a2:76:06:b4:79:50:5f:2f:b7:2a:18:1c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160B7951E0606756250A049D4BCA8B87E03112C2
        Validity
            Not Before: Jul 11 19:20:00 2024 GMT
            Not After : Jul 10 19:25:00 2025 GMT
        Subject: CN=72503980C9D3D4C19C5D0FEF9B71F6D57DA09C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:92:7c:12:42:df:f1:6c:db:ef:3a:6d:5e:81:
                    2c:95:af:d4:63:fe:84:e6:40:52:1b:29:b2:0b:84:
                    b6:14:cc:12:33:d3:1e:e7:9b:69:8e:4b:52:02:50:
                    f5:f7:1d:0f:05:2c:bc:e8:ff:5a:54:e3:38:1a:63:
                    ca:4e:c4:09:f1:ec:e2:a1:9e:f7:39:57:91:10:b8:
                    ae:50:66:19:7f:70:76:19:29:88:a6:bc:0b:39:de:
                    00:29:9f:24:04:d6:46:e0:95:c6:c5:32:a1:43:2f:
                    e5:91:5d:ed:c6:4f:73:0b:bf:17:1d:bf:fc:31:c6:
                    ec:79:d9:9b:16:e7:f7:a1:d3:22:3c:da:f3:11:64:
                    60:b4:7e:83:4c:e0:09:da:55:fd:94:f1:85:51:7b:
                    3a:54:34:32:23:0f:7c:87:cc:01:61:68:be:97:49:
                    88:09:06:34:81:82:88:c3:5f:69:00:e7:16:f7:af:
                    6c:12:ae:92:e8:b0:62:f5:79:20:d1:b7:aa:66:68:
                    13:eb:99:c9:35:ee:46:ba:ae:72:43:70:2d:67:23:
                    ec:e5:b9:3a:20:df:bb:49:d8:c3:6f:81:73:18:04:
                    76:12:96:25:13:5c:37:83:92:e7:25:f5:b5:4b:9f:
                    ab:6b:f0:e0:86:9f:09:c9:e4:42:b2:ee:67:d4:c1:
                    f6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:50:39:80:C9:D3:D4:C1:9C:5D:0F:EF:9B:71:F6:D5:7D:A0:9C:51
            X509v3 Authority Key Identifier:
                keyid:16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e33362e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:c6:71:2f:93:a8:1d:63:37:e5:02:ea:b4:f5:23:e9:d1:bc:
         33:fb:0e:30:df:96:a2:24:01:e4:e6:21:c3:25:32:91:20:7e:
         cb:73:7b:84:52:a4:04:9a:25:1a:dd:4f:2b:2e:e7:76:fd:42:
         5e:c5:62:73:45:8d:ec:d4:db:60:30:4f:12:e4:ea:18:e0:b5:
         26:39:db:15:37:9d:1f:b8:37:79:91:9e:47:57:af:cd:c2:af:
         a6:ac:f9:e1:25:0f:55:31:f4:b7:79:cd:51:c7:80:46:99:b3:
         80:51:aa:ba:90:3f:15:6c:61:3e:df:9a:d8:0f:69:97:ba:5d:
         01:4f:b4:b9:6f:0e:09:a3:df:4d:6e:25:45:c6:a4:a7:4d:4c:
         05:16:c0:59:dd:33:ae:78:00:eb:68:27:26:ea:18:df:88:92:
         a1:1c:da:07:33:e8:c6:94:b7:33:f1:a6:65:5b:8b:7b:14:1c:
         e8:e1:08:41:67:e5:c3:0a:ed:46:ae:54:ef:e1:6b:d7:03:61:
         28:91:7f:51:af:d2:e8:cb:76:49:d7:63:23:ee:43:94:b0:29:
         95:77:fe:e0:84:2f:79:d2:5c:75:03:e6:fa:d9:ae:1b:3e:32:
         e1:e7:e2:3e:33:58:1f:7f:b5:fb:c5:e0:e7:f3:66:47:60:04:
         83:a1:21:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----