Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e34312e302f32342d3234203d3e203531323032.roa
File:                     36362e3132382e34312e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          43cM2INpjIbHg4gJFF/YyLzeoCvvm31Ah030RpwOWac=
Subject key identifier:   6E:44:0B:D9:6C:EB:77:C2:64:4B:AE:8E:BF:1C:28:F8:42:DD:2C:C7
Certificate issuer:       /CN=160B7951E0606756250A049D4BCA8B87E03112C2
Certificate serial:       30B3BA42EFDA743774E5A9A8E7736CA0053EF748
Authority key identifier: 16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e34312e302f32342d3234203d3e203531323032.roa
Signing time:             Thu 11 Jul 2024 19:25:00 +0000
ROA not before:           Thu 11 Jul 2024 19:20:00 +0000
ROA not after:            Thu 10 Jul 2025 19:25:00 +0000
asID:                     51202
IP address blocks:        66.128.41.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 11 Jul 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b3:ba:42:ef:da:74:37:74:e5:a9:a8:e7:73:6c:a0:05:3e:f7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160B7951E0606756250A049D4BCA8B87E03112C2
        Validity
            Not Before: Jul 11 19:20:00 2024 GMT
            Not After : Jul 10 19:25:00 2025 GMT
        Subject: CN=6E440BD96CEB77C2644BAE8EBF1C28F842DD2CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:68:9c:b0:42:02:41:52:34:64:c6:19:ec:b5:
                    30:d2:53:d0:db:19:72:c1:5e:e2:b4:42:12:aa:81:
                    dd:37:5f:a5:80:a4:20:51:e4:fb:69:77:51:e1:b2:
                    51:28:90:44:bf:78:8d:06:3a:c8:af:3b:2b:29:67:
                    f3:dd:19:16:40:73:d2:31:21:a9:f6:ff:eb:b3:8e:
                    96:23:a1:25:80:05:8e:8d:3d:11:a8:60:56:c7:36:
                    0e:cc:e2:30:5a:db:64:ef:c3:83:ef:d0:67:c9:62:
                    97:9e:d2:27:b4:0f:ce:b3:ac:73:b3:cb:85:26:4f:
                    7e:07:b6:f5:d8:8e:66:5b:d5:e2:b2:a3:87:09:5c:
                    e4:1e:6f:08:7f:91:81:16:c9:cd:30:b4:05:30:07:
                    56:da:d5:c6:cf:f5:d0:d5:09:d0:23:23:36:f0:68:
                    5a:91:f7:87:d8:f2:0a:b4:b2:15:e0:52:f8:b4:e4:
                    38:a7:01:21:96:20:e3:c5:fe:5a:1c:b9:3e:04:ca:
                    c3:d2:35:e0:f3:b6:1b:5d:ed:59:ed:63:9b:10:20:
                    ed:46:16:3c:36:6e:ca:7e:e0:42:4f:44:db:b2:e7:
                    a9:c2:71:7e:17:28:02:97:82:64:d0:53:53:c8:41:
                    0b:06:c8:dc:7d:23:bf:b8:a6:4d:e3:8b:46:16:ca:
                    35:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:44:0B:D9:6C:EB:77:C2:64:4B:AE:8E:BF:1C:28:F8:42:DD:2C:C7
            X509v3 Authority Key Identifier:
                keyid:16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e34312e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:ef:c4:d2:fe:3f:0b:70:07:d7:f0:6d:af:59:05:32:60:fd:
         79:5b:d7:30:5f:88:3f:6b:17:51:a5:90:6d:31:73:be:ba:70:
         4b:a9:37:5b:15:bf:0b:75:31:a9:cb:81:f4:72:67:5e:b9:37:
         f8:14:99:9d:9f:ca:cb:93:5c:89:21:06:ee:c6:9f:10:44:f8:
         32:d8:b9:ca:14:96:86:85:fa:0f:54:fe:8a:f3:5f:8f:75:29:
         c1:47:62:77:f7:c4:eb:f5:29:21:aa:2c:eb:e5:41:3a:9f:f6:
         a1:90:6e:1d:b5:ad:44:4b:e7:c6:cb:f3:74:b4:32:f0:31:e6:
         5e:6b:71:86:b7:bd:09:28:34:c4:18:ca:f0:31:69:87:d0:42:
         c9:be:1f:eb:d2:34:8d:d4:d8:72:e1:31:1a:6b:a7:0b:bd:23:
         63:ad:6d:7f:0e:23:38:b4:cd:e7:79:3f:da:a1:44:3b:08:20:
         f9:33:3c:80:f9:fe:0f:31:de:c9:32:41:3a:4e:7f:31:e8:4b:
         a2:e8:34:0f:36:42:a1:d2:db:86:49:ed:6e:51:f0:9e:41:a7:
         43:bb:7f:d1:99:3b:3c:d7:30:ac:14:2c:f6:f1:61:34:81:f2:
         56:90:62:a4:5e:70:6c:ba:a8:69:e3:3b:82:aa:b4:8d:8c:f4:
         56:d5:19:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----