Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/34352e3139302e39342e302f32342d3234203d3e203531323032.roa
File:                     34352e3139302e39342e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          T4rBZEM/sQJtYkNeAG451//e/LGKIxoZigQErvO+gNM=
Subject key identifier:   0F:E0:25:D2:AD:B8:41:F8:89:B7:98:0B:23:A7:3A:FA:E2:38:D4:04
Certificate issuer:       /CN=0A5D0DA27AEF033371A74DEA11C4AF833677DD51
Certificate serial:       44C3BA482C0BACBACEC9A379F0BAEC00FCEA43C0
Authority key identifier: 0A:5D:0D:A2:7A:EF:03:33:71:A7:4D:EA:11:C4:AF:83:36:77:DD:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/34352e3139302e39342e302f32342d3234203d3e203531323032.roa
Signing time:             Sun 07 Jul 2024 13:45:00 +0000
ROA not before:           Sun 07 Jul 2024 13:40:00 +0000
ROA not after:            Sun 06 Jul 2025 13:45:00 +0000
asID:                     51202
IP address blocks:        45.190.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 00:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c3:ba:48:2c:0b:ac:ba:ce:c9:a3:79:f0:ba:ec:00:fc:ea:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5D0DA27AEF033371A74DEA11C4AF833677DD51
        Validity
            Not Before: Jul  7 13:40:00 2024 GMT
            Not After : Jul  6 13:45:00 2025 GMT
        Subject: CN=0FE025D2ADB841F889B7980B23A73AFAE238D404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:2d:5c:fc:5f:cf:00:91:0f:c3:53:17:15:
                    20:1d:4e:0c:ff:80:ca:fe:f8:4b:52:03:de:dd:97:
                    9f:3b:ff:39:c9:36:68:61:1f:17:e5:51:e6:b0:e9:
                    25:6c:3a:22:1b:37:07:b8:4b:9e:cd:78:8d:99:e0:
                    cc:72:6b:88:c8:55:45:07:88:51:5c:b6:50:68:19:
                    fb:08:0c:e9:13:65:fb:90:d3:e3:d2:1c:d6:5c:f0:
                    11:85:8d:6c:7e:98:d6:b2:ca:11:b1:a0:0f:d7:58:
                    9b:40:cf:6a:f5:6a:90:a4:62:1f:e4:ea:55:1a:26:
                    fd:0c:fe:28:89:57:e0:46:af:bd:0a:7b:6c:87:33:
                    68:bb:4d:12:cd:ee:26:3b:dd:ff:94:a5:71:8d:13:
                    18:20:f7:bc:bf:47:86:a6:55:93:bb:06:75:74:1a:
                    20:c9:11:44:d4:4a:c4:af:94:a3:b4:98:e3:79:68:
                    c6:d8:aa:72:ab:3b:da:78:32:6d:a3:56:f3:fa:97:
                    f7:bd:37:cf:26:14:4f:fd:a7:e3:97:d5:2a:95:d5:
                    d4:40:4e:9b:91:7d:4e:b8:9f:50:0a:43:29:e8:d2:
                    8e:ad:37:52:76:df:fe:8e:fe:f9:67:9e:e7:72:3c:
                    67:b9:e0:38:a3:13:23:2c:ad:66:54:bb:3a:02:93:
                    14:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E0:25:D2:AD:B8:41:F8:89:B7:98:0B:23:A7:3A:FA:E2:38:D4:04
            X509v3 Authority Key Identifier:
                keyid:0A:5D:0D:A2:7A:EF:03:33:71:A7:4D:EA:11:C4:AF:83:36:77:DD:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A5D0DA27AEF033371A74DEA11C4AF833677DD51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4377E94430A933F8779A1462806EE2AB49D40CB32ED0BB12EB19112AAE7EA30/0/34352e3139302e39342e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:e6:33:70:1a:aa:26:a8:0c:8b:47:c6:ea:d5:61:2c:f3:46:
         4c:82:30:85:0c:15:66:6f:bd:1f:59:28:9e:82:1a:ab:93:95:
         ea:91:7a:34:70:0b:61:c7:c2:e8:79:84:8a:71:57:b5:9c:e5:
         32:70:5d:85:9b:7f:d3:d6:fb:fa:fd:80:ab:67:b8:ef:da:0f:
         7d:28:16:69:52:15:b7:cc:89:1c:b8:6e:06:95:49:4f:3b:88:
         e0:ce:86:da:d5:50:5b:9f:15:f3:1c:ff:4f:14:a2:dc:e0:dd:
         0a:19:6f:f0:49:02:ec:c4:bc:b0:4a:e8:b8:ef:bf:7f:b7:08:
         c2:8c:21:f0:63:dd:ed:86:67:a3:c3:4b:94:d8:fa:c8:13:68:
         5c:6d:02:a5:9d:7d:1d:fb:58:19:a8:f8:26:b0:e2:5f:ec:ae:
         d8:ea:c5:fa:3b:00:fc:65:88:02:2c:c2:04:4c:4b:a1:95:b9:
         a9:68:a8:76:63:df:2d:1b:fb:88:5e:55:8d:d9:c8:c1:37:d1:
         14:62:0b:2f:fc:cc:6b:4c:aa:90:b4:b3:ae:75:88:f0:a6:85:
         3a:02:aa:87:0e:c4:e9:29:e1:e4:9e:58:54:60:c9:6b:51:46:
         d7:5f:95:94:40:30:13:8c:ae:db:3c:ba:27:a6:04:e9:3a:ea:
         9c:00:c6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----