Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/3139302e3131342e3139322e302f31392d3230203d3e203237383833.roa
File:                     3139302e3131342e3139322e302f31392d3230203d3e203237383833.roa (raw, json)
Hash identifier:          OYbRR9KxecUtZkpYkn/i/ppMf3f/skxB1zqcocvKhMM=
Subject key identifier:   48:83:3C:07:A2:C3:DC:7E:1B:A7:5D:67:8C:89:5F:D2:F9:7A:19:E6
Certificate issuer:       /CN=D90D4EBE37D6BB163A0862C08C60BF8163DA0194
Certificate serial:       478B41FDB3DD32BAB68E99C49A719FC09D2BF456
Authority key identifier: D9:0D:4E:BE:37:D6:BB:16:3A:08:62:C0:8C:60:BF:81:63:DA:01:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/3139302e3131342e3139322e302f31392d3230203d3e203237383833.roa
Signing time:             Tue 05 Mar 2024 18:16:03 +0000
ROA not before:           Tue 05 Mar 2024 18:11:03 +0000
ROA not after:            Tue 04 Mar 2025 18:16:03 +0000
asID:                     27883
IP address blocks:        190.114.192.0/19 maxlen: 20

Validation:               Failed, certificate revoked on Tue 11 Jun 2024 14:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8b:41:fd:b3:dd:32:ba:b6:8e:99:c4:9a:71:9f:c0:9d:2b:f4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D90D4EBE37D6BB163A0862C08C60BF8163DA0194
        Validity
            Not Before: Mar  5 18:11:03 2024 GMT
            Not After : Mar  4 18:16:03 2025 GMT
        Subject: CN=48833C07A2C3DC7E1BA75D678C895FD2F97A19E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:09:02:02:48:ef:18:a4:55:4c:59:de:87:c3:
                    9d:4d:8c:5f:86:00:b0:f1:1c:3f:60:7f:3f:4c:7c:
                    c0:78:19:18:04:60:e7:63:62:ae:00:46:c9:13:db:
                    96:dd:b1:30:d8:10:1c:e2:9d:ca:e2:5d:c3:36:53:
                    32:45:bf:f7:f8:fa:b1:c1:92:a8:44:52:ae:81:1a:
                    01:d9:3f:83:c6:90:08:72:41:e0:77:dd:b0:84:62:
                    0f:9c:96:76:ba:b7:d0:9a:23:f0:a0:ee:27:20:e6:
                    b3:e2:68:36:55:10:a1:c0:53:b6:ea:47:45:4e:1f:
                    11:ff:48:c5:96:9a:82:68:9c:f3:d6:03:1a:15:2a:
                    bf:02:d1:9f:4a:fa:48:b4:a2:49:a8:9b:94:c4:62:
                    e8:18:d8:51:fa:d4:66:7f:0b:6e:3b:fe:82:d3:32:
                    ed:a9:54:a5:fe:bc:01:2d:2d:5b:00:83:9b:14:2f:
                    25:55:a3:a3:6d:a2:a3:84:1c:78:58:ea:20:fd:f3:
                    2c:37:81:9b:1c:bc:6b:05:e1:8c:40:64:05:84:63:
                    a3:4c:41:09:2a:f6:28:a8:68:07:00:cd:5c:85:7f:
                    a1:5b:99:cd:9d:49:f4:b9:83:ce:4e:91:80:29:5a:
                    f3:87:74:fd:08:d8:0c:c6:d6:29:de:af:87:86:af:
                    0d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:83:3C:07:A2:C3:DC:7E:1B:A7:5D:67:8C:89:5F:D2:F9:7A:19:E6
            X509v3 Authority Key Identifier:
                keyid:D9:0D:4E:BE:37:D6:BB:16:3A:08:62:C0:8C:60:BF:81:63:DA:01:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/3139302e3131342e3139322e302f31392d3230203d3e203237383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6d:f8:4b:e0:c3:17:7e:79:2a:c7:a2:ad:60:92:86:52:7a:15:
         bd:f2:31:14:a2:02:4d:2e:18:07:79:3e:3d:97:68:87:33:4c:
         bc:29:48:99:4e:37:ab:42:a2:03:6a:08:17:bc:e5:6f:b3:ee:
         c5:8e:1b:8d:45:ca:1d:d8:fe:f5:e8:d8:f2:e1:e9:31:fa:66:
         29:68:b2:80:d1:a9:21:3b:60:b9:11:30:13:85:0b:c2:88:3c:
         45:f4:3c:63:f8:04:5d:1a:08:b2:b6:d3:36:32:5b:68:8f:c8:
         6f:cf:6b:39:96:f7:48:d8:e4:12:e9:1b:c3:50:79:6a:77:90:
         04:15:58:b8:2f:af:6c:50:b8:e0:d7:ac:92:34:de:78:b0:c9:
         10:12:16:75:64:7f:59:09:4f:cf:36:73:26:a8:82:44:31:8c:
         cb:da:d8:3e:1c:b9:d6:19:c5:ec:3b:0d:4f:15:a9:57:09:2e:
         86:4b:a1:4d:05:b6:67:f9:5b:d0:c7:57:54:9e:a9:12:27:3a:
         41:8e:b4:e6:60:bc:bb:2b:9f:af:1a:5a:ce:96:e3:7d:a9:86:
         ef:be:10:1e:a9:90:26:ec:60:a2:a0:68:3e:3a:08:85:7c:d1:
         20:6b:f8:d8:c0:01:08:d4:61:d3:e3:c4:ff:8b:dd:4f:11:e4:
         20:67:bf:32
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUR4tB/bPdMrq2jpnEmnGfwJ0r9FYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDkwRDRFQkUzN0Q2QkIxNjNBMDg2MkMwOEM2MEJGODE2
M0RBMDE5NDAeFw0yNDAzMDUxODExMDNaFw0yNTAzMDQxODE2MDNaMDMxMTAvBgNV
BAMTKDQ4ODMzQzA3QTJDM0RDN0UxQkE3NUQ2NzhDODk1RkQyRjk3QTE5RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUCQICSO8YpFVMWd6Hw51NjF+G
ALDxHD9gfz9MfMB4GRgEYOdjYq4ARskT25bdsTDYEBzincriXcM2UzJFv/f4+rHB
kqhEUq6BGgHZP4PGkAhyQeB33bCEYg+clna6t9CaI/Cg7icg5rPiaDZVEKHAU7bq
R0VOHxH/SMWWmoJonPPWAxoVKr8C0Z9K+ki0okmom5TEYugY2FH61GZ/C247/oLT
Mu2pVKX+vAEtLVsAg5sULyVVo6NtoqOEHHhY6iD98yw3gZscvGsF4YxAZAWEY6NM
QQkq9iioaAcAzVyFf6Fbmc2dSfS5g85OkYApWvOHdP0I2AzG1iner4eGrw3BAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUSIM8B6LD3H4bp11njIlf0vl6GeYwHwYDVR0j
BBgwFoAU2Q1OvjfWuxY6CGLAjGC/gWPaAZQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNkNEMENDQ0I2NTNEQjVCQzUxRDQ3OUIxODczNkM1M0RD
NjVDRUMwREYwMzk2MjJBMjI3RUExNjQ4RURDRjgwLzAvRDkwRDRFQkUzN0Q2QkIx
NjNBMDg2MkMwOEM2MEJGODE2M0RBMDE5NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOTBENEVCRTM3RDZCQjE2M0Ew
ODYyQzA4QzYwQkY4MTYzREEwMTk0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTZDRDBDQ0NCNjUzREI1QkM1MUQ0NzlCMTg3MzZDNTNEQzY1Q0VDMERG
MDM5NjIyQTIyN0VBMTY0OEVEQ0Y4MC8wLzMxMzkzMDJlMzEzMTM0MmUzMTM5MzIy
ZTMwMmYzMTM5MmQzMjMwMjAzZDNlMjAzMjM3MzgzODMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFvnLA
MA0GCSqGSIb3DQEBCwUAA4IBAQBt+Evgwxd+eSrHoq1gkoZSehW98jEUogJNLhgH
eT49l2iHM0y8KUiZTjerQqIDaggXvOVvs+7FjhuNRcod2P716Njy4ekx+mYpaLKA
0akhO2C5ETAThQvCiDxF9Dxj+ARdGgiyttM2Mltoj8hvz2s5lvdI2OQS6RvDUHlq
d5AEFVi4L69sULjg16ySNN54sMkQEhZ1ZH9ZCU/PNnMmqIJEMYzL2tg+HLnWGcXs
Ow1PFalXCS6GS6FNBbZn+VvQx1dUnqkSJzpBjrTmYLy7K5+vGlrOluN9qYbvvhAe
qZAm7GCioGg+OgiFfNEga/jYwAEI1GHT48T/i91PEeQgZ78y
-----END CERTIFICATE-----