Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/3133382e3132312e38302e302f32332d3234203d3e203631353030.roa
File:                     3133382e3132312e38302e302f32332d3234203d3e203631353030.roa (raw, json)
Hash identifier:          TRP+kPKVQTc1Yn18voC8wkuYxwks4+Bsd9i9OyLKHfI=
Subject key identifier:   A8:93:5A:88:61:CA:B9:7A:C5:63:9F:56:CA:3B:49:74:EA:F9:0E:95
Certificate issuer:       /CN=A7C599055F36D3C6330474B282FC543C5378F8BA
Certificate serial:       74F9E0C4EEBBA21BB33128552F62119A27BC70D2
Authority key identifier: A7:C5:99:05:5F:36:D3:C6:33:04:74:B2:82:FC:54:3C:53:78:F8:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7C599055F36D3C6330474B282FC543C5378F8BA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/3133382e3132312e38302e302f32332d3234203d3e203631353030.roa
Signing time:             Tue 05 Mar 2024 17:58:02 +0000
ROA not before:           Tue 05 Mar 2024 17:53:02 +0000
ROA not after:            Tue 04 Mar 2025 17:58:02 +0000
asID:                     61500
IP address blocks:        138.121.80.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sat 26 Oct 2024 00:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f9:e0:c4:ee:bb:a2:1b:b3:31:28:55:2f:62:11:9a:27:bc:70:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7C599055F36D3C6330474B282FC543C5378F8BA
        Validity
            Not Before: Mar  5 17:53:02 2024 GMT
            Not After : Mar  4 17:58:02 2025 GMT
        Subject: CN=A8935A8861CAB97AC5639F56CA3B4974EAF90E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f2:c7:59:ad:50:bc:48:08:6f:26:e4:c6:d2:
                    79:26:4d:c0:7b:9f:6f:6e:00:9e:00:34:14:f2:42:
                    f2:45:38:d4:ff:df:b6:0c:99:ed:88:bb:fd:18:66:
                    38:45:c2:4f:b6:ff:dd:95:11:4c:2b:39:f6:6b:56:
                    4a:09:54:12:09:8a:81:91:8f:87:62:1a:59:80:31:
                    ae:12:e1:e1:72:21:49:ac:f7:06:c7:18:6c:01:76:
                    e2:f2:11:1a:9e:b4:aa:83:57:22:e0:aa:52:59:34:
                    10:7e:1d:1c:2c:6d:1e:f8:91:03:2b:5e:9a:e1:fc:
                    e5:93:e3:a5:35:29:28:d6:80:b4:e3:57:83:25:95:
                    c1:2f:88:65:4b:91:80:e0:c1:6b:8b:cc:36:9b:24:
                    56:b3:9a:2f:cf:ba:ab:fe:c0:a8:04:d1:e8:16:9a:
                    f9:18:6e:1b:2c:3f:ef:37:dd:ec:53:45:bb:42:96:
                    17:bf:7e:4c:fe:08:45:34:c5:d7:8c:82:c6:f4:df:
                    35:66:ea:45:95:16:0a:d3:1d:32:ae:0d:d8:88:ee:
                    46:7b:3e:16:ea:42:5b:c4:43:e2:d2:b0:4e:48:24:
                    e9:74:63:9c:72:46:72:68:ec:b5:e6:f5:33:42:3e:
                    c0:6a:23:8d:f8:1c:7c:61:3b:1f:5b:0b:c6:c3:be:
                    c7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:93:5A:88:61:CA:B9:7A:C5:63:9F:56:CA:3B:49:74:EA:F9:0E:95
            X509v3 Authority Key Identifier:
                keyid:A7:C5:99:05:5F:36:D3:C6:33:04:74:B2:82:FC:54:3C:53:78:F8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/A7C599055F36D3C6330474B282FC543C5378F8BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7C599055F36D3C6330474B282FC543C5378F8BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/3133382e3132312e38302e302f32332d3234203d3e203631353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:79:0d:ab:fb:c7:ab:2d:7f:68:7c:a7:8a:13:3d:cd:bc:1e:
         37:ee:88:06:b9:89:17:b8:8d:c7:d9:21:44:c9:4a:94:0a:8d:
         a2:61:c3:2f:98:6f:b1:d2:0e:eb:0b:02:4f:c8:41:79:b8:3a:
         81:5a:c7:05:88:de:ca:29:46:c9:56:6f:4c:82:9c:33:77:22:
         91:71:55:23:72:23:d1:fa:14:51:87:62:4d:7b:e4:3b:50:ea:
         66:37:0b:14:a5:f6:08:13:c7:42:e7:cb:ba:16:54:33:fb:44:
         3f:73:e0:80:9e:46:1c:bb:c5:2c:e6:dc:66:77:6f:20:d0:fc:
         83:fa:31:bb:5e:af:9d:60:51:70:f4:63:ea:70:23:42:86:7e:
         c6:f4:15:f7:c2:b9:12:ea:40:65:35:f6:6a:85:2b:29:4f:b5:
         f4:32:ba:d2:f6:a8:a7:f0:f6:fb:9f:02:68:76:59:a4:85:26:
         d5:93:19:a0:d0:9c:58:b7:b5:d0:84:df:ca:2a:03:25:77:2f:
         7c:60:a6:63:a0:15:53:12:5c:d6:da:d5:06:6b:83:bb:bf:a7:
         2d:1e:80:8e:f8:ac:68:fb:6a:c7:cc:49:f4:72:bf:8b:45:c7:
         c8:d2:a9:cd:d8:21:39:af:39:97:25:58:0e:de:7d:f3:1c:8d:
         0b:50:e6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----