Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/3138362e3134382e3139362e302f32322d3232203d3e203237303033.roa
File:                     3138362e3134382e3139362e302f32322d3232203d3e203237303033.roa (raw, json)
Hash identifier:          a7xJ8BueGXr/NyLk+TZmWvazxGBtBne9UXXNYQO4cD8=
Subject key identifier:   92:AB:8B:25:BE:2E:6C:C1:DB:FD:DC:2E:13:B0:07:12:DE:0A:58:4A
Certificate issuer:       /CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
Certificate serial:       29971B8A242710F878FF20C2095CCC73E6CB797B
Authority key identifier: 5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/3138362e3134382e3139362e302f32322d3232203d3e203237303033.roa
Signing time:             Thu 23 May 2024 21:05:00 +0000
ROA not before:           Thu 23 May 2024 21:00:00 +0000
ROA not after:            Thu 22 May 2025 21:05:00 +0000
asID:                     27003
IP address blocks:        186.148.196.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 24 May 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:97:1b:8a:24:27:10:f8:78:ff:20:c2:09:5c:cc:73:e6:cb:79:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
        Validity
            Not Before: May 23 21:00:00 2024 GMT
            Not After : May 22 21:05:00 2025 GMT
        Subject: CN=92AB8B25BE2E6CC1DBFDDC2E13B00712DE0A584A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dd:3c:c9:47:e5:3d:76:bc:68:7b:a3:c2:69:
                    c8:e8:e0:6c:dd:51:b1:1b:5e:c8:66:d3:5f:33:f8:
                    6a:f8:8f:73:f8:61:e7:e1:64:ec:a9:34:6f:28:18:
                    90:39:99:42:fb:31:c7:ee:b3:06:29:4f:c7:97:e6:
                    c8:f7:7f:bb:7f:19:b2:9c:d6:a4:b8:9c:6b:56:8f:
                    3f:36:14:79:70:5e:d9:f1:72:0f:f3:fe:e6:69:24:
                    c8:8a:b3:63:44:15:6e:3c:f2:ad:50:d0:8f:ed:00:
                    74:b0:c7:25:12:33:a3:db:45:eb:13:2d:a3:e1:07:
                    5c:5a:30:58:de:1a:43:e8:60:14:4d:78:8e:f0:7d:
                    d6:e6:d3:e9:8b:3a:f2:e0:27:20:88:1e:4f:05:01:
                    e7:81:2d:d4:fa:77:c3:53:2f:7d:c0:54:36:79:d0:
                    59:e6:de:07:1c:02:28:9e:af:ba:6a:72:11:be:82:
                    27:f4:0e:82:cc:7f:85:03:15:68:df:6f:fd:52:e9:
                    bb:c2:61:90:6b:74:67:0f:64:08:56:73:38:58:3c:
                    d7:44:13:80:ab:24:22:f7:9c:2c:88:dd:bd:10:b3:
                    c9:04:c1:3d:8c:60:0f:54:7c:a3:da:b2:cc:be:ad:
                    cb:16:81:ef:69:57:92:16:58:81:01:e6:87:f6:23:
                    58:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AB:8B:25:BE:2E:6C:C1:DB:FD:DC:2E:13:B0:07:12:DE:0A:58:4A
            X509v3 Authority Key Identifier:
                keyid:5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/3138362e3134382e3139362e302f32322d3232203d3e203237303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:08:64:6d:79:b4:28:0b:a9:6e:ba:e0:64:a5:65:c8:81:68:
         20:a5:5d:dd:df:26:3f:2c:fc:09:a8:71:66:49:d7:a2:2d:e5:
         17:be:0f:04:30:5f:07:06:58:5c:07:48:ab:b9:0d:ec:4d:72:
         62:83:b0:98:c6:83:e4:49:6c:28:c8:78:96:e7:57:b1:80:98:
         23:20:2a:fb:84:7d:10:37:26:47:0c:d2:83:d0:36:bb:91:4a:
         62:fb:f4:d3:89:08:c6:ba:f4:97:ca:8c:1c:a0:da:a9:c9:71:
         80:01:88:01:75:1e:8e:ce:34:8d:c9:6b:a0:df:4a:ec:4c:00:
         7c:55:b8:4a:f3:2e:d5:7f:7b:e4:47:52:9c:9d:91:3e:2c:62:
         62:bc:1c:12:4d:8e:b9:ed:00:7e:e3:19:55:67:56:5d:d7:66:
         5a:fa:b7:c3:fb:81:32:fb:7e:91:93:cc:a6:ac:13:8e:23:35:
         f8:df:c9:d1:d5:5e:03:4a:b9:98:2c:35:2f:f0:af:fd:6b:4c:
         10:06:81:c3:8c:4b:fa:bf:0b:f2:28:11:92:5f:f3:0f:93:f2:
         33:c5:dc:70:38:5f:88:cf:a5:70:89:8b:03:10:bf:41:89:77:
         ca:71:7d:ec:b7:e3:7d:7e:ee:23:a7:ef:aa:31:9c:b5:6f:82:
         a7:66:f5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----