Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3139302e31312e34382e302f32302d3230203d3e203131383135.roa
File:                     3139302e31312e34382e302f32302d3230203d3e203131383135.roa (raw, json)
Hash identifier:          1XlrJGu2rS8BTshJitBM9uWAcem8bLri43kVvN7dzvY=
Subject key identifier:   28:E7:73:D6:24:72:0B:11:8C:88:7D:44:CC:61:4B:6B:21:CA:8D:40
Certificate issuer:       /CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
Certificate serial:       59DBAB66F4E0E2E2C4C3ABB8AAAB61976F9849BE
Authority key identifier: D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3139302e31312e34382e302f32302d3230203d3e203131383135.roa
Signing time:             Tue 05 Mar 2024 18:22:33 +0000
ROA not before:           Tue 05 Mar 2024 18:17:33 +0000
ROA not after:            Tue 04 Mar 2025 18:22:33 +0000
asID:                     11815
IP address blocks:        190.11.48.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 17:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:db:ab:66:f4:e0:e2:e2:c4:c3:ab:b8:aa:ab:61:97:6f:98:49:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
        Validity
            Not Before: Mar  5 18:17:33 2024 GMT
            Not After : Mar  4 18:22:33 2025 GMT
        Subject: CN=28E773D624720B118C887D44CC614B6B21CA8D40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f4:76:a6:3d:c7:0b:ff:a5:f6:3b:5e:04:ef:
                    dc:87:b1:36:d4:7a:94:5e:82:07:52:b1:29:bd:e8:
                    e2:e8:08:39:a0:9f:01:f0:b0:d5:78:dd:19:df:36:
                    f3:ae:5f:8d:bb:b6:43:8d:74:07:e2:8f:14:63:fc:
                    5f:9f:76:dd:0c:21:b7:4a:68:e3:c5:bb:97:a2:05:
                    bd:21:20:ca:54:66:c0:a2:84:4d:48:ca:c4:5e:d5:
                    76:ea:ce:53:44:56:01:9e:c0:06:46:4b:fb:fe:3c:
                    46:3c:3c:32:0d:bc:f5:bf:88:54:bb:13:06:a8:54:
                    f6:a7:32:46:15:8a:8a:e5:ad:8c:09:ba:b7:da:27:
                    5d:6d:1b:50:b1:f3:fb:e8:7e:90:97:d2:a4:7c:f7:
                    9f:16:14:fb:82:5c:27:f0:3a:7b:17:f6:e8:75:64:
                    d7:1e:b2:55:04:4e:55:2f:69:72:32:ac:f6:f6:5a:
                    fe:d7:19:2b:b0:be:e4:2e:eb:d2:7d:2e:f8:4f:ce:
                    79:a6:2c:2f:8c:ad:83:15:3c:3f:e6:e3:68:1a:c2:
                    b1:9c:fc:6a:d8:6e:d9:cf:ce:b9:ba:ea:e0:8d:47:
                    ae:53:81:a8:69:a0:39:8a:53:81:7d:14:39:0d:6a:
                    e9:dd:8c:6f:b0:61:c3:37:4a:13:c2:61:06:7b:09:
                    2b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E7:73:D6:24:72:0B:11:8C:88:7D:44:CC:61:4B:6B:21:CA:8D:40
            X509v3 Authority Key Identifier:
                keyid:D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3139302e31312e34382e302f32302d3230203d3e203131383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:d3:ab:40:62:c5:08:9c:41:eb:c7:e5:95:5b:c8:b2:c4:2b:
         b0:34:bb:40:f8:5d:f8:73:c7:94:82:ba:4c:0f:76:b3:1e:c0:
         86:af:b3:67:40:43:16:0a:64:f9:a3:e1:6f:f7:8f:de:12:a8:
         04:4b:bf:bd:ad:93:46:53:3a:e6:27:02:33:cb:6c:8c:0b:41:
         34:31:44:c0:6a:74:92:47:55:2c:23:8e:d3:61:56:b2:d0:98:
         f5:f4:83:97:8e:ac:93:1c:55:1b:31:bd:e7:d8:a0:47:cd:62:
         52:75:91:90:3e:64:5c:da:f1:53:14:a2:fe:bd:1d:30:bf:ee:
         65:bd:8d:f2:c0:11:e9:e3:b6:5d:2a:eb:d5:68:a8:d1:af:1c:
         48:63:08:e1:58:cd:19:f6:6f:86:65:da:6c:f3:df:4a:15:27:
         8c:28:b9:bc:d7:33:37:53:f1:ce:d4:01:74:91:c3:94:b5:3e:
         7c:31:d6:ce:9c:38:03:5d:87:a1:fc:e7:c8:a6:46:0b:ac:d8:
         34:c4:be:99:15:43:dc:48:7c:e6:03:54:2a:d9:b5:f1:a4:b8:
         0a:51:83:ea:67:73:ef:54:9e:19:34:02:b1:cd:5b:0c:81:84:
         23:32:51:5f:e8:5f:08:7b:b3:e7:d1:b5:49:c7:2c:98:34:d1:
         72:20:09:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----