Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/3139302e372e3139322e302f32302d3234203d3e203237383736.roa
File:                     3139302e372e3139322e302f32302d3234203d3e203237383736.roa (raw, json)
Hash identifier:          kVb4xcjPVdDrDw7tmwvZO35eTGEQtXliVYnKQY++4Xw=
Subject key identifier:   B0:DE:8D:40:7A:DE:B1:EA:D5:91:64:F5:52:D0:17:3C:7C:AA:8B:E5
Certificate issuer:       /CN=4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31
Certificate serial:       0529DE98B9833B3E5BAC3831B412438DF6F969AF
Authority key identifier: 4C:C0:F6:F5:5E:2D:8E:C1:7B:01:31:A0:7F:A2:E8:C0:5D:E6:2E:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/3139302e372e3139322e302f32302d3234203d3e203237383736.roa
Signing time:             Tue 05 Mar 2024 18:14:58 +0000
ROA not before:           Tue 05 Mar 2024 18:09:58 +0000
ROA not after:            Tue 04 Mar 2025 18:14:58 +0000
asID:                     27876
IP address blocks:        190.7.192.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 20:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:29:de:98:b9:83:3b:3e:5b:ac:38:31:b4:12:43:8d:f6:f9:69:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31
        Validity
            Not Before: Mar  5 18:09:58 2024 GMT
            Not After : Mar  4 18:14:58 2025 GMT
        Subject: CN=B0DE8D407ADEB1EAD59164F552D0173C7CAA8BE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:86:e6:60:37:a5:28:eb:7b:aa:7a:b8:19:19:
                    e4:ad:19:1e:e9:17:76:76:fd:7c:11:f2:64:41:50:
                    49:ab:d6:53:14:47:2f:cc:3b:e1:61:d8:9a:b1:9a:
                    c0:5b:c6:9f:98:d8:f2:f4:2a:56:2c:ed:24:ca:59:
                    69:f7:45:58:1a:52:3b:0e:b6:82:c7:35:74:93:b4:
                    0a:d8:50:91:28:05:d7:67:17:94:d4:33:04:51:66:
                    22:60:84:1e:51:43:2e:f1:48:fe:d4:d1:02:e6:26:
                    d5:97:bc:e7:12:5e:d4:95:c7:ce:32:75:d2:35:f5:
                    5c:e7:ba:f2:80:e8:cc:b9:7a:b1:ed:f1:bd:af:0b:
                    19:8f:30:45:a2:d3:4e:e9:4a:3b:83:92:cc:47:56:
                    1b:f6:d1:ca:58:ad:90:5f:a9:18:89:12:34:ae:ab:
                    ce:07:f5:0e:11:15:ab:5d:8a:aa:2d:37:f3:24:51:
                    ee:9a:16:48:7d:c2:98:87:dd:2f:e1:d4:b2:64:f0:
                    1e:ae:d8:e9:a3:3c:dd:1f:9c:97:08:90:77:36:3e:
                    6c:d2:cc:98:f6:f5:55:35:6f:0e:92:f0:5e:a4:d2:
                    af:cd:7f:a6:95:e0:27:32:bd:ca:ae:86:d0:4c:b9:
                    2b:a4:1f:57:98:dd:47:d1:23:65:55:c1:bf:96:48:
                    24:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DE:8D:40:7A:DE:B1:EA:D5:91:64:F5:52:D0:17:3C:7C:AA:8B:E5
            X509v3 Authority Key Identifier:
                keyid:4C:C0:F6:F5:5E:2D:8E:C1:7B:01:31:A0:7F:A2:E8:C0:5D:E6:2E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/3139302e372e3139322e302f32302d3234203d3e203237383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:43:86:1e:52:4d:6a:f4:75:04:57:70:e3:56:77:84:bf:48:
         ab:c5:74:f2:d8:e4:e7:63:66:0a:19:c3:ce:fd:20:01:f9:38:
         06:79:2e:4d:05:cd:70:78:92:fd:5d:40:4c:69:fd:9b:56:72:
         1c:69:ba:23:b5:e8:a8:83:ec:04:66:62:b5:b5:9d:17:46:f3:
         43:f9:b4:1f:db:ac:00:0c:18:e0:a9:85:ff:6c:83:38:11:85:
         ca:b9:af:bc:9e:cb:27:2e:8d:d0:f5:06:df:9e:ac:b5:8a:cf:
         2d:15:8c:af:6a:cd:32:9d:15:76:f1:69:3f:e4:0f:9e:5b:df:
         b8:47:02:e3:11:ef:8f:01:1d:7a:52:f8:40:2a:86:1f:99:91:
         fb:2e:94:d2:f8:79:fb:cb:c3:63:9d:1e:57:07:ba:e5:20:1e:
         4d:52:48:36:2d:59:9d:3a:cd:fb:27:ab:50:53:d7:bb:e6:d8:
         c0:06:00:01:01:05:9b:24:40:bb:81:f7:4b:4e:46:f4:4c:69:
         82:37:0b:7f:a1:31:73:1b:3d:0d:d7:0c:ba:8a:d8:cb:bc:41:
         c6:2c:04:3c:e2:a3:19:ca:4b:a2:2e:4d:18:86:b3:37:da:1e:
         b7:90:f3:52:d2:45:8b:4b:46:57:8b:92:ba:40:8b:a5:ba:28:
         52:a9:35:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----