Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3138372e3132302e3137322e302f32322d3234203d3e203238353339.roa
File:                     3138372e3132302e3137322e302f32322d3234203d3e203238353339.roa (raw, json)
Hash identifier:          BC7OXc1v1XBHvZ6t0WSjJESVq1fS4Yi26i14dO39c3Y=
Subject key identifier:   E6:A5:D1:BB:85:1E:5F:E2:FF:42:19:94:60:E8:EC:7C:85:D2:96:6D
Certificate issuer:       /CN=5130CCCAB5C181CC9355D89381884515B85F4BA6
Certificate serial:       4F82DF2CDA5790E57367286999F7EA21E40782ED
Authority key identifier: 51:30:CC:CA:B5:C1:81:CC:93:55:D8:93:81:88:45:15:B8:5F:4B:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3138372e3132302e3137322e302f32322d3234203d3e203238353339.roa
Signing time:             Mon 17 Jun 2024 20:15:00 +0000
ROA not before:           Mon 17 Jun 2024 20:10:00 +0000
ROA not after:            Mon 16 Jun 2025 20:15:00 +0000
asID:                     28539
IP address blocks:        187.120.172.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Jun 2024 22:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:82:df:2c:da:57:90:e5:73:67:28:69:99:f7:ea:21:e4:07:82:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5130CCCAB5C181CC9355D89381884515B85F4BA6
        Validity
            Not Before: Jun 17 20:10:00 2024 GMT
            Not After : Jun 16 20:15:00 2025 GMT
        Subject: CN=E6A5D1BB851E5FE2FF42199460E8EC7C85D2966D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:80:43:69:57:37:29:3e:e9:cf:d7:24:7b:83:
                    21:69:f0:d2:01:65:c5:6f:84:05:78:d7:dd:d1:ec:
                    63:a8:23:e4:7c:f2:51:9c:7b:f0:c9:a5:06:10:28:
                    8c:2f:8e:f6:15:df:ad:f0:f1:76:a8:46:c0:86:0f:
                    1e:78:ad:fe:ca:9c:b7:b4:fa:5f:27:95:0a:2b:c2:
                    27:fd:7f:89:92:cc:32:6d:49:68:c1:cc:1b:ac:85:
                    d5:b3:75:48:b2:5f:d4:11:c8:18:76:d2:23:8d:a0:
                    0f:c1:c6:b4:83:a4:21:50:c3:ba:49:f1:6f:4b:3a:
                    da:3c:fe:43:7b:02:65:5a:8b:7c:82:1a:1b:33:ee:
                    52:3f:10:b9:72:b3:fd:27:84:38:a1:72:79:c1:e3:
                    71:49:d1:01:d1:a2:61:34:f7:98:28:e0:a8:d4:8b:
                    26:66:2a:25:6c:f6:06:62:78:79:b7:e3:52:01:d2:
                    36:6d:ef:1d:af:ff:93:5b:80:5b:de:1e:c5:e5:91:
                    0a:57:e1:af:8c:17:a6:79:35:04:03:78:79:3f:cf:
                    f5:f4:ed:a0:c3:d3:50:06:39:23:73:f9:4c:3e:dd:
                    d8:bf:6d:70:60:84:01:0e:54:90:85:bc:46:ad:86:
                    33:2e:1d:29:f2:01:ca:da:f6:cb:16:34:8a:c3:26:
                    e5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A5:D1:BB:85:1E:5F:E2:FF:42:19:94:60:E8:EC:7C:85:D2:96:6D
            X509v3 Authority Key Identifier:
                keyid:51:30:CC:CA:B5:C1:81:CC:93:55:D8:93:81:88:45:15:B8:5F:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5130CCCAB5C181CC9355D89381884515B85F4BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3138372e3132302e3137322e302f32322d3234203d3e203238353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:e2:19:5f:51:21:f1:5c:83:16:fa:89:af:9a:d1:5c:63:5b:
         c2:0c:94:db:66:26:84:09:dd:52:58:11:d0:4b:67:c7:00:69:
         61:2a:1a:21:6a:91:24:d0:b1:cc:51:6d:86:a8:3c:bd:86:32:
         e1:80:08:84:dd:9b:b2:c5:1e:4b:a9:24:a1:15:f2:7e:17:f2:
         47:0a:7e:29:06:d9:4f:19:4b:bd:26:ee:d9:d7:51:1f:2b:e2:
         da:0b:0f:e1:6a:ec:dd:84:a9:39:b7:95:8d:61:49:2e:44:45:
         6e:a9:99:a9:47:53:8a:75:ac:08:5a:64:c8:09:1a:ee:54:12:
         5c:e4:ec:5b:85:d5:72:09:95:08:53:e5:57:3d:24:85:97:b5:
         46:21:a0:ee:28:b0:6e:13:7e:8a:33:9c:2a:87:2e:46:a7:6e:
         4c:b8:8d:1c:ae:21:11:bd:18:c0:53:68:02:ae:2a:e4:03:d2:
         76:56:fc:35:f4:7c:2b:4e:80:f1:e2:d4:46:b6:b1:ec:22:c8:
         80:a3:e4:b1:d8:e2:69:73:38:e9:50:4f:02:19:ee:fb:b3:f5:
         e0:ef:25:33:b3:94:af:87:44:51:4f:dc:ef:c8:36:ce:f8:fb:
         97:06:6e:1e:13:2e:50:db:db:aa:79:f2:55:30:e0:13:44:a1:
         7c:16:46:98
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUT4LfLNpXkOVzZyhpmffqIeQHgu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEzMENDQ0FCNUMxODFDQzkzNTVEODkzODE4ODQ1MTVC
ODVGNEJBNjAeFw0yNDA2MTcyMDEwMDBaFw0yNTA2MTYyMDE1MDBaMDMxMTAvBgNV
BAMTKEU2QTVEMUJCODUxRTVGRTJGRjQyMTk5NDYwRThFQzdDODVEMjk2NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCagENpVzcpPunP1yR7gyFp8NIB
ZcVvhAV4193R7GOoI+R88lGce/DJpQYQKIwvjvYV363w8XaoRsCGDx54rf7KnLe0
+l8nlQorwif9f4mSzDJtSWjBzBushdWzdUiyX9QRyBh20iONoA/BxrSDpCFQw7pJ
8W9LOto8/kN7AmVai3yCGhsz7lI/ELlys/0nhDihcnnB43FJ0QHRomE095go4KjU
iyZmKiVs9gZieHm341IB0jZt7x2v/5NbgFveHsXlkQpX4a+MF6Z5NQQDeHk/z/X0
7aDD01AGOSNz+Uw+3di/bXBghAEOVJCFvEathjMuHSnyAcra9ssWNIrDJuVPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU5qXRu4UeX+L/QhmUYOjsfIXSlm0wHwYDVR0j
BBgwFoAUUTDMyrXBgcyTVdiTgYhFFbhfS6YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQzQwRjVDNzAyMTUxODc5NzBCMUY5MDQ1NDk3OUIzNzlC
ODAzMTA4Nzg4NTI2MkE3MDUwQUVFNjdCNEE0QUUyLzAvNTEzMENDQ0FCNUMxODFD
QzkzNTVEODkzODE4ODQ1MTVCODVGNEJBNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MTMwQ0NDQUI1QzE4MUNDOTM1
NUQ4OTM4MTg4NDUxNUI4NUY0QkE2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkM0MEY1QzcwMjE1MTg3OTcwQjFGOTA0NTQ5NzlCMzc5QjgwMzEwODc4
ODUyNjJBNzA1MEFFRTY3QjRBNEFFMi8wLzMxMzgzNzJlMzEzMjMwMmUzMTM3MzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzUzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCu3is
MA0GCSqGSIb3DQEBCwUAA4IBAQDM4hlfUSHxXIMW+omvmtFcY1vCDJTbZiaECd1S
WBHQS2fHAGlhKhohapEk0LHMUW2GqDy9hjLhgAiE3ZuyxR5LqSShFfJ+F/JHCn4p
BtlPGUu9Ju7Z11EfK+LaCw/hauzdhKk5t5WNYUkuREVuqZmpR1OKdawIWmTICRru
VBJc5OxbhdVyCZUIU+VXPSSFl7VGIaDuKLBuE36KM5wqhy5Gp25MuI0criERvRjA
U2gCrirkA9J2Vvw19HwrToDx4tRGtrHsIsiAo+Sx2OJpczjpUE8CGe77s/Xg7yUz
s5Svh0RRT9zvyDbO+PuXBm4eEy5Q29uqefJVMOATRKF8FkaY
-----END CERTIFICATE-----