Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3130382e302f32322d3234203d3e20323730303931.roa
File:                     3139302e3130392e3130382e302f32322d3234203d3e20323730303931.roa (raw, json)
Hash identifier:          9qdX9ZToGRcZQK2p57ez4/c7YDSWZ02tVQqc3mIPK4w=
Subject key identifier:   B2:5D:D6:86:15:E3:F7:3E:5F:A3:43:54:11:A1:4E:41:FC:C9:87:90
Certificate issuer:       /CN=6BA68E6954F674D809D554249D117B58A4F64EC0
Certificate serial:       29E5C9FBDFDB472BA5F0CFC6F30659D6FC5B2D32
Authority key identifier: 6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3130382e302f32322d3234203d3e20323730303931.roa
Signing time:             Mon 12 Aug 2024 19:30:00 +0000
ROA not before:           Mon 12 Aug 2024 19:25:00 +0000
ROA not after:            Mon 11 Aug 2025 19:30:00 +0000
asID:                     270091
IP address blocks:        190.109.108.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 20 Aug 2024 23:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e5:c9:fb:df:db:47:2b:a5:f0:cf:c6:f3:06:59:d6:fc:5b:2d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BA68E6954F674D809D554249D117B58A4F64EC0
        Validity
            Not Before: Aug 12 19:25:00 2024 GMT
            Not After : Aug 11 19:30:00 2025 GMT
        Subject: CN=B25DD68615E3F73E5FA3435411A14E41FCC98790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:d7:e6:8f:cf:2a:ba:b6:d0:f8:ec:28:e5:
                    57:aa:27:33:75:64:b1:af:c8:d1:a3:8a:17:b6:e0:
                    66:6b:f8:70:b9:d5:cd:56:68:f7:72:a6:f8:61:71:
                    94:bb:75:60:34:e2:18:8d:e9:3f:0e:57:5d:d1:cb:
                    37:4b:78:19:b5:87:3f:de:35:70:86:cd:a6:7a:d2:
                    8b:ba:98:72:c7:dc:66:8a:ed:67:6a:43:09:a5:73:
                    41:99:9b:83:b7:1d:a7:5f:51:b8:6f:40:43:4e:2b:
                    a4:94:b3:47:77:71:9a:8f:a2:47:ab:04:ec:4f:f6:
                    e9:63:4f:8e:40:11:87:78:91:a5:14:b4:4d:45:15:
                    6c:e6:80:55:97:70:8a:39:d7:68:50:e7:aa:5d:0a:
                    9b:7a:eb:99:89:6d:99:4b:f6:f9:9e:01:b1:ee:45:
                    16:c9:af:06:ea:34:c6:9f:df:01:a6:db:5a:84:60:
                    97:45:69:f9:dd:da:ef:a1:1e:3a:b2:70:bf:4c:58:
                    9c:13:7a:37:c8:c1:8b:a8:32:6f:b3:f2:30:0b:7a:
                    66:3d:8d:5a:d2:3d:69:16:99:01:4d:32:ea:be:62:
                    12:11:4a:b3:a9:b3:92:cf:20:24:72:f5:4a:f4:8a:
                    91:15:9d:46:65:6c:ea:0b:72:04:f8:47:6f:02:6a:
                    a7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5D:D6:86:15:E3:F7:3E:5F:A3:43:54:11:A1:4E:41:FC:C9:87:90
            X509v3 Authority Key Identifier:
                keyid:6B:A6:8E:69:54:F6:74:D8:09:D5:54:24:9D:11:7B:58:A4:F6:4E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/6BA68E6954F674D809D554249D117B58A4F64EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6BA68E6954F674D809D554249D117B58A4F64EC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C60E37D3270C696932311F7CD59C9EF5D9A101AA992BBF23598B62A73E3060A6/0/3139302e3130392e3130382e302f32322d3234203d3e20323730303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:73:36:5f:a0:90:9d:2c:df:b4:dd:98:59:8d:92:3d:0e:de:
         d8:42:36:04:5e:50:8b:bc:82:65:af:13:b1:4b:c8:db:bf:ac:
         8e:90:e2:70:c6:a4:b1:38:6d:82:0b:9d:2e:0b:7a:a0:da:46:
         3b:a0:9b:72:06:03:48:48:ae:d3:99:e3:ba:9b:53:7e:37:79:
         8a:b7:6a:cc:5c:72:bb:31:d5:11:57:f3:56:0f:3f:07:8a:04:
         f0:61:70:db:96:fb:c2:66:84:ed:fb:5c:b0:89:dd:0c:61:38:
         17:d6:18:4d:e7:7e:a0:46:41:ae:e6:e5:f0:a6:dc:e6:63:74:
         9a:f7:20:ec:dd:34:e5:7e:3c:2f:17:e4:2b:ea:55:90:c7:34:
         43:7b:b6:33:b4:00:cb:61:24:ec:09:45:5f:ce:59:5f:a4:9b:
         c6:49:ba:e6:f7:6b:38:ea:32:46:4f:8b:ba:11:c8:1a:80:87:
         38:0b:87:da:90:c3:44:82:c4:d1:bb:ff:dc:e3:a3:64:64:f6:
         ed:1d:0b:3a:90:a7:d2:d7:72:68:19:9c:53:ed:8c:f7:0e:38:
         38:82:68:ef:4f:1e:be:01:67:5b:a3:d3:15:90:1b:89:4e:db:
         72:63:57:1b:40:42:b3:77:40:d6:ae:52:ab:26:9c:49:69:3d:
         d8:3d:65:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----