Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/3133382e35392e3136342e302f32322d3233203d3e20323633373332.roa
File:                     3133382e35392e3136342e302f32322d3233203d3e20323633373332.roa (raw, json)
Hash identifier:          iWJzD4KDUa3mKEJpHmy8nC+1E011GStZ9JVJCqvmi54=
Subject key identifier:   D1:A3:C4:CB:B9:6F:75:63:D8:45:DE:C6:68:F5:6C:CD:6B:47:C3:78
Certificate issuer:       /CN=D65CF4F69AC888255A41BFC6B6F0E71DA81E954B
Certificate serial:       54BE6AEEE58F77BBC50CEE51BAA7F8841BBE8A99
Authority key identifier: D6:5C:F4:F6:9A:C8:88:25:5A:41:BF:C6:B6:F0:E7:1D:A8:1E:95:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/3133382e35392e3136342e302f32322d3233203d3e20323633373332.roa
Signing time:             Fri 25 Oct 2024 19:10:00 +0000
ROA not before:           Fri 25 Oct 2024 19:05:00 +0000
ROA not after:            Fri 24 Oct 2025 19:10:00 +0000
asID:                     263732
IP address blocks:        138.59.164.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Tue 29 Oct 2024 09:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:be:6a:ee:e5:8f:77:bb:c5:0c:ee:51:ba:a7:f8:84:1b:be:8a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D65CF4F69AC888255A41BFC6B6F0E71DA81E954B
        Validity
            Not Before: Oct 25 19:05:00 2024 GMT
            Not After : Oct 24 19:10:00 2025 GMT
        Subject: CN=D1A3C4CBB96F7563D845DEC668F56CCD6B47C378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a2:19:58:74:8c:c8:ce:76:7b:3c:67:60:e4:
                    77:0c:75:b0:45:3c:d8:01:53:bb:b9:18:21:68:88:
                    d0:7c:32:81:cc:97:ec:c7:6e:ef:76:19:39:a2:6a:
                    0c:11:70:7f:f2:fb:77:e5:e1:27:60:fa:47:b4:99:
                    b5:86:93:a6:8e:dc:62:18:f5:b8:a3:9a:61:2a:cf:
                    1e:78:78:04:0b:05:7c:22:e7:81:6d:5e:05:2f:89:
                    f7:bf:15:c2:d5:de:26:9e:91:d5:a5:b4:68:fd:00:
                    25:29:95:2a:39:11:cc:ac:8d:7a:08:62:e7:fb:6a:
                    f7:b9:bf:cd:77:0b:78:78:c9:b8:09:ab:22:73:68:
                    ab:98:9a:6f:6a:63:2d:28:bf:02:db:3c:f8:c4:f0:
                    fc:1a:74:61:04:4a:e1:2f:24:b6:80:c6:61:98:e0:
                    cc:7d:0c:90:84:88:61:c5:40:3b:90:02:2f:26:bf:
                    e3:bc:77:4a:65:58:42:48:6f:56:81:35:00:16:1a:
                    7f:08:71:66:23:9e:c9:ef:c0:84:ba:9d:b3:81:e4:
                    68:22:de:a7:4c:60:dd:c6:0d:81:d0:bd:f3:15:02:
                    fb:9d:69:42:ce:92:86:7b:35:d6:98:48:3c:0f:54:
                    15:3d:f8:3a:7e:3b:97:fb:c4:8b:2c:84:2b:af:2b:
                    bf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A3:C4:CB:B9:6F:75:63:D8:45:DE:C6:68:F5:6C:CD:6B:47:C3:78
            X509v3 Authority Key Identifier:
                keyid:D6:5C:F4:F6:9A:C8:88:25:5A:41:BF:C6:B6:F0:E7:1D:A8:1E:95:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/3133382e35392e3136342e302f32322d3233203d3e20323633373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:4c:f2:0c:18:63:63:f2:1b:51:60:f7:7a:49:db:a6:36:c0:
         87:ec:d9:7f:ac:f8:4c:c8:7a:52:7f:a0:79:a5:ba:69:c3:30:
         ea:84:25:68:fd:ff:34:45:20:91:66:a1:35:21:b3:1d:a7:bc:
         d8:b1:77:2c:36:ad:28:91:1b:77:fd:82:39:4e:c7:4a:b4:d8:
         38:fc:13:ce:c0:e2:2b:85:fe:85:1f:02:b6:f1:1e:4b:2e:c5:
         d1:a8:00:6b:9b:cd:c7:66:12:2a:88:ed:d2:12:a4:af:bf:5e:
         c7:d9:d7:43:ba:8c:c1:85:04:0a:90:31:ff:10:e9:7d:fc:0c:
         3f:d5:13:2f:45:70:0b:e7:9c:7a:3a:e5:26:a5:45:c5:d7:b3:
         52:8e:53:c7:6f:54:f1:46:d2:6e:8c:ea:6c:db:5a:55:29:3b:
         2c:f6:41:b0:43:03:f7:71:72:6c:ba:f4:0a:62:db:ec:14:50:
         27:27:11:fc:3a:8a:1c:11:f6:2f:70:6e:da:4d:a2:e2:d4:1b:
         37:1a:21:3a:02:5f:79:fb:ad:fe:da:ff:84:59:c8:e5:21:73:
         ed:5d:3a:fd:ba:98:7d:79:5e:ce:ad:c5:2b:44:ca:1e:80:b2:
         41:ad:b5:e0:7f:19:e7:7a:ef:fe:47:a8:1a:81:6a:35:b2:d4:
         15:6e:6b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----