Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e39312e3232342e302f31392d3234203d3e203138373437.roa
File:                     3230302e39312e3232342e302f31392d3234203d3e203138373437.roa (raw, json)
Hash identifier:          NWg1UNeUnRdYfjEu4rBV76TE0tyMgdZHaxe0oOfEvbw=
Subject key identifier:   1F:8A:86:7B:6A:99:A8:31:97:F1:23:76:1F:A2:34:6C:9D:FD:6C:3F
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       0EC81BFF03407CE4162B5F9836D5AA73E5BFF501
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e39312e3232342e302f31392d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:05 +0000
ROA not before:           Tue 05 Mar 2024 17:54:05 +0000
ROA not after:            Tue 04 Mar 2025 17:59:05 +0000
asID:                     18747
IP address blocks:        200.91.224.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 16:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c8:1b:ff:03:40:7c:e4:16:2b:5f:98:36:d5:aa:73:e5:bf:f5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:05 2024 GMT
            Not After : Mar  4 17:59:05 2025 GMT
        Subject: CN=1F8A867B6A99A83197F123761FA2346C9DFD6C3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:38:b8:6d:60:b2:69:d9:b6:78:8d:e2:4d:f0:
                    d7:45:52:d4:b1:f9:ef:94:9b:20:a6:47:f6:ec:f7:
                    3e:d5:23:f0:80:3d:73:7f:00:54:a4:40:91:a8:2c:
                    ee:7d:17:69:b2:74:8a:06:dd:3b:0f:fe:b2:4a:d2:
                    1a:76:41:f5:1f:12:73:c5:72:d3:0a:3a:64:08:ba:
                    d3:93:85:aa:47:d2:60:46:fe:a1:65:5f:8a:56:e9:
                    aa:db:f1:9f:57:b3:3f:28:66:4b:0a:bd:d5:2d:36:
                    86:4a:f8:62:1e:ea:a8:e0:36:59:60:58:e3:33:8e:
                    fd:ca:11:60:31:53:81:87:5a:f9:c1:25:59:34:16:
                    d4:e9:cf:31:cb:ef:be:da:68:b7:93:86:65:44:f8:
                    86:88:fd:73:5c:a1:56:17:10:43:65:55:49:23:c7:
                    6e:0b:a7:ac:79:c2:0d:37:a9:d5:38:26:8c:2a:d1:
                    5d:54:d9:d4:48:d7:e3:77:5d:19:b1:d8:22:45:e7:
                    03:d7:de:02:73:58:fb:93:3a:02:dd:a4:37:97:1c:
                    01:19:b7:01:f4:47:6c:03:87:9d:a2:d6:5f:4b:4a:
                    c2:22:ad:dc:68:ef:c6:ae:3b:dd:8b:40:85:4d:9d:
                    ee:8f:f9:28:3d:b9:91:23:ed:ef:3f:68:22:97:38:
                    a7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8A:86:7B:6A:99:A8:31:97:F1:23:76:1F:A2:34:6C:9D:FD:6C:3F
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e39312e3232342e302f31392d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4d:c0:a8:73:e2:c4:28:3f:54:9e:89:1b:71:35:ad:31:8e:69:
         5c:63:28:12:b6:ee:0e:3f:49:b7:9f:da:2a:11:37:1e:d7:bf:
         71:12:53:fb:45:b2:7e:13:6f:38:38:02:2c:82:3a:40:51:4d:
         57:ce:0a:01:b6:e8:ff:4d:7b:03:83:55:1c:da:f1:e4:74:8e:
         a7:59:8d:75:bd:41:4f:ad:4f:ff:01:c3:ee:d5:c9:2d:02:0a:
         98:b1:4d:7b:04:0e:f6:a0:13:90:81:2d:db:19:82:57:a9:c4:
         7b:ee:bb:35:02:39:31:f5:05:8e:20:08:ec:81:2a:8b:3f:05:
         f3:34:42:b3:ff:4d:ab:6f:b0:39:58:68:bf:23:19:ea:ef:70:
         01:d8:3e:58:b1:61:16:31:3e:03:dc:86:35:5c:e1:5f:54:25:
         08:c6:48:b8:91:9b:70:05:0b:de:d5:1a:44:71:71:e9:9a:97:
         00:7d:3e:63:1d:b2:ce:57:89:7f:17:c3:96:8b:dc:d8:f0:c3:
         62:bb:30:af:c4:cf:03:40:ee:9f:4d:0d:2b:f1:52:7e:3c:60:
         77:51:e2:33:3c:de:f3:b5:be:d3:ed:67:6c:3f:8e:4c:9f:e5:
         a3:30:1c:55:50:89:d9:df:a7:fb:ca:98:28:1a:f8:20:04:1f:
         56:73:94:d4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDsgb/wNAfOQWK1+YNtWqc+W/9QEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJGQkM3MkJDOTJFODg0QTI1RjY1MjFDNkUwMDk2MjdC
MEU3NDYwMjAeFw0yNDAzMDUxNzU0MDVaFw0yNTAzMDQxNzU5MDVaMDMxMTAvBgNV
BAMTKDFGOEE4NjdCNkE5OUE4MzE5N0YxMjM3NjFGQTIzNDZDOURGRDZDM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZOLhtYLJp2bZ4jeJN8NdFUtSx
+e+UmyCmR/bs9z7VI/CAPXN/AFSkQJGoLO59F2mydIoG3TsP/rJK0hp2QfUfEnPF
ctMKOmQIutOThapH0mBG/qFlX4pW6arb8Z9Xsz8oZksKvdUtNoZK+GIe6qjgNllg
WOMzjv3KEWAxU4GHWvnBJVk0FtTpzzHL777aaLeThmVE+IaI/XNcoVYXEENlVUkj
x24Lp6x5wg03qdU4Jowq0V1U2dRI1+N3XRmx2CJF5wPX3gJzWPuTOgLdpDeXHAEZ
twH0R2wDh52i1l9LSsIirdxo78auO92LQIVNne6P+Sg9uZEj7e8/aCKXOKerAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUH4qGe2qZqDGX8SN2H6I0bJ39bD8wHwYDVR0j
BBgwFoAUkvvHK8kuiEol9lIcbgCWJ7DnRgIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMDU0MEFFNzFCRkVCMkEyMDc2QkY3REExOUJBMjk1QTA3
MjI4MDg2MjA3QjUxMEFDMjIwNTZCMzAxRThGNEQ0LzAvOTJGQkM3MkJDOTJFODg0
QTI1RjY1MjFDNkUwMDk2MjdCMEU3NDYwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkZCQzcyQkM5MkU4ODRBMjVG
NjUyMUM2RTAwOTYyN0IwRTc0NjAyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDA1NDBBRTcxQkZFQjJBMjA3NkJGN0RBMTlCQTI5NUEwNzIyODA4NjIw
N0I1MTBBQzIyMDU2QjMwMUU4RjRENC8wLzMyMzAzMDJlMzkzMTJlMzIzMjM0MmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzEzODM3MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBchb4DAN
BgkqhkiG9w0BAQsFAAOCAQEATcCoc+LEKD9UnokbcTWtMY5pXGMoErbuDj9Jt5/a
KhE3Hte/cRJT+0WyfhNvODgCLII6QFFNV84KAbbo/017A4NVHNrx5HSOp1mNdb1B
T61P/wHD7tXJLQIKmLFNewQO9qATkIEt2xmCV6nEe+67NQI5MfUFjiAI7IEqiz8F
8zRCs/9Nq2+wOVhovyMZ6u9wAdg+WLFhFjE+A9yGNVzhX1QlCMZIuJGbcAUL3tUa
RHFx6ZqXAH0+Yx2yzleJfxfDlovc2PDDYrswr8TPA0Dun00NK/FSfjxgd1HiMzze
87W+0+1nbD+OTJ/lozAcVVCJ2d+n+8qYKBr4IAQfVnOU1A==
-----END CERTIFICATE-----