Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e31332e302f32342d3234203d3e203138373437.roa
File:                     3231362e3234312e31332e302f32342d3234203d3e203138373437.roa (raw, json)
Hash identifier:          NmILZIUyjYdkCWLuhmu1aEMZKclIfDZ+S+G6Q4nbsu4=
Subject key identifier:   CF:C8:46:73:0B:1A:3D:CD:24:3B:A4:51:89:A4:32:7C:12:E1:4F:87
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       6DD09279D35D92927655366B91312CB0B9E07833
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e31332e302f32342d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:13 +0000
ROA not before:           Tue 05 Mar 2024 17:54:13 +0000
ROA not after:            Tue 04 Mar 2025 17:59:13 +0000
asID:                     18747
IP address blocks:        216.241.13.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 16:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d0:92:79:d3:5d:92:92:76:55:36:6b:91:31:2c:b0:b9:e0:78:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:13 2024 GMT
            Not After : Mar  4 17:59:13 2025 GMT
        Subject: CN=CFC846730B1A3DCD243BA45189A4327C12E14F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:6c:76:16:b0:e2:40:25:5d:41:b8:e0:f7:
                    79:fe:12:55:31:de:31:a5:18:88:a1:0d:77:0a:04:
                    5a:b3:69:30:34:d8:5b:63:c2:b3:76:76:b4:23:87:
                    8d:83:a5:0d:3c:61:fb:49:c5:da:62:14:b5:3e:72:
                    47:bb:e8:7c:d8:cd:99:f1:d5:d4:e5:70:ae:a6:33:
                    3b:67:a7:37:fe:70:f5:56:9f:12:f4:c0:45:7d:30:
                    1e:22:8e:8f:28:84:50:20:82:b2:6d:ce:fd:21:24:
                    97:85:2b:9d:58:42:83:ce:99:b7:df:a7:38:46:d4:
                    a3:72:8f:91:02:90:ee:37:7a:49:c1:e2:17:e8:7c:
                    2f:f2:04:75:65:29:cf:23:ab:02:9f:40:49:c7:79:
                    62:cc:06:5f:3c:16:f5:b6:be:4c:db:a4:0a:58:0d:
                    10:7f:83:d7:bd:fc:18:2b:65:eb:25:6a:b8:0d:f4:
                    ed:cc:0d:3d:63:9b:b6:df:40:92:55:03:5f:97:41:
                    47:07:f4:40:1b:8c:1a:34:3e:3f:d2:49:4a:da:80:
                    1e:68:5f:8d:05:41:41:5d:16:78:9c:f6:51:74:87:
                    a2:af:a3:29:81:60:c0:c9:cb:41:5e:82:43:21:00:
                    dc:ba:82:9a:8f:2f:f4:3f:44:f9:a7:cf:c2:81:37:
                    c4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C8:46:73:0B:1A:3D:CD:24:3B:A4:51:89:A4:32:7C:12:E1:4F:87
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3231362e3234312e31332e302f32342d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.241.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:a9:26:0b:7f:0f:7d:a6:d3:85:99:9f:56:f2:ed:8a:85:c9:
         a1:47:e0:79:8a:89:60:24:58:b9:0f:06:1f:79:7c:01:35:30:
         b0:61:21:7e:1c:38:81:60:5e:08:61:2c:3e:83:5c:79:e2:8a:
         44:52:f3:ac:ce:b2:d7:fc:2d:c2:64:c1:1f:bd:96:10:e3:0f:
         1d:69:91:43:8a:0b:1f:43:d9:76:b0:30:08:8b:6b:29:a9:96:
         2b:79:de:e0:5e:1d:09:4d:cf:0d:f2:6b:a6:eb:e2:b0:e1:f9:
         bc:fd:d1:46:55:eb:28:b1:6a:27:af:64:cc:95:42:a8:34:29:
         4d:6b:b7:19:0b:93:e1:d5:50:4c:e6:a6:e5:65:60:ed:8b:b1:
         75:b6:ed:c5:02:8d:cb:04:27:d0:54:32:8b:50:a6:f4:5c:dd:
         13:8f:be:68:78:dc:80:39:78:ad:21:e5:2c:e9:a3:01:d9:c3:
         99:5a:ac:0d:9d:20:a7:db:6a:ec:63:33:0d:e3:c1:bd:f1:ff:
         69:ee:d7:76:2c:9e:84:46:60:04:11:6e:39:9c:43:7f:ff:f3:
         07:4e:43:81:ba:6a:69:4f:1e:58:6e:58:f7:31:7c:fa:cc:75:
         16:80:8d:bd:a9:0b:48:4f:8f:27:73:c3:3e:ad:76:3c:dc:c8:
         b1:a5:f7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----