Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31322e302f32322d3234203d3e20323633363831.roa
File:                     3133382e3230342e31322e302f32322d3234203d3e20323633363831.roa (raw, json)
Hash identifier:          N/mSTqfnYO+NTWs8vx9/Em9E8jYtfKduEU86fqLd/AA=
Subject key identifier:   2B:79:A6:22:6B:74:DF:A7:7D:A5:B4:FD:3F:16:D4:26:18:20:D9:A0
Certificate issuer:       /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Certificate serial:       68523C25B1317B0C2023A4429ED24CE84A30FFFA
Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31322e302f32322d3234203d3e20323633363831.roa
Signing time:             Thu 18 Jul 2024 16:45:00 +0000
ROA not before:           Thu 18 Jul 2024 16:40:00 +0000
ROA not after:            Thu 17 Jul 2025 16:45:00 +0000
asID:                     263681
IP address blocks:        138.204.12.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 25 Jul 2024 20:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:52:3c:25:b1:31:7b:0c:20:23:a4:42:9e:d2:4c:e8:4a:30:ff:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
        Validity
            Not Before: Jul 18 16:40:00 2024 GMT
            Not After : Jul 17 16:45:00 2025 GMT
        Subject: CN=2B79A6226B74DFA77DA5B4FD3F16D4261820D9A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ec:84:40:bf:b2:71:94:21:db:41:3c:c6:91:
                    ec:97:f7:e0:df:d8:3f:2f:36:19:0d:0c:da:c4:79:
                    af:ba:84:f8:31:00:d8:3a:b8:c2:ae:bb:16:93:f5:
                    e2:b0:b5:fd:80:d8:1e:e1:85:2e:26:31:61:41:72:
                    1c:6f:8b:93:37:bd:74:8d:cf:91:3e:20:4f:c4:62:
                    24:26:3c:ad:5f:36:2d:cb:e9:9a:f5:a7:c9:40:5e:
                    77:7c:bb:00:f9:28:05:1c:0c:68:dd:1e:b4:eb:75:
                    aa:eb:2f:7a:4b:91:46:a2:16:f1:1f:a6:4f:f6:7f:
                    b0:65:f0:1a:b5:41:e9:b3:34:00:e9:b9:22:16:a5:
                    39:39:8f:44:b8:10:ca:8d:ce:d1:cf:fe:90:d6:bd:
                    36:2a:11:44:22:95:95:82:87:7a:c9:e3:5c:fe:33:
                    91:ac:a9:a2:fe:8a:74:6b:4b:ed:49:e5:04:09:96:
                    19:e3:2f:cb:53:33:b9:e2:5e:0c:51:ce:f2:b1:7c:
                    29:86:47:3b:9a:4b:ed:21:ab:23:e0:d0:04:8b:1e:
                    e0:3d:0f:ba:e8:12:a6:c8:60:53:94:0f:a7:0d:42:
                    68:a7:7a:70:6d:41:bc:40:09:00:f0:f2:1d:b8:83:
                    a9:58:95:7c:1a:ba:06:04:9c:d6:9b:d9:2a:85:bc:
                    ee:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:79:A6:22:6B:74:DF:A7:7D:A5:B4:FD:3F:16:D4:26:18:20:D9:A0
            X509v3 Authority Key Identifier:
                keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31322e302f32322d3234203d3e20323633363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:40:70:6b:ec:64:35:80:98:f6:3a:d6:ae:c3:33:91:40:53:
         06:a8:89:58:ad:a4:08:27:ee:f3:38:33:e4:04:9d:43:c6:d3:
         0a:1d:b3:4b:35:48:cf:0f:3d:b1:1f:48:4a:12:1d:6d:20:4c:
         ae:53:c9:c4:90:d8:c9:fd:fa:ba:26:84:34:6f:f6:7f:e4:4a:
         16:85:64:b6:3d:58:b5:24:2f:d0:bc:91:32:d5:b4:4d:f8:f3:
         ed:a5:54:32:76:ce:7f:cd:29:1b:f0:c4:85:8d:b5:cf:9c:c0:
         01:18:72:58:18:d6:da:f7:99:8e:85:15:e8:b7:60:c4:51:2e:
         3e:f4:77:f4:2a:45:1d:57:1b:63:fb:c3:b2:96:ce:9c:9d:12:
         66:07:f2:ec:2c:21:f2:e0:2b:09:22:c8:4c:70:04:85:06:ca:
         d4:4b:26:d2:47:ab:c2:b7:95:0d:32:96:b4:8e:e0:bc:50:ee:
         bb:65:81:2e:55:82:8d:70:85:c2:10:2a:67:a9:1c:7a:f2:b7:
         73:e6:76:68:18:cd:43:32:3d:d8:ca:2d:94:34:3a:5f:f7:55:
         46:02:1d:7f:23:f6:0e:40:41:28:ae:fe:87:cf:46:cb:b0:55:
         6b:d4:3f:96:13:09:bc:c4:92:64:13:e5:f7:76:a0:a8:9b:4a:
         fd:6d:5f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----