Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138302e302f32332d3233203d3e20323634373430.roa
File:                     3137302e3233392e3138302e302f32332d3233203d3e20323634373430.roa (raw, json)
Hash identifier:          HEE0cw++3iZ8dmL3d2gbiybBRFQhlgu0YJbHtMeZCDg=
Subject key identifier:   38:A9:E4:D6:60:89:64:58:4C:88:65:76:9B:53:BA:89:F5:84:59:4B
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       38D74633B5CEFA4F2D7372C6492D178F746EA83D
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138302e302f32332d3233203d3e20323634373430.roa
Signing time:             Fri 30 Aug 2024 13:30:00 +0000
ROA not before:           Fri 30 Aug 2024 13:25:00 +0000
ROA not after:            Fri 29 Aug 2025 13:30:00 +0000
asID:                     264740
IP address blocks:        170.239.180.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d7:46:33:b5:ce:fa:4f:2d:73:72:c6:49:2d:17:8f:74:6e:a8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Aug 30 13:25:00 2024 GMT
            Not After : Aug 29 13:30:00 2025 GMT
        Subject: CN=38A9E4D6608964584C8865769B53BA89F584594B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:93:ec:ff:f1:a2:ee:9c:65:66:2c:20:46:48:
                    83:a7:c2:94:50:35:01:af:0e:6a:67:22:24:ea:a0:
                    dc:29:79:c7:0e:61:ed:61:2a:19:45:8c:9a:3f:76:
                    62:8d:48:79:13:d3:5f:75:36:9d:4f:cd:2f:64:df:
                    dc:0d:d4:83:84:16:d0:77:c0:ac:b1:cc:3a:d2:3b:
                    b2:77:3e:c5:46:14:1b:9b:20:77:01:ac:63:d0:82:
                    22:33:fe:c0:ad:b8:86:da:2c:94:d9:3c:b4:b4:12:
                    dd:ef:c8:ac:38:6c:48:6d:dc:9c:37:1e:15:da:12:
                    f1:0e:b7:a9:ca:60:d5:14:7a:b7:ca:0f:10:46:91:
                    fa:40:f2:d8:43:3d:f7:04:a5:5d:be:c1:25:59:5c:
                    70:39:8a:cd:4a:27:da:62:88:1d:70:f7:c7:39:8b:
                    bf:16:c6:00:e9:db:6e:fe:e0:2b:91:49:06:5e:30:
                    3e:f7:ac:5c:ce:ed:89:c0:1d:55:74:24:c0:07:74:
                    0b:4b:c4:14:ba:d8:e2:40:7b:1d:df:24:4f:6b:8b:
                    df:7a:40:1e:a1:95:e5:b7:e4:ce:44:f3:3f:06:04:
                    4e:2c:b8:61:3b:b5:f3:aa:db:bc:d0:01:4f:d3:5b:
                    33:4d:f8:50:91:2b:6d:0a:5e:43:47:fe:55:e2:2e:
                    da:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A9:E4:D6:60:89:64:58:4C:88:65:76:9B:53:BA:89:F5:84:59:4B
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138302e302f32332d3233203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:26:45:5c:cc:b9:d4:bd:d4:0d:a4:25:ec:cc:19:8d:d3:18:
         2d:08:64:05:99:e7:c8:cc:dc:aa:40:82:f5:c8:5c:b4:f6:bc:
         9f:e2:bc:7a:73:11:88:d0:1b:89:10:66:cd:3a:8d:df:c3:db:
         87:64:c2:bb:13:d9:a0:f6:19:02:20:35:6a:10:c0:8d:47:53:
         71:59:0a:f5:d9:24:ef:c2:97:5b:80:70:08:38:17:22:37:13:
         94:3e:99:cb:7c:ed:42:b0:6b:c7:41:99:eb:e9:42:d5:35:36:
         7d:3e:ab:f8:7a:64:13:af:45:bf:51:73:c3:56:e4:94:ef:3b:
         44:c8:37:54:bc:38:36:7e:10:d4:4f:49:a4:cf:15:89:98:94:
         89:1e:b9:f4:f5:a4:1c:51:a2:59:36:37:61:35:e8:00:95:91:
         33:52:a2:3d:d7:0e:26:41:14:ae:1c:92:4c:0e:cd:16:af:5f:
         77:b2:bd:94:29:46:6b:89:43:03:42:9d:57:dd:c5:58:0d:ed:
         7b:03:4e:4a:42:46:51:6c:e9:9d:89:84:96:34:07:2e:b7:7f:
         a5:0b:77:8e:df:ab:d7:46:9b:12:1a:6f:3e:ce:29:9e:d6:1e:
         b4:f0:50:0a:ba:28:b3:3e:97:bd:70:8c:11:d8:0d:d8:8d:80:
         a6:a2:f4:6c
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUONdGM7XO+k8tc3LGSS0Xj3RuqD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNGQzk0MjFFQkIzNzQ4NkNCMkQ4RkIxNzAyNTVBNzdD
MTNENjA5MTAeFw0yNDA4MzAxMzI1MDBaFw0yNTA4MjkxMzMwMDBaMDMxMTAvBgNV
BAMTKDM4QTlFNEQ2NjA4OTY0NTg0Qzg4NjU3NjlCNTNCQTg5RjU4NDU5NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtk+z/8aLunGVmLCBGSIOnwpRQ
NQGvDmpnIiTqoNwpeccOYe1hKhlFjJo/dmKNSHkT0191Np1PzS9k39wN1IOEFtB3
wKyxzDrSO7J3PsVGFBubIHcBrGPQgiIz/sCtuIbaLJTZPLS0Et3vyKw4bEht3Jw3
HhXaEvEOt6nKYNUUerfKDxBGkfpA8thDPfcEpV2+wSVZXHA5is1KJ9piiB1w98c5
i78WxgDp227+4CuRSQZeMD73rFzO7YnAHVV0JMAHdAtLxBS62OJAex3fJE9ri996
QB6hleW35M5E8z8GBE4suGE7tfOq27zQAU/TWzNN+FCRK20KXkNH/lXiLtodAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUOKnk1mCJZFhMiGV2m1O6ifWEWUswHwYDVR0j
BBgwFoAUY/yUIeuzdIbLLY+xcCVad8E9YJEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQUZDMTE0OUE2NEJCMzg0RkQxOTI4NzlGN0RDMTVBNzM1
QjU5QTA2ODIyQTJDNkVCODMzRThGQjZBNTVCMzg4LzAvNjNGQzk0MjFFQkIzNzQ4
NkNCMkQ4RkIxNzAyNTVBNzdDMTNENjA5MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82M0ZDOTQyMUVCQjM3NDg2Q0Iy
RDhGQjE3MDI1NUE3N0MxM0Q2MDkxLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUFGQzExNDlBNjRCQjM4NEZEMTkyODc5RjdEQzE1QTczNUI1OUEwNjgy
MkEyQzZFQjgzM0U4RkI2QTU1QjM4OC8wLzMxMzczMDJlMzIzMzM5MmUzMTM4MzAy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzQzNzM0MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGq
77QwDQYJKoZIhvcNAQELBQADggEBAMsmRVzMudS91A2kJezMGY3TGC0IZAWZ58jM
3KpAgvXIXLT2vJ/ivHpzEYjQG4kQZs06jd/D24dkwrsT2aD2GQIgNWoQwI1HU3FZ
CvXZJO/Cl1uAcAg4FyI3E5Q+mct87UKwa8dBmevpQtU1Nn0+q/h6ZBOvRb9Rc8NW
5JTvO0TIN1S8ODZ+ENRPSaTPFYmYlIkeufT1pBxRolk2N2E16ACVkTNSoj3XDiZB
FK4ckkwOzRavX3eyvZQpRmuJQwNCnVfdxVgN7XsDTkpCRlFs6Z2JhJY0By63f6UL
d47fq9dGmxIabz7OKZ7WHrTwUAq6KLM+l71wjBHYDdiNgKai9Gw=
-----END CERTIFICATE-----