Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138312e302f32352d3235203d3e20323634373430.roa
File:                     3137302e3233392e3138312e302f32352d3235203d3e20323634373430.roa (raw, json)
Hash identifier:          ZHPgRrw8MuXhUBEwzHLDjWTOyvxAF1S2HAvzVMCHMXE=
Subject key identifier:   A6:0A:41:6D:4B:E8:F1:5F:74:5C:F7:27:25:9F:69:4E:28:F7:8B:F7
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       089C7E0C6B32DBAAAA403F6FAF68E89CFF73F707
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138312e302f32352d3235203d3e20323634373430.roa
Signing time:             Fri 30 Aug 2024 13:30:02 +0000
ROA not before:           Fri 30 Aug 2024 13:25:02 +0000
ROA not after:            Fri 29 Aug 2025 13:30:02 +0000
asID:                     264740
IP address blocks:        170.239.181.0/25 maxlen: 25

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:9c:7e:0c:6b:32:db:aa:aa:40:3f:6f:af:68:e8:9c:ff:73:f7:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Aug 30 13:25:02 2024 GMT
            Not After : Aug 29 13:30:02 2025 GMT
        Subject: CN=A60A416D4BE8F15F745CF727259F694E28F78BF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d3:9c:63:6f:61:7f:48:34:bc:2f:05:d4:8d:
                    f9:07:78:b2:fd:b9:b8:93:f0:18:69:00:9b:8f:5e:
                    4f:a3:21:37:1b:bc:55:54:54:91:75:35:8a:52:33:
                    55:8d:47:e3:cc:8a:be:f4:19:0d:5b:c2:7c:74:8a:
                    df:fa:3c:2a:d5:20:b3:70:f7:80:6d:c1:54:1f:cf:
                    bb:c3:22:c7:29:85:23:c4:65:6f:9b:b6:9d:be:bf:
                    03:8c:69:70:15:65:4c:a3:0f:df:dd:e8:03:60:33:
                    30:d5:d9:55:c7:19:a9:51:12:fc:a5:ba:7b:60:98:
                    65:25:83:bf:55:04:80:e7:df:f4:46:be:eb:c4:f1:
                    f8:54:61:61:d8:ab:76:db:2a:37:83:b3:e2:0c:cb:
                    be:cf:c4:15:62:4d:af:97:5c:69:aa:c3:ff:1e:0a:
                    31:89:cb:5e:67:55:06:d3:a3:5b:e8:85:c9:20:43:
                    d1:ff:d8:f2:89:0e:66:ca:d5:f0:ad:b5:66:6b:b3:
                    cf:7f:4f:e7:5f:8f:92:2f:32:11:4a:b0:cd:09:5c:
                    f3:f6:c5:7b:16:97:79:16:23:48:7e:68:1e:34:94:
                    85:16:b9:05:28:94:4d:00:23:2b:72:b5:16:93:dc:
                    57:0e:95:41:da:ea:bc:05:3a:6b:db:ab:5a:19:5d:
                    0c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0A:41:6D:4B:E8:F1:5F:74:5C:F7:27:25:9F:69:4E:28:F7:8B:F7
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138312e302f32352d3235203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.181.0/25

    Signature Algorithm: sha256WithRSAEncryption
         73:52:6e:f9:db:79:30:14:c1:6c:66:a4:34:ab:e4:f5:27:44:
         01:ee:6a:f7:14:b8:2a:bb:cc:54:ff:48:86:0b:85:c3:e3:7a:
         9b:8c:35:df:d1:36:17:ce:16:5b:85:a2:23:13:16:80:19:24:
         f7:a1:31:ba:7b:26:49:2a:55:68:6c:1b:28:88:78:ef:a9:c3:
         a1:95:da:2f:41:de:12:6c:43:ed:ad:46:ee:8c:00:04:8a:6b:
         11:b1:34:4b:68:ed:fe:e6:e1:a8:06:6e:68:05:5e:bf:6d:21:
         fa:d8:5e:86:55:4c:a2:2e:74:6d:da:63:6f:2c:2b:62:17:04:
         7e:96:57:67:d1:51:c9:ee:1d:d5:9e:19:cd:df:dc:7e:ee:4a:
         b4:0b:d0:15:4b:ba:92:19:d8:c2:80:4f:31:7d:b1:fc:0f:5c:
         12:50:49:c9:d2:68:08:94:5e:a1:ca:61:89:43:62:60:99:6a:
         07:af:9e:01:93:5e:63:1d:9c:e0:82:2b:c7:81:a5:c1:23:a6:
         c9:d2:e9:6f:70:a8:ba:f8:cc:75:ea:7c:99:1e:e8:2a:38:8d:
         59:3b:24:5b:ca:18:b9:8d:eb:64:44:b2:31:0a:ff:15:df:8a:
         93:9f:19:3c:d9:a9:5e:df:0f:64:bc:74:54:98:8f:c1:80:0e:
         08:21:62:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----