Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138312e3132382f32352d3235203d3e20323634373430.roa
File:                     3137302e3233392e3138312e3132382f32352d3235203d3e20323634373430.roa (raw, json)
Hash identifier:          nAlSIDgdgJl4cSZMKZ1hlI3FLHvt5ENQWtDMNSw9mpg=
Subject key identifier:   77:26:D3:07:BD:B0:4C:CD:6F:43:DD:3C:20:D6:F0:53:8F:06:58:56
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       4BF416FDFD516229E13424E384061DA1E592195B
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138312e3132382f32352d3235203d3e20323634373430.roa
Signing time:             Fri 30 Aug 2024 13:30:01 +0000
ROA not before:           Fri 30 Aug 2024 13:25:01 +0000
ROA not after:            Fri 29 Aug 2025 13:30:01 +0000
asID:                     264740
IP address blocks:        170.239.181.128/25 maxlen: 25

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f4:16:fd:fd:51:62:29:e1:34:24:e3:84:06:1d:a1:e5:92:19:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Aug 30 13:25:01 2024 GMT
            Not After : Aug 29 13:30:01 2025 GMT
        Subject: CN=7726D307BDB04CCD6F43DD3C20D6F0538F065856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:c0:d7:ca:5e:63:49:81:77:3c:c1:b7:93:
                    3b:1b:7c:bf:44:0e:ba:da:7a:3d:8f:77:12:97:16:
                    04:2e:b5:4c:3c:6f:7a:8d:01:74:f6:7f:68:17:3f:
                    00:88:00:10:44:14:30:6c:9a:d4:dd:99:85:aa:d1:
                    c7:c8:ee:7c:81:a1:f6:c0:7c:0a:e8:c6:36:bf:c6:
                    ed:76:e4:d9:bf:e7:8b:fc:d0:53:d2:3e:39:72:1b:
                    65:c6:f8:ee:07:02:8d:3f:b8:ce:4c:e8:59:e8:bc:
                    73:09:04:6c:2c:84:d6:79:87:6e:2a:04:c9:46:7a:
                    0a:d4:7f:ba:1d:92:69:4a:8c:46:b0:9e:03:b4:d5:
                    08:7a:a9:6c:12:8e:01:04:7a:e6:9f:f6:0d:9d:59:
                    a4:7c:11:ca:ae:c0:34:f7:ac:3b:7a:4e:9f:4f:c7:
                    65:06:81:bc:95:9f:ee:da:23:76:7f:05:60:5e:20:
                    3a:04:39:de:be:b2:26:29:26:3c:86:b9:48:bf:7f:
                    2d:6e:16:d3:f5:27:c6:f0:16:8a:28:69:75:0e:43:
                    60:b7:ab:72:9e:7a:d0:c4:36:2a:ac:98:9c:89:f2:
                    90:ac:86:31:3d:12:3d:69:5f:02:80:8e:88:3b:ec:
                    8b:ab:a0:65:5e:d1:2e:42:cd:5c:48:29:d9:2b:bd:
                    05:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:26:D3:07:BD:B0:4C:CD:6F:43:DD:3C:20:D6:F0:53:8F:06:58:56
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138312e3132382f32352d3235203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.181.128/25

    Signature Algorithm: sha256WithRSAEncryption
         7d:14:0c:ae:c2:f4:be:0d:16:f9:ba:2a:5b:d8:c6:25:2e:e1:
         09:25:70:40:8b:c2:37:f6:d7:71:65:d5:bc:72:2b:c2:7f:3e:
         61:49:89:b6:8c:ae:cb:ab:e5:96:e8:fc:b1:18:95:d7:e5:6e:
         c8:ea:49:47:f3:4f:6f:9b:d9:0f:e3:d1:0e:d6:40:fe:ca:48:
         0b:91:2d:bc:de:2e:53:07:0b:c2:1c:61:e9:9c:eb:62:f7:9f:
         c6:99:36:7a:8c:a2:42:bc:22:8f:75:f3:4d:07:65:64:03:eb:
         58:a3:ee:d5:2a:08:a6:e1:8f:88:d1:78:ca:2f:11:06:2d:c9:
         a6:3e:b4:82:39:d7:2a:1a:d7:d3:10:6d:ee:2b:d5:e9:1a:20:
         c6:aa:4b:5a:54:7d:7c:3a:0a:34:18:51:10:1b:24:ca:9f:80:
         c6:e4:99:b1:58:0c:f2:37:c7:24:f0:36:52:98:51:bf:97:03:
         82:9b:9e:78:55:e9:83:ea:32:52:5c:40:f1:db:ce:74:14:23:
         ef:d0:64:c6:24:ed:a7:71:6a:da:ad:1c:15:06:bc:46:03:38:
         e4:12:45:fe:db:cb:e0:6d:13:33:3e:b4:ba:a6:8a:57:7d:75:
         57:bb:26:45:9c:94:36:fe:0c:c6:2a:9f:48:e3:36:59:4c:24:
         f5:84:54:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----