Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138322e302f32352d3235203d3e20323634373430.roa
File:                     3137302e3233392e3138322e302f32352d3235203d3e20323634373430.roa (raw, json)
Hash identifier:          LoMwpohGHKbTyGEGzPvsKFL/StnIkPqc81YmmR7trhE=
Subject key identifier:   91:1B:C9:50:17:CF:67:8D:1C:95:12:58:57:EF:B9:8B:3F:77:4B:FC
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       396E54824DB5F6A73DF8B20E00454C3E47E9CE51
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138322e302f32352d3235203d3e20323634373430.roa
Signing time:             Fri 30 Aug 2024 13:30:01 +0000
ROA not before:           Fri 30 Aug 2024 13:25:01 +0000
ROA not after:            Fri 29 Aug 2025 13:30:01 +0000
asID:                     264740
IP address blocks:        170.239.182.0/25 maxlen: 25

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6e:54:82:4d:b5:f6:a7:3d:f8:b2:0e:00:45:4c:3e:47:e9:ce:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Aug 30 13:25:01 2024 GMT
            Not After : Aug 29 13:30:01 2025 GMT
        Subject: CN=911BC95017CF678D1C95125857EFB98B3F774BFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ee:31:39:26:63:c3:df:f1:53:ba:ad:50:f0:
                    89:a5:51:9e:26:41:82:c2:74:01:b5:1d:0e:f7:2b:
                    54:6b:0c:63:47:65:cd:8c:84:d6:1f:8e:99:1a:6c:
                    34:8a:1e:51:76:b7:f7:00:80:e0:c8:54:0d:c1:29:
                    be:43:c9:75:65:a5:78:6b:b6:79:5d:eb:7e:29:4f:
                    b1:2f:c1:18:8b:4d:0d:13:65:76:05:b2:73:ac:e6:
                    58:f7:96:49:ad:45:4e:f3:5e:83:8b:b7:7c:f0:90:
                    01:73:d1:0c:9f:28:eb:86:af:4a:bd:ff:42:c0:9b:
                    73:4f:59:2a:f4:dc:a8:97:40:5c:b3:b2:0e:a7:2e:
                    a7:4d:72:25:76:8d:5e:f6:0b:50:12:2d:06:f7:fb:
                    da:94:98:9a:ef:73:11:23:3b:0d:79:3e:d2:ce:c9:
                    5a:ea:67:42:47:32:30:46:0f:1a:aa:bd:99:57:8c:
                    78:e0:86:16:be:0f:51:58:fa:ce:d4:9a:4f:68:83:
                    ce:d0:59:b0:b2:6f:10:b8:dd:df:10:c1:81:c7:7c:
                    10:02:fc:83:4e:5a:81:24:a8:21:4f:fd:ec:48:e8:
                    d5:fc:65:72:91:16:ed:95:30:fa:ac:9f:f1:50:da:
                    8f:3d:c6:3d:0a:81:52:4d:b1:7c:49:92:a6:fe:80:
                    59:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1B:C9:50:17:CF:67:8D:1C:95:12:58:57:EF:B9:8B:3F:77:4B:FC
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138322e302f32352d3235203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.182.0/25

    Signature Algorithm: sha256WithRSAEncryption
         19:7f:cf:08:76:76:25:4a:06:85:ec:7f:e2:7a:62:89:bf:7f:
         b8:a7:27:f9:8c:4c:67:1a:22:87:c6:ed:ce:41:70:93:7a:56:
         a9:ef:20:a9:6f:d4:22:83:cf:5d:62:19:a1:d1:5f:8b:87:6f:
         33:48:17:1d:47:1d:ee:fa:54:b8:9a:72:c3:3a:5f:c8:2b:84:
         bf:5a:ae:64:52:2e:9d:3f:eb:23:ea:b1:d0:4a:c4:81:d1:72:
         7c:42:a5:fe:fc:95:ee:cc:ec:d2:92:ed:90:b0:ec:55:06:70:
         87:6a:0b:25:75:2f:3c:27:71:27:9d:99:b4:7a:f0:31:21:cc:
         25:f6:93:9f:9d:89:77:d9:43:1f:ca:67:7e:2b:55:28:82:08:
         4f:cc:af:03:7d:0b:5f:a4:82:f5:12:b9:3c:b2:52:ba:27:1f:
         7b:0e:32:15:e3:11:41:52:79:ef:8a:9e:aa:75:e7:42:b3:39:
         d0:c8:1a:93:f0:7d:c9:e9:e3:cd:a0:46:31:36:83:e6:90:88:
         36:9a:c9:4c:b4:c3:1f:7b:28:b2:2e:6c:54:f4:6e:81:34:b3:
         14:9e:43:3f:15:d8:7f:45:99:b0:2b:0a:06:b7:7c:d7:13:41:
         ae:b9:d3:8a:c2:7a:91:ec:9a:72:6c:42:8a:6f:08:fd:58:3d:
         04:39:68:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----