Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138322e3132382f32352d3235203d3e20323634373430.roa
File:                     3137302e3233392e3138322e3132382f32352d3235203d3e20323634373430.roa (raw, json)
Hash identifier:          QTthM7IL1VgzddqnsfQqmsj9ykhJYBWQyl/qCV6BLaI=
Subject key identifier:   62:A5:E7:ED:2A:18:51:0E:F2:8B:71:3A:0A:21:AD:51:47:68:FD:D2
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       54FE62BDDE4B9EA96369971FA59ECCD4E7AC4ACB
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138322e3132382f32352d3235203d3e20323634373430.roa
Signing time:             Fri 30 Aug 2024 13:30:01 +0000
ROA not before:           Fri 30 Aug 2024 13:25:01 +0000
ROA not after:            Fri 29 Aug 2025 13:30:01 +0000
asID:                     264740
IP address blocks:        170.239.182.128/25 maxlen: 25

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fe:62:bd:de:4b:9e:a9:63:69:97:1f:a5:9e:cc:d4:e7:ac:4a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Aug 30 13:25:01 2024 GMT
            Not After : Aug 29 13:30:01 2025 GMT
        Subject: CN=62A5E7ED2A18510EF28B713A0A21AD514768FDD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:bd:7e:5f:62:78:26:43:d8:50:bd:7b:d4:
                    40:64:1c:6b:d3:f4:a8:3d:94:54:79:80:1b:f1:6a:
                    f9:28:c0:34:64:ce:a7:5c:b0:b0:ef:12:12:c7:a5:
                    a2:b4:c8:d4:76:ef:f6:4e:c9:21:4e:56:dc:26:bf:
                    a8:e5:69:48:04:f0:24:17:92:37:0d:90:86:33:e0:
                    5f:a4:da:4a:90:9a:4f:26:60:19:e0:f1:9d:ba:93:
                    a3:91:55:5a:0d:b1:c1:50:b4:4c:73:6e:69:8b:2a:
                    7b:58:ba:41:1c:6a:f5:ba:45:75:8b:21:75:7a:8d:
                    c7:5d:05:f6:13:71:2f:a1:11:d9:3b:8f:90:55:af:
                    ba:d9:83:4d:75:31:3c:0a:e9:9a:b2:70:61:6a:dc:
                    f3:98:eb:fa:1e:75:fb:b4:2d:46:3a:9d:f1:26:6a:
                    01:a0:77:57:0b:e9:02:f1:d1:b6:21:dd:61:12:33:
                    b7:db:a6:5e:d8:f5:27:59:a0:45:56:f4:c8:32:9a:
                    29:be:a3:a2:9f:42:0b:8a:f6:dc:30:82:51:6b:6d:
                    7c:bb:67:ff:06:95:3b:ba:6d:96:17:49:31:71:35:
                    e5:b9:5a:f2:dc:2b:16:f3:ce:4b:3b:ac:71:c4:5a:
                    0f:cf:b4:29:72:e2:e8:80:8c:e0:28:2b:dc:47:3c:
                    15:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A5:E7:ED:2A:18:51:0E:F2:8B:71:3A:0A:21:AD:51:47:68:FD:D2
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138322e3132382f32352d3235203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.182.128/25

    Signature Algorithm: sha256WithRSAEncryption
         6f:0e:00:2f:d1:cf:ce:12:5d:b7:20:67:87:1e:f6:b1:9f:f8:
         40:82:ec:21:d7:76:81:7e:07:45:3d:82:ff:cf:72:b6:82:20:
         bd:cb:77:d7:3c:8a:ae:1b:0e:15:c4:3b:dc:1a:fe:68:8e:ba:
         d2:d6:da:52:00:2f:f2:f4:ed:2a:c0:7a:5a:3a:3d:2b:4e:12:
         c0:70:93:3d:a0:d6:d9:05:e7:fc:dc:8b:d1:8c:8c:0e:33:af:
         80:9c:d6:6d:66:0e:13:6e:81:9e:0b:8a:98:3c:a5:d9:db:6d:
         3c:b8:73:19:96:b7:0f:26:f9:e8:17:73:7a:d6:da:7b:f0:8e:
         39:1a:17:98:65:9b:48:0e:26:ae:39:92:10:a6:58:94:ac:e3:
         18:6e:28:a5:ac:64:80:65:bd:75:d5:c1:84:72:0a:73:47:4c:
         00:f4:ac:a2:3c:9c:fa:fc:61:1f:2f:32:da:77:ac:1e:35:4b:
         0b:67:c3:84:c8:c5:0c:47:85:c5:94:ff:f3:82:ca:81:7a:81:
         88:ab:a0:1a:bf:89:17:5c:51:66:cd:8b:28:cb:cd:c0:25:70:
         70:89:4a:90:77:49:f2:26:90:37:92:95:59:4e:75:37:b0:00:
         2b:5c:f2:2e:57:d1:f6:06:d0:8d:db:6c:0f:41:3e:44:3b:ca:
         a7:ee:86:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----