Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/3137372e37332e3135382e302f32332d3234203d3e20323730313035.roa
File:                     3137372e37332e3135382e302f32332d3234203d3e20323730313035.roa (raw, json)
Hash identifier:          qHsJlq1ivKkskiFSS0Vs5S7J5M6fG+fSKDIxjZ3HvLk=
Subject key identifier:   95:8C:A9:01:F3:01:9C:AE:B0:06:D2:B8:AD:86:1C:B5:FB:88:8F:C4
Certificate issuer:       /CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
Certificate serial:       6BC6DF307CABDE8633653430AACF57B1C4B0A8B5
Authority key identifier: D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/3137372e37332e3135382e302f32332d3234203d3e20323730313035.roa
Signing time:             Tue 05 Mar 2024 17:44:04 +0000
ROA not before:           Tue 05 Mar 2024 17:39:04 +0000
ROA not after:            Tue 04 Mar 2025 17:44:04 +0000
asID:                     270105
IP address blocks:        177.73.158.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Nov 2024 00:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c6:df:30:7c:ab:de:86:33:65:34:30:aa:cf:57:b1:c4:b0:a8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5154E1B17B2EB9E5AFA353723C449668FE65093
        Validity
            Not Before: Mar  5 17:39:04 2024 GMT
            Not After : Mar  4 17:44:04 2025 GMT
        Subject: CN=958CA901F3019CAEB006D2B8AD861CB5FB888FC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:14:55:6b:81:13:ce:81:dd:e1:84:ed:61:b7:
                    30:3b:4c:d5:88:5b:53:dc:32:20:6e:fe:01:da:b5:
                    e6:1f:5e:8d:fd:f4:53:b7:e0:ee:4a:64:ad:24:41:
                    51:c0:cd:3f:16:bc:50:5f:0b:08:8f:11:91:75:e2:
                    59:94:a9:b7:f9:fc:0e:c1:b3:24:f7:e4:bc:6d:59:
                    a4:4a:5a:8e:28:ba:27:22:b1:69:0f:db:6d:d0:6d:
                    dc:27:b2:e1:02:1c:64:fc:86:e4:16:e1:f9:2c:dc:
                    7d:eb:bf:fe:c5:b4:1e:25:ae:62:d7:ad:aa:f2:bc:
                    0b:8e:f0:de:ed:fc:12:ae:f8:a5:56:3e:20:b8:a9:
                    d1:da:4d:0f:c1:47:db:b4:c1:81:16:5e:c1:79:79:
                    aa:7b:28:35:0c:e4:4a:6c:c1:7a:cf:c9:4f:5c:44:
                    c2:d1:3b:89:e7:6e:a9:e5:91:7a:bb:b0:aa:f6:6f:
                    8f:19:92:c2:7f:0d:84:d3:90:d9:5d:e7:c7:bb:0d:
                    1d:48:54:09:9a:2d:60:65:51:4b:a0:94:c0:30:67:
                    ee:15:f9:36:ae:9a:55:62:16:4c:fc:26:24:d7:f5:
                    ca:01:d3:76:ef:40:c5:40:47:48:d7:46:3a:8c:a6:
                    83:3e:f5:5d:9f:16:5f:ae:9e:36:75:b0:a8:1d:86:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8C:A9:01:F3:01:9C:AE:B0:06:D2:B8:AD:86:1C:B5:FB:88:8F:C4
            X509v3 Authority Key Identifier:
                keyid:D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/3137372e37332e3135382e302f32332d3234203d3e20323730313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:be:58:3b:b5:f6:4e:39:42:b8:ec:be:f4:20:58:68:cd:46:
         02:56:44:ac:cc:ee:44:40:4e:57:83:ce:fe:3a:48:71:4f:d1:
         e8:42:ab:d6:43:a1:7d:96:c1:d4:e8:6b:9c:5f:94:d1:f8:af:
         8d:87:bc:20:55:af:da:1f:1b:e9:0e:c2:55:95:fb:65:22:34:
         39:04:00:2c:29:15:a8:1d:3f:3a:2c:88:33:c8:74:9b:15:5a:
         52:55:13:89:c9:d8:25:f2:75:b6:39:11:f7:e5:ea:eb:bf:c1:
         74:d9:33:fa:48:38:9f:b0:00:34:0d:4b:9a:9c:40:c6:0b:e7:
         49:f0:56:11:d5:b1:a9:77:f2:47:6b:4c:e0:df:54:a1:e9:ac:
         25:a3:f1:29:28:33:ba:53:72:ba:e6:30:1f:80:4f:f4:c5:59:
         42:95:91:24:cd:13:87:96:80:22:b8:9c:85:37:d9:37:a6:23:
         5d:d4:de:f1:54:33:4e:f6:fb:5c:18:f1:ef:b3:11:23:0e:0f:
         fa:92:26:0a:36:a6:a9:3b:b1:de:ea:b0:23:5f:cd:36:d9:b0:
         12:db:e9:80:ad:01:1f:7a:1c:8d:92:32:d4:f8:d6:c5:03:98:
         25:aa:3b:ab:d1:00:60:79:41:f8:a0:3e:e9:79:2f:34:51:9e:
         52:95:72:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----