Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135352e302f32342d3234203d3e20323733313131.roa
File:                     3230302e35302e3135352e302f32342d3234203d3e20323733313131.roa (raw, json)
Hash identifier:          3+cMjdSHQJhNhoBzrf8OtwbBZ1oBLtAkS4UF8qLhmN8=
Subject key identifier:   1C:6D:88:78:BF:FE:6F:9B:5B:B2:64:B8:05:5F:C8:E8:38:EA:93:F5
Certificate issuer:       /CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
Certificate serial:       643C7AE0AB8AED8A4BC70C59B78B0F6DD4F714CB
Authority key identifier: D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135352e302f32342d3234203d3e20323733313131.roa
Signing time:             Tue 05 Mar 2024 18:11:23 +0000
ROA not before:           Tue 05 Mar 2024 18:06:23 +0000
ROA not after:            Tue 04 Mar 2025 18:11:23 +0000
asID:                     273111
IP address blocks:        200.50.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 07 May 2024 19:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3c:7a:e0:ab:8a:ed:8a:4b:c7:0c:59:b7:8b:0f:6d:d4:f7:14:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845
        Validity
            Not Before: Mar  5 18:06:23 2024 GMT
            Not After : Mar  4 18:11:23 2025 GMT
        Subject: CN=1C6D8878BFFE6F9B5BB264B8055FC8E838EA93F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:14:b9:dd:db:7e:3e:54:30:76:54:e6:6f:0c:
                    69:68:66:1d:fb:8b:ac:41:b9:f0:b9:38:1d:87:8a:
                    1e:7a:ab:8e:7b:ba:bc:d5:4a:07:82:0e:10:d7:27:
                    63:e8:22:06:b1:8c:ce:72:db:0a:bb:59:a7:12:f9:
                    5a:e0:31:49:14:80:b1:0a:04:e4:0c:81:7e:09:c1:
                    c3:0d:f6:d4:8d:30:53:88:1f:96:9e:ec:ac:1c:4f:
                    5e:01:39:88:d0:f1:29:5f:df:12:a1:11:55:ca:1c:
                    14:06:2c:0f:d5:da:5d:4b:a8:60:a7:56:ca:d0:40:
                    78:0d:f6:1e:49:8c:fa:e3:90:e6:e0:b9:5a:4a:00:
                    03:d7:4a:ae:e5:24:88:8d:47:f7:b3:76:fb:b2:c5:
                    b1:0e:52:a0:b0:f4:d4:85:75:52:5e:cc:3f:3f:f9:
                    4f:05:ca:85:50:8d:d8:ce:6d:56:03:ca:a6:82:8e:
                    f5:25:53:ff:d0:26:03:60:b9:ca:6f:2c:af:d8:ae:
                    23:7f:19:9d:f4:8a:3b:e0:6d:b2:ed:fb:c3:f7:d6:
                    34:02:68:63:ce:85:8f:e5:79:c3:e4:2c:c9:64:8d:
                    99:89:0f:41:cf:f1:c8:84:c4:8f:46:7a:0f:86:89:
                    0f:52:18:7a:03:7d:fc:61:ca:13:02:2c:35:54:63:
                    69:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6D:88:78:BF:FE:6F:9B:5B:B2:64:B8:05:5F:C8:E8:38:EA:93:F5
            X509v3 Authority Key Identifier:
                keyid:D8:B4:D8:CF:7C:53:F8:93:FA:81:A1:E1:11:5B:C8:E0:26:7F:98:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4D8CF7C53F893FA81A1E1115BC8E0267F9845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3EB1087C8B4BB3CA5678E41F4538BAA836DF0D1F0C8EE32359654DFD2B5E894/0/3230302e35302e3135352e302f32342d3234203d3e20323733313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:ce:3b:26:e9:64:90:60:67:97:b3:ff:82:28:f6:89:bb:66:
         62:a7:c6:78:0e:d5:69:41:fd:01:eb:3c:e6:fb:ee:25:58:28:
         8a:c7:27:0e:4d:ae:87:eb:b6:2b:a8:71:c1:73:96:7d:f1:bb:
         ae:bd:c6:b9:b4:6b:36:a9:c4:96:3d:56:52:3d:fd:04:83:b5:
         c7:36:f0:30:dc:08:95:d5:7d:3c:97:8d:9a:09:3b:c2:a3:cf:
         12:4f:5f:43:b2:f2:0b:9f:3f:f2:d2:9c:3e:38:c8:03:04:61:
         7b:06:d9:15:32:fa:8d:c9:88:29:1a:5e:94:72:9a:14:85:5f:
         9a:71:1c:f4:32:f3:b8:a5:da:3c:91:d3:28:ae:6d:2e:8a:71:
         41:a7:f1:bb:b0:b6:5a:28:1c:c4:72:2e:f9:0c:f4:63:6a:e1:
         49:7c:3f:ab:56:14:b0:ad:fe:13:ec:82:12:69:cd:d2:6f:90:
         ca:2c:d3:fd:a1:fe:65:7b:d4:01:25:62:28:34:d5:bc:a2:6e:
         55:b3:3f:40:3e:99:f2:89:90:5d:b6:e3:5f:04:43:6a:d9:67:
         32:a0:18:46:53:d9:cc:b2:1f:64:77:1d:03:87:ce:aa:55:93:
         43:cf:df:57:a6:e6:d4:2c:86:dd:2a:b7:5e:14:e6:b8:5b:9b:
         41:19:47:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----