Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3139302e3132392e3136302e32342f32392d3239203d3e203237303033.roa
File:                     3139302e3132392e3136302e32342f32392d3239203d3e203237303033.roa (raw, json)
Hash identifier:          r3p8FQk4vo7os517IRODBweQSE7wLsKapIPJP4AvP7c=
Subject key identifier:   A0:6D:E5:88:64:3D:83:EC:A9:AC:92:98:45:30:84:DA:58:74:38:AA
Certificate issuer:       /CN=677CEC9F1C4060755422FE75661CBC3718515578
Certificate serial:       59E2985F1EEE9E829EEDBC2595B8A881FBF293BC
Authority key identifier: 67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3139302e3132392e3136302e32342f32392d3239203d3e203237303033.roa
Signing time:             Thu 23 May 2024 21:00:01 +0000
ROA not before:           Thu 23 May 2024 20:55:01 +0000
ROA not after:            Thu 22 May 2025 21:00:01 +0000
asID:                     27003
IP address blocks:        190.129.160.24/29 maxlen: 29

Validation:               Failed, certificate revoked on Fri 24 May 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e2:98:5f:1e:ee:9e:82:9e:ed:bc:25:95:b8:a8:81:fb:f2:93:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677CEC9F1C4060755422FE75661CBC3718515578
        Validity
            Not Before: May 23 20:55:01 2024 GMT
            Not After : May 22 21:00:01 2025 GMT
        Subject: CN=A06DE588643D83ECA9AC9298453084DA587438AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:63:d0:e5:8c:d3:94:4d:a3:2a:14:b9:d6:13:
                    b8:5b:5e:68:85:22:b3:84:c3:7b:d7:92:a6:61:15:
                    14:5c:d3:9d:69:92:f8:d6:8d:fe:f1:32:0b:61:7d:
                    4c:49:80:19:9d:cb:09:a6:89:ea:b2:63:f2:4c:ef:
                    e6:25:a7:bd:2b:03:8b:1d:e8:e9:7f:5a:bf:28:46:
                    d1:bd:33:39:a2:36:e2:9b:9f:48:4e:e3:ca:34:68:
                    b9:f7:62:e0:0c:fb:6b:48:97:55:4e:23:92:1b:35:
                    7d:1b:70:60:f8:5d:41:0c:11:29:63:8a:10:50:2e:
                    ed:30:d4:b9:c6:45:03:e8:dd:55:e3:94:ad:3d:6d:
                    90:bd:d9:bf:60:4d:48:8c:0d:fa:36:ff:de:3d:57:
                    3b:3b:02:f4:2c:3d:ce:74:a0:ba:da:f9:2e:07:41:
                    ce:46:0e:2d:21:86:74:63:4c:1f:9a:91:b9:ff:ae:
                    ca:e4:10:c9:72:f7:dc:4b:d3:a0:37:83:78:aa:3c:
                    83:19:34:2f:c2:cb:03:1c:e0:50:f7:af:6d:df:03:
                    dd:c0:76:7d:e8:79:8b:0e:da:b7:be:a1:44:ba:ed:
                    4a:69:d3:17:1e:0b:98:d4:19:a0:5f:ae:3a:7c:98:
                    9c:34:d6:69:66:d2:c8:32:66:93:bf:19:97:27:c6:
                    5f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6D:E5:88:64:3D:83:EC:A9:AC:92:98:45:30:84:DA:58:74:38:AA
            X509v3 Authority Key Identifier:
                keyid:67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3139302e3132392e3136302e32342f32392d3239203d3e203237303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.129.160.24/29

    Signature Algorithm: sha256WithRSAEncryption
         6a:f5:cf:64:ba:80:35:38:7d:cb:1d:5c:ee:16:c1:d4:8f:bf:
         f7:58:e5:1a:eb:55:60:7e:28:eb:63:df:31:6d:80:58:94:62:
         cb:75:04:a9:13:4e:6d:60:89:b6:ed:2a:ec:86:37:f8:53:50:
         55:1f:2d:11:74:58:3a:be:c9:e8:2a:c4:08:18:69:9e:92:28:
         7b:9f:b8:a7:58:4f:cb:45:8d:55:1b:6e:0b:96:08:37:3f:f2:
         1d:5d:03:fb:a9:fa:b1:e5:36:59:7b:2d:68:aa:02:db:f0:ff:
         82:30:45:fc:4f:ea:40:39:15:87:df:7a:72:c1:ec:d9:fc:03:
         dc:96:e5:a5:33:02:81:7e:27:01:c4:f2:22:4f:69:08:27:74:
         aa:9a:90:38:08:4e:40:66:6c:0f:06:08:00:ef:97:12:b3:b3:
         35:62:0a:92:9d:00:77:66:80:ba:f5:6e:24:94:da:43:7e:39:
         f2:ef:ba:bf:39:07:84:52:75:d1:b4:00:25:8e:f1:f2:a5:e3:
         1a:f3:05:00:37:3e:59:f8:fc:04:d1:ae:5d:52:93:d6:8d:b0:
         80:22:a0:f9:77:0e:fd:4c:a8:c9:d9:df:48:51:82:bb:42:cf:
         da:b6:ba:7c:cb:01:2e:1d:14:09:19:30:ac:38:2a:f1:22:07:
         06:de:78:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----