Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/3139322e36372e32332e302f32342d3234203d3e203531333936.roa
File:                     3139322e36372e32332e302f32342d3234203d3e203531333936.roa (raw, json)
Hash identifier:          wsThjrLzpkmJLxUWK4q7R2RgOSdIgPx/SyakuWmAD9g=
Subject key identifier:   F8:18:53:81:9C:DB:B4:BD:C1:8F:73:B0:8C:B5:7F:0D:9B:6E:FC:17
Certificate issuer:       /CN=5806F9DC062DA88DF39329EB68D1552E70F91A7A
Certificate serial:       1560A29D4C0C290C73303D12AFCEB1BD47598662
Authority key identifier: 58:06:F9:DC:06:2D:A8:8D:F3:93:29:EB:68:D1:55:2E:70:F9:1A:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/3139322e36372e32332e302f32342d3234203d3e203531333936.roa
Signing time:             Tue 22 Apr 2025 14:20:01 +0000
ROA not before:           Tue 22 Apr 2025 14:15:01 +0000
ROA not after:            Tue 21 Apr 2026 14:20:01 +0000
asID:                     51396
IP address blocks:        192.67.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 23 Apr 2025 15:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:60:a2:9d:4c:0c:29:0c:73:30:3d:12:af:ce:b1:bd:47:59:86:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806F9DC062DA88DF39329EB68D1552E70F91A7A
        Validity
            Not Before: Apr 22 14:15:01 2025 GMT
            Not After : Apr 21 14:20:01 2026 GMT
        Subject: CN=F81853819CDBB4BDC18F73B08CB57F0D9B6EFC17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5d:94:f6:22:41:b8:5b:3e:df:01:bb:5f:1a:
                    31:87:ea:fb:4f:20:e7:e5:4f:7a:06:6e:6b:9c:89:
                    7a:f1:34:0f:eb:79:86:aa:b7:86:15:d7:4a:fc:5d:
                    7b:f9:12:1b:68:8b:4a:52:b5:e0:84:dd:7c:2e:62:
                    77:3a:a4:b0:d0:9f:32:b4:10:d0:22:4c:41:ad:5b:
                    eb:f5:b6:e1:a4:38:7a:5b:78:de:7b:28:e5:ee:c2:
                    46:10:8f:39:eb:3f:f0:09:39:5e:af:7f:2f:0c:21:
                    26:fd:e5:20:0c:b4:35:31:12:dd:be:40:3d:a1:19:
                    5e:83:e8:c6:30:9b:54:e8:04:1b:12:08:fa:65:6f:
                    a9:97:31:62:3c:f0:1f:81:f7:73:d1:82:86:be:2d:
                    34:a9:62:ba:50:18:1b:5a:53:81:3f:9f:14:50:26:
                    8c:4d:fa:0a:2d:07:69:45:0c:c4:5c:27:8c:5e:96:
                    30:db:46:de:80:48:ac:9e:32:35:61:30:fb:62:cf:
                    8f:f0:a4:7f:0c:50:a0:91:98:5b:82:98:65:5b:81:
                    a4:67:2c:72:3e:76:3b:5b:a8:6d:af:94:30:0c:f8:
                    71:78:d0:00:45:a4:de:0f:a6:bb:b3:35:76:07:68:
                    e9:a3:1f:6b:02:07:0d:6a:85:7f:ec:9b:13:14:cd:
                    6c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:18:53:81:9C:DB:B4:BD:C1:8F:73:B0:8C:B5:7F:0D:9B:6E:FC:17
            X509v3 Authority Key Identifier:
                keyid:58:06:F9:DC:06:2D:A8:8D:F3:93:29:EB:68:D1:55:2E:70:F9:1A:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5806F9DC062DA88DF39329EB68D1552E70F91A7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BDAB0DD6263AFF9905454457BED4070196DDB041CC0C0B4BC6C64611A628447/0/3139322e36372e32332e302f32342d3234203d3e203531333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:36:98:0a:a7:b8:49:9c:5d:9d:f5:b6:fa:8f:3e:b8:e9:3b:
         e7:95:d0:96:07:4d:16:60:f1:2b:49:c9:03:66:d2:5a:94:1d:
         b1:2e:7e:42:14:45:3e:16:20:6d:81:c8:f4:aa:45:64:b8:78:
         b4:da:ac:5b:9b:99:e3:c8:da:87:51:b0:e0:d9:09:b0:48:b1:
         0d:dc:12:ba:81:8e:66:67:8a:00:81:bc:62:bb:d3:af:99:67:
         db:4f:ff:2c:40:2c:7f:a5:bf:60:70:20:34:b8:96:6e:4a:2d:
         69:94:6b:41:a0:76:b2:cf:c4:5a:58:29:f5:d5:0a:22:56:ed:
         a6:10:f1:19:0f:e7:67:f2:2b:a6:28:98:79:65:1c:80:54:2d:
         1e:8c:e6:7c:15:da:43:dd:39:ed:c2:ca:e2:09:a4:ec:92:95:
         bd:fc:77:4c:7e:37:69:c6:ec:d9:08:5f:5f:21:df:fa:2d:a8:
         a2:a9:71:e8:55:cc:a1:fe:8d:af:59:02:aa:4d:2a:03:d5:ed:
         ab:aa:17:8c:e9:32:7c:7c:89:af:57:98:98:93:fc:4d:e1:0c:
         0b:e2:aa:d5:46:4c:ce:70:50:42:89:7d:94:39:64:17:7b:e0:
         85:2c:56:3d:fb:55:ca:9a:86:ad:c2:43:e3:c8:12:95:10:e1:
         94:0d:8a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----