Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3137342e302f32332d3234203d3e203133393939.roa
File:                     3230302e35322e3137342e302f32332d3234203d3e203133393939.roa (raw, json)
Hash identifier:          hVq7k4hcY/VZktrXjPDVuV1LChiSOvoImX30GO1j1SY=
Subject key identifier:   70:31:02:32:D1:28:08:0E:14:7D:82:D7:B6:38:80:05:CB:DE:78:8C
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       6C2B5913C9C958553375DBE6A4ACD0E74B1C9061
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3137342e302f32332d3234203d3e203133393939.roa
Signing time:             Tue 21 May 2024 03:55:03 +0000
ROA not before:           Tue 21 May 2024 03:50:03 +0000
ROA not after:            Tue 20 May 2025 03:55:03 +0000
asID:                     13999
IP address blocks:        200.52.174.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2b:59:13:c9:c9:58:55:33:75:db:e6:a4:ac:d0:e7:4b:1c:90:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 21 03:50:03 2024 GMT
            Not After : May 20 03:55:03 2025 GMT
        Subject: CN=70310232D128080E147D82D7B6388005CBDE788C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:e6:8c:5d:60:d3:bf:bd:6a:79:05:95:ba:
                    72:6e:ad:28:cb:c3:0a:23:ba:f8:78:12:ac:e1:38:
                    a2:7f:c2:55:15:e6:56:f8:4c:7a:fd:5a:2c:97:aa:
                    9e:73:ce:c8:43:ee:13:4d:73:98:5d:dd:02:ac:96:
                    21:4f:2e:9a:5d:2b:75:51:30:11:37:84:11:54:97:
                    3e:b4:8f:8a:c5:34:5d:af:30:9b:ad:df:77:c8:2c:
                    89:ab:39:65:91:20:7f:8c:c3:dd:98:95:f2:a4:11:
                    53:4e:04:91:1f:02:50:77:73:c8:ab:f4:4d:39:79:
                    7d:cd:66:e4:3d:c7:85:49:ef:d5:28:c6:14:f7:8f:
                    c5:2b:38:b0:6a:58:ac:25:0a:03:5f:24:57:e9:f6:
                    d4:1d:58:88:ea:45:9e:2f:57:ea:3c:ca:c3:eb:f1:
                    28:47:b7:e1:b3:ab:dc:e1:46:47:92:a8:c0:af:fe:
                    c9:ba:30:ca:26:ac:b6:03:60:80:7b:57:1c:a6:f5:
                    d6:5e:05:ad:e4:36:78:27:21:ef:24:da:aa:0b:c1:
                    10:90:01:08:b6:88:f5:d6:52:14:f0:2a:a3:28:1d:
                    70:ae:bc:34:54:49:fc:53:74:ae:5c:2e:c4:bc:9b:
                    34:43:67:ca:87:64:10:fa:cf:49:5d:7c:5c:d9:f5:
                    93:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:31:02:32:D1:28:08:0E:14:7D:82:D7:B6:38:80:05:CB:DE:78:8C
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3137342e302f32332d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:48:f4:7c:1e:13:f0:5b:57:59:04:ef:67:5c:00:b3:39:6f:
         d1:1b:7d:2a:f7:95:e5:2f:5a:50:98:99:3a:8f:cb:3a:b7:90:
         f9:9a:01:f6:e2:ec:4a:1d:78:57:4f:e2:df:95:ef:9b:c4:40:
         ed:0f:bf:8c:98:3a:72:8d:a7:a7:7d:f9:9a:2d:c5:e9:81:4b:
         60:17:7f:db:22:8a:af:5c:98:f4:bc:34:9a:88:ba:47:c0:41:
         93:84:e4:70:6d:2e:c7:f2:29:a9:c1:99:c3:0f:b1:d2:bf:bc:
         b1:ca:21:65:33:4b:8e:b2:56:44:6d:75:4a:b4:82:e7:94:bd:
         f4:bc:af:c2:e5:ff:2a:d1:84:0e:27:9c:9e:10:d6:b8:ec:77:
         55:92:b2:2e:97:6f:5a:b2:2d:8b:2a:7d:9c:11:7f:33:a4:7e:
         1a:d6:52:57:0c:c7:ce:5f:5e:e6:77:20:7c:b1:df:c2:60:a2:
         71:ef:ba:7e:fb:e9:fb:7c:60:fb:52:16:e1:60:69:96:b2:c3:
         c3:3d:14:fc:65:78:7f:b9:95:3d:e6:6b:3e:d0:8c:49:b4:38:
         ef:ad:ab:d4:ad:91:a7:ae:17:35:85:38:66:35:30:ae:2f:ec:
         2a:a7:af:9c:4e:f5:f5:94:fc:1f:22:f5:b5:72:f8:38:77:a4:
         15:9f:6f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----