Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3137362e302f32302d3234203d3e203133393939.roa
File:                     3230302e35322e3137362e302f32302d3234203d3e203133393939.roa (raw, json)
Hash identifier:          4uSKiKufS7VXRSFuF9wjnZ8PTXMozPueN+Sf8LJnl4g=
Subject key identifier:   C8:4F:83:7C:27:12:55:CF:52:90:87:F7:45:26:82:E2:24:31:5C:C0
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       3A9F11ED617D24F09A6DE5B2A46F91B305042357
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3137362e302f32302d3234203d3e203133393939.roa
Signing time:             Tue 21 May 2024 03:55:03 +0000
ROA not before:           Tue 21 May 2024 03:50:03 +0000
ROA not after:            Tue 20 May 2025 03:55:03 +0000
asID:                     13999
IP address blocks:        200.52.176.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:9f:11:ed:61:7d:24:f0:9a:6d:e5:b2:a4:6f:91:b3:05:04:23:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 21 03:50:03 2024 GMT
            Not After : May 20 03:55:03 2025 GMT
        Subject: CN=C84F837C271255CF529087F7452682E224315CC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9a:80:1e:8a:5a:e9:3b:b9:d6:fa:43:8d:25:
                    95:85:97:a0:50:be:7a:4c:54:e9:31:2a:bb:74:48:
                    a1:87:f5:9f:ae:5a:16:5a:e4:74:42:51:4f:2c:c7:
                    28:28:d4:0f:77:61:93:10:60:90:3d:cc:80:89:2c:
                    83:6b:d2:3b:37:56:36:40:f5:0a:0f:af:dd:cd:ed:
                    e4:6a:a2:25:18:28:eb:3d:c4:aa:3e:ce:a4:e9:cf:
                    3e:a3:d3:72:19:83:cc:5b:00:81:0f:b9:ba:8e:30:
                    1d:f3:99:b2:2d:1c:fd:eb:ad:55:37:e7:07:48:5c:
                    54:1f:ed:aa:e0:cb:f7:bb:43:9f:3e:fb:7a:98:f4:
                    78:a4:f4:91:7b:1e:11:79:85:0f:1e:09:95:6f:5a:
                    fe:e3:6f:f0:9e:dd:f4:2f:60:a9:b6:b0:72:58:9a:
                    c5:0c:46:81:91:e6:d4:e1:0a:5c:5a:fc:34:1e:eb:
                    fa:c5:df:f6:2d:c8:cb:a4:42:e5:eb:96:69:4a:3a:
                    f8:74:18:d9:05:ee:f6:81:70:92:ed:93:65:3b:5f:
                    cd:38:90:41:ea:ac:ed:52:83:2e:6b:e4:c4:88:06:
                    a0:8a:2d:bc:05:f3:a2:52:9b:e3:3c:f7:19:f0:f3:
                    2e:e9:6a:36:9b:5e:06:f9:66:8c:83:20:c4:3e:16:
                    2b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4F:83:7C:27:12:55:CF:52:90:87:F7:45:26:82:E2:24:31:5C:C0
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3137362e302f32302d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:4e:dc:34:98:f9:39:6b:4e:21:3a:eb:52:8c:de:c2:2f:da:
         f7:71:57:73:bd:5f:e5:12:12:22:ed:b7:27:48:19:4f:72:e6:
         76:f7:9b:2f:53:29:98:21:9c:85:22:ed:04:c7:83:0e:1d:2c:
         e0:d7:76:2d:b9:cf:57:01:46:9b:6a:e7:1e:78:41:aa:6b:18:
         26:82:1e:61:d6:fe:a3:70:ff:0a:8d:54:b4:d7:9e:99:7d:e2:
         84:b0:3d:ba:d2:5c:ad:b2:b3:f3:32:59:01:b8:d6:76:b5:2a:
         53:bd:7d:74:16:28:86:b2:ce:b0:2d:df:db:66:56:3b:d1:28:
         2d:f7:1c:a3:b6:0f:1b:8e:ba:b2:dd:57:01:05:c4:95:b6:de:
         78:6a:41:1f:e4:32:bb:44:6f:09:5c:08:45:b2:69:50:71:5c:
         15:7d:06:27:ab:01:53:86:9b:98:8c:40:1c:d7:4f:e7:d1:a5:
         4c:27:2b:2d:1e:6f:d9:49:b7:59:bd:74:8b:d6:29:9e:af:00:
         d6:cb:f8:48:4c:db:c0:4f:01:e9:2a:2f:b6:0c:88:ef:eb:98:
         b8:f1:90:12:2f:19:1d:ee:31:22:9f:34:c6:92:77:80:9d:53:
         24:3a:2a:12:98:2c:cf:38:14:db:2b:73:09:64:81:5a:40:3a:
         24:4e:8c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----