Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3230372e302f32342d3234203d3e203133393939.roa
File:                     3230302e35322e3230372e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          xdCFWs8tJEzV3TZogqkGQYoqz3Vxd4H3bShPt2gMBTs=
Subject key identifier:   86:B5:40:34:1E:4C:D0:9D:F3:88:9C:42:C1:1A:EB:FC:14:D1:93:FB
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       383D640F7D54107FE46206DB6E34690915A72A8F
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3230372e302f32342d3234203d3e203133393939.roa
Signing time:             Tue 21 May 2024 03:55:02 +0000
ROA not before:           Tue 21 May 2024 03:50:02 +0000
ROA not after:            Tue 20 May 2025 03:55:02 +0000
asID:                     13999
IP address blocks:        200.52.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3d:64:0f:7d:54:10:7f:e4:62:06:db:6e:34:69:09:15:a7:2a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 21 03:50:02 2024 GMT
            Not After : May 20 03:55:02 2025 GMT
        Subject: CN=86B540341E4CD09DF3889C42C11AEBFC14D193FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:a9:af:18:d6:6f:f8:09:f9:bf:a5:18:4e:
                    79:9a:ad:50:b9:86:99:a0:37:ce:85:b1:38:3f:fb:
                    88:d7:4b:74:4a:26:2a:93:1d:d9:29:61:80:95:39:
                    e1:19:38:13:5c:e7:db:c9:8b:94:cb:68:12:d2:7a:
                    80:54:3b:e6:f5:7a:e5:ec:fe:66:f1:b5:d2:15:8c:
                    48:5e:2c:a4:d6:73:b7:c1:16:45:f8:8f:a4:65:eb:
                    79:e6:87:17:ef:81:7f:fc:83:b5:cf:a3:cd:fc:98:
                    1d:dd:95:b5:6a:64:96:ab:8a:91:06:26:79:74:13:
                    ec:23:95:d1:53:a9:34:97:63:31:55:16:f2:b5:ed:
                    63:e5:6d:44:cd:e4:5a:0c:14:cb:15:02:e1:02:d1:
                    e1:bd:b5:6c:10:e3:ca:24:79:fb:2d:8f:16:a3:03:
                    54:92:74:b7:11:be:83:20:fe:9f:15:a1:37:e7:f3:
                    72:96:d1:d2:04:8a:d7:92:27:93:aa:fd:26:76:79:
                    f1:a0:e9:e7:3c:8d:fe:d8:f5:ae:83:aa:fd:18:9c:
                    90:da:41:28:ef:f9:bc:9e:3f:80:e7:35:0a:44:81:
                    8f:51:df:99:e1:16:08:9c:0a:d6:1c:19:d1:c7:54:
                    fe:52:6d:d7:e6:83:16:8c:3a:7f:28:5e:93:05:3a:
                    2e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B5:40:34:1E:4C:D0:9D:F3:88:9C:42:C1:1A:EB:FC:14:D1:93:FB
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3230372e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:19:38:26:33:1f:43:c1:86:d3:b7:13:a8:63:b5:ce:6e:b6:
         4d:de:82:7a:b6:0c:df:de:c4:14:c1:43:e2:85:0b:c4:c6:96:
         ae:10:33:7b:94:87:e0:84:14:60:c3:8a:17:10:5f:1b:02:45:
         09:e6:56:f9:8d:4d:b9:8e:ec:75:05:9f:31:1a:27:4c:ac:fc:
         1e:ea:35:f3:25:33:15:74:1d:ad:63:9a:c4:dd:d0:3e:43:0b:
         26:74:a2:66:c2:01:f6:f0:54:f3:20:bf:43:c7:38:75:7c:7a:
         e0:31:58:61:8a:73:c0:ab:a5:e4:5e:fe:97:72:34:cd:43:ac:
         c5:36:1e:85:2a:e3:f6:05:15:8e:82:cd:57:af:cc:64:6c:1e:
         58:15:1a:e5:93:3d:f6:d0:27:b9:2c:98:b5:a4:6e:2d:68:dc:
         52:aa:d3:80:cd:bc:3f:21:d2:3a:b6:24:37:a2:fc:18:0f:d2:
         77:52:b7:94:71:6f:cc:ea:fe:59:c2:55:d4:bb:00:65:51:7a:
         c7:0d:88:05:df:d2:7f:e0:dc:49:78:db:66:31:1a:a0:6b:c7:
         30:58:9e:64:b7:cd:69:fe:8d:b4:e9:f4:3d:7b:f7:be:95:40:
         bf:e0:15:4f:0f:77:6c:e3:57:0b:67:52:52:ae:29:f4:4c:c8:
         1d:31:22:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----