Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3133362e302f32312d3234203d3e203133393939.roa
File:                     3230302e35362e3133362e302f32312d3234203d3e203133393939.roa (raw, json)
Hash identifier:          bh2VCeeVIPKCyN9CnyjPhUPwvY++O6mERa+1Yu7ujJ8=
Subject key identifier:   FC:6B:75:13:0C:7B:47:5C:0C:6F:B4:CF:4A:85:05:0A:3B:97:97:98
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       47E881BF246B04B60C659C2D7FCE4D6211AE40B3
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3133362e302f32312d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:01 +0000
ROA not before:           Thu 23 May 2024 04:25:01 +0000
ROA not after:            Thu 22 May 2025 04:30:01 +0000
asID:                     13999
IP address blocks:        200.56.136.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e8:81:bf:24:6b:04:b6:0c:65:9c:2d:7f:ce:4d:62:11:ae:40:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:01 2024 GMT
            Not After : May 22 04:30:01 2025 GMT
        Subject: CN=FC6B75130C7B475C0C6FB4CF4A85050A3B979798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:7b:47:42:f5:81:62:cd:31:0c:64:5f:62:
                    7b:be:27:97:80:70:b1:e7:d3:67:00:52:22:f5:c5:
                    7d:25:d7:3d:5c:a7:da:51:51:62:96:83:f6:a2:25:
                    47:e3:da:a9:22:2a:b4:20:80:7a:79:f0:71:4d:5e:
                    2d:d5:7d:3c:4e:91:d2:31:a4:7a:5b:3b:e7:ef:46:
                    29:c0:c2:cb:f9:20:01:b9:d5:7d:49:18:a3:a3:ac:
                    5d:d2:c0:3d:a7:ab:34:6e:2b:15:ae:a1:e1:15:66:
                    67:d6:49:e0:08:e4:1d:8d:44:08:3c:bc:a2:fb:3f:
                    5f:b2:99:e6:ad:e9:34:c3:cb:a8:44:b1:79:56:0b:
                    84:95:a7:27:e2:ae:ff:b8:80:cc:85:5a:f3:a7:d2:
                    7b:c7:28:6a:6e:c6:de:db:5a:1f:eb:b4:b6:f1:66:
                    8f:b9:64:57:de:11:8f:c5:68:e4:c4:85:3d:de:12:
                    04:70:94:b1:52:42:25:03:b7:45:1e:63:07:06:59:
                    20:c6:4f:a8:8e:8d:9a:96:2b:9b:51:cd:c1:0e:c2:
                    f0:a7:0b:94:41:11:e4:6b:2f:5f:f8:a6:d6:61:5e:
                    cc:09:ee:02:9e:24:ff:f7:63:25:0b:e4:1e:aa:c3:
                    74:c8:e7:6a:7d:5d:b5:ce:15:1d:f8:d6:da:58:79:
                    dd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6B:75:13:0C:7B:47:5C:0C:6F:B4:CF:4A:85:05:0A:3B:97:97:98
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3133362e302f32312d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.56.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:87:85:c7:3b:3e:5b:10:b0:8c:33:d3:97:36:39:ef:14:5c:
         c6:8b:55:1f:fa:9a:64:25:c8:63:27:50:a9:70:7a:3c:85:3d:
         30:d7:b2:94:e8:c2:1b:da:bb:54:e2:8d:8c:92:91:cc:bc:e5:
         ae:09:e0:2f:72:44:82:dd:74:ab:ab:86:76:ec:eb:b8:86:30:
         f8:03:ed:15:ec:ec:d2:95:89:93:cb:d7:91:e6:54:b7:9c:8c:
         2e:9f:b9:fe:c0:0d:5e:d8:f2:14:7d:02:5d:11:e5:3e:c9:1d:
         ba:47:de:4a:82:fb:46:4b:52:af:6e:c7:44:c7:56:9f:17:43:
         4f:0a:9d:71:b3:04:3d:fd:b0:95:cd:5d:1f:af:2d:75:f1:d2:
         93:d3:e8:f6:4f:16:31:f6:ee:b2:af:95:5a:35:51:64:b9:52:
         60:dd:6c:3e:b5:e3:0c:aa:a4:1f:11:b8:ad:16:58:e4:b9:a0:
         79:f7:f7:74:63:92:cb:8e:86:c5:1b:64:f8:fb:02:32:b0:e7:
         76:9a:1e:05:b6:b4:20:db:11:c8:25:86:5b:36:44:81:9c:bb:
         b1:b7:08:2f:66:48:39:f6:9d:8d:dd:87:67:6d:b7:0d:44:51:
         a1:f6:d4:2d:20:e8:47:53:f1:09:19:5b:38:c9:00:99:65:71:
         5d:62:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----