Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3138302e302f32322d3233203d3e203133393939.roa
File:                     3230302e35362e3138302e302f32322d3233203d3e203133393939.roa (raw, json)
Hash identifier:          WJQuOg4nty8ZmwFtouXmUF8ZGpNTNiFlugvoAtgJqQs=
Subject key identifier:   64:D1:F1:E0:6A:84:1D:0A:B7:AE:65:5B:92:B3:FE:9A:31:19:59:E2
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       384974098834D581BF9B13F7CE747E00755B37C4
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3138302e302f32322d3233203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:05 +0000
ROA not before:           Thu 23 May 2024 04:25:05 +0000
ROA not after:            Thu 22 May 2025 04:30:05 +0000
asID:                     13999
IP address blocks:        200.56.180.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:49:74:09:88:34:d5:81:bf:9b:13:f7:ce:74:7e:00:75:5b:37:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:05 2024 GMT
            Not After : May 22 04:30:05 2025 GMT
        Subject: CN=64D1F1E06A841D0AB7AE655B92B3FE9A311959E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d0:53:2f:ca:e0:86:bd:f9:de:11:2a:bb:21:
                    97:98:70:05:18:90:05:f1:47:5e:dc:c9:5d:88:0f:
                    e0:1a:12:7e:b1:d3:14:fc:ae:14:b1:fa:08:05:52:
                    6b:8e:f0:e9:91:c0:a5:85:98:e9:d9:f7:89:63:48:
                    68:16:83:6b:a8:9c:4e:b7:84:5c:81:c4:e2:f1:d8:
                    46:52:a6:87:07:d1:b3:74:d0:fa:e4:66:55:ce:fc:
                    66:1b:0b:40:cb:c2:d4:f7:d3:b6:94:95:f3:51:8b:
                    89:ba:79:14:dc:b6:2a:8d:fc:00:2d:43:3a:67:81:
                    db:3e:5f:db:88:15:51:d5:e7:aa:64:d7:ca:19:d3:
                    fc:68:03:f1:5e:0c:6b:1c:35:64:d4:f7:11:1d:c4:
                    b2:72:da:d3:89:df:b3:39:1a:8b:38:36:39:fa:dc:
                    34:44:d1:16:4a:98:af:19:8c:ad:da:53:69:37:b6:
                    30:0a:c2:96:66:18:2a:be:7a:3e:a9:4c:e4:6c:31:
                    db:34:60:0a:b3:15:69:66:2a:21:04:b9:b0:2c:15:
                    4d:23:34:3e:33:7f:21:e6:a5:08:67:4f:54:e2:b4:
                    33:4d:b5:95:fc:ca:82:9b:29:34:b9:0c:75:21:99:
                    48:d3:c3:b6:21:02:3b:49:7b:16:33:9d:3a:ba:74:
                    6c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D1:F1:E0:6A:84:1D:0A:B7:AE:65:5B:92:B3:FE:9A:31:19:59:E2
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3138302e302f32322d3233203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.56.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:47:ad:54:f3:27:3e:12:62:db:f2:3e:0f:79:e0:00:14:c4:
         21:96:d3:28:ce:1b:f7:68:61:6a:df:ca:90:26:3c:cf:34:14:
         1c:0a:f3:ce:12:7d:a7:99:24:06:7e:69:43:39:5c:5a:d5:98:
         3e:21:2b:d1:a4:ca:18:b0:fa:91:f3:e5:03:ec:19:2f:58:2a:
         12:c4:9e:87:1e:28:43:81:5e:9c:c4:a9:9d:21:20:a6:66:30:
         de:af:41:d6:27:25:b5:47:a9:ba:e4:0e:0f:a7:6d:e5:ea:2c:
         48:64:2c:1d:91:c0:13:79:50:51:5b:f2:bd:3e:c6:36:48:3d:
         5b:e8:c8:aa:a5:ed:dd:c4:63:c6:59:0b:dc:a4:53:bd:a2:28:
         4a:d1:24:3d:5f:82:7a:93:dd:cc:1f:8b:28:99:6c:8d:94:91:
         d4:55:85:97:af:28:82:85:1e:d6:9b:79:8f:de:9d:aa:08:c9:
         68:af:45:12:d6:ee:04:5d:d5:ab:50:12:cc:f2:0c:33:f3:d1:
         76:69:2e:77:de:e8:a7:de:9d:60:cd:e1:ae:e4:a2:f9:9b:b2:
         77:41:fc:d9:8f:95:38:4f:1f:2c:0d:ed:76:73:8b:a2:26:1e:
         3d:f3:e2:9f:a0:e6:e0:fc:86:d5:57:98:4d:da:b6:6c:6c:66:
         a8:e8:7f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----