Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e3131322e302f32332d3234203d3e203133393939.roa
File:                     3230302e37372e3131322e302f32332d3234203d3e203133393939.roa (raw, json)
Hash identifier:          YCnjcS23wiFJGoaaA2+vcBDKXqQBW3fkxPJRPRGExVw=
Subject key identifier:   E4:42:5E:03:7C:0B:8A:F4:40:44:80:47:4C:DF:C0:0D:04:C1:EF:53
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       10366DC25C04E4986028EFB13E0326ED4BB910D9
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e3131322e302f32332d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:16 +0000
ROA not before:           Thu 23 May 2024 04:25:16 +0000
ROA not after:            Thu 22 May 2025 04:30:16 +0000
asID:                     13999
IP address blocks:        200.77.112.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:36:6d:c2:5c:04:e4:98:60:28:ef:b1:3e:03:26:ed:4b:b9:10:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:16 2024 GMT
            Not After : May 22 04:30:16 2025 GMT
        Subject: CN=E4425E037C0B8AF4404480474CDFC00D04C1EF53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:ff:c8:87:95:6c:72:96:84:df:fc:d4:c5:
                    29:52:8d:9d:83:3d:b3:84:cc:11:4a:ff:00:8e:66:
                    a6:5c:21:46:41:3d:d0:76:d7:e9:58:2b:0b:4b:8f:
                    70:f8:64:f3:39:83:28:0f:45:c7:d2:f1:b3:af:24:
                    95:7c:02:fa:a1:c1:63:d0:02:75:33:2b:84:38:83:
                    ea:80:2d:db:3c:27:80:60:0d:8c:41:45:87:51:3b:
                    90:02:a1:92:c1:16:6a:b1:94:5b:84:88:41:e4:0d:
                    5a:1e:62:be:24:a7:ad:d2:c3:f5:5e:53:8b:9d:aa:
                    68:86:56:6f:7f:a8:46:5e:5f:ca:64:2b:b4:d6:97:
                    41:50:d8:ca:f2:37:f7:e1:98:4a:4d:ba:41:04:ab:
                    81:21:6b:40:ac:40:18:c2:ec:26:5c:74:11:7b:51:
                    c9:e1:a9:75:ca:1e:1a:cb:b3:53:fa:c8:d0:4f:d0:
                    9f:ff:e4:11:f5:1e:7b:d3:14:45:82:7e:ba:29:41:
                    69:f9:46:17:b7:27:fb:65:4e:d6:df:a3:45:af:de:
                    7e:b0:29:69:25:55:8a:02:c3:90:c5:ac:25:5f:0e:
                    9a:28:ca:f6:67:80:a7:b8:a7:8d:97:19:bb:fc:c4:
                    74:7c:99:63:df:33:79:99:85:d4:b4:d3:86:86:1e:
                    8c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:42:5E:03:7C:0B:8A:F4:40:44:80:47:4C:DF:C0:0D:04:C1:EF:53
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e3131322e302f32332d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:be:93:a8:cb:db:8c:c3:ec:fc:4b:ec:79:fe:3f:e4:56:53:
         2c:36:c3:35:b8:2d:d2:49:b9:71:be:2f:8e:dd:b0:9e:91:a3:
         b1:0c:5a:cd:29:34:4c:fc:13:3d:5c:ac:af:79:57:0e:76:0d:
         e7:7d:2f:1a:7a:67:d7:1b:70:05:91:dd:53:30:15:7d:bb:c6:
         73:cf:21:3d:23:e0:26:3a:b4:a0:1e:7c:ac:c8:80:dc:b9:ca:
         1c:1a:50:b9:b8:76:5f:05:cf:19:61:bf:13:61:f6:63:24:97:
         f7:37:95:3c:70:59:f1:8a:e5:b5:63:6f:06:94:6d:f7:87:f9:
         d7:bf:e7:62:d0:31:02:f6:8e:ab:dd:b9:ca:c0:39:6a:8c:62:
         af:15:a3:af:e2:c7:62:ab:ee:15:45:35:b6:b6:0c:78:2d:f7:
         f8:c5:07:c5:c9:2d:aa:91:5e:b5:8f:36:22:15:06:0f:18:37:
         98:d4:04:be:dd:cb:5d:ef:0c:47:18:da:cb:fb:4e:b7:fd:45:
         0f:c6:7e:55:ae:95:03:e5:fe:0d:43:e9:46:0a:27:cc:b6:6a:
         f5:5b:20:d2:70:6e:ef:01:2b:a9:0a:52:ab:45:58:8e:3e:47:
         5f:e3:59:9d:83:33:c6:ed:77:22:00:a0:33:71:11:fe:c6:fc:
         82:0a:2c:e7
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEDZtwlwE5JhgKO+xPgMm7Uu5ENkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxRjVDNzUzRUZEQjdGODQ3NkM2M0JCQjQxNDE3QjhF
MTk0QTJBMzAeFw0yNDA1MjMwNDI1MTZaFw0yNTA1MjIwNDMwMTZaMDMxMTAvBgNV
BAMTKEU0NDI1RTAzN0MwQjhBRjQ0MDQ0ODA0NzRDREZDMDBEMDRDMUVGNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ5//Ih5VscpaE3/zUxSlSjZ2D
PbOEzBFK/wCOZqZcIUZBPdB21+lYKwtLj3D4ZPM5gygPRcfS8bOvJJV8AvqhwWPQ
AnUzK4Q4g+qALds8J4BgDYxBRYdRO5ACoZLBFmqxlFuEiEHkDVoeYr4kp63Sw/Ve
U4udqmiGVm9/qEZeX8pkK7TWl0FQ2MryN/fhmEpNukEEq4Eha0CsQBjC7CZcdBF7
UcnhqXXKHhrLs1P6yNBP0J//5BH1HnvTFEWCfropQWn5Rhe3J/tlTtbfo0Wv3n6w
KWklVYoCw5DFrCVfDpooyvZngKe4p42XGbv8xHR8mWPfM3mZhdS004aGHowFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU5EJeA3wLivRARIBHTN/ADQTB71MwHwYDVR0j
BBgwFoAUwB9cdT79t/hHbGO7tBQXuOGUoqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQzAxRjVDNzUzRUZEQjdG
ODQ3NkM2M0JCQjQxNDE3QjhFMTk0QTJBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDFGNUM3NTNFRkRCN0Y4NDc2
QzYzQkJCNDE0MTdCOEUxOTRBMkEzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYxNTY4RDhDOUFERERDQTNDRTc3MDM5NzI3N0Q1Mzk2QjYzMTc0REIw
QzdCMDhCNTc4NjMzQkMzMjY3RTE0Ny8wLzMyMzAzMDJlMzczNzJlMzEzMTMyMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAchNcDAN
BgkqhkiG9w0BAQsFAAOCAQEAS76TqMvbjMPs/Evsef4/5FZTLDbDNbgt0km5cb4v
jt2wnpGjsQxazSk0TPwTPVysr3lXDnYN530vGnpn1xtwBZHdUzAVfbvGc88hPSPg
Jjq0oB58rMiA3LnKHBpQubh2XwXPGWG/E2H2YySX9zeVPHBZ8YrltWNvBpRt94f5
17/nYtAxAvaOq925ysA5aoxirxWjr+LHYqvuFUU1trYMeC33+MUHxcktqpFetY82
IhUGDxg3mNQEvt3LXe8MRxjay/tOt/1FD8Z+Va6VA+X+DUPpRgonzLZq9Vsg0nBu
7wErqQpSq0VYjj5HX+NZnYMzxu13IgCgM3ER/sb8ggos5w==
-----END CERTIFICATE-----