Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e3132302e302f32322d3234203d3e203133393939.roa
File:                     3230302e37372e3132302e302f32322d3234203d3e203133393939.roa (raw, json)
Hash identifier:          YbADAyrrpJZGihhOuoU4BXZoQsRBy7Yw2c9p1I4iCmI=
Subject key identifier:   D5:79:4B:CA:68:AD:F1:87:FB:05:3B:BD:E7:A6:E5:7C:5E:AD:56:1A
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       19E75C6D0D6507303AFFBC8ED7B140D04F662CFC
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e3132302e302f32322d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:01 +0000
ROA not before:           Thu 23 May 2024 04:25:01 +0000
ROA not after:            Thu 22 May 2025 04:30:01 +0000
asID:                     13999
IP address blocks:        200.77.120.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e7:5c:6d:0d:65:07:30:3a:ff:bc:8e:d7:b1:40:d0:4f:66:2c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:01 2024 GMT
            Not After : May 22 04:30:01 2025 GMT
        Subject: CN=D5794BCA68ADF187FB053BBDE7A6E57C5EAD561A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c9:e4:93:af:6a:b9:1b:c3:3c:60:7d:79:e8:
                    1c:d2:ea:53:ef:f3:ee:b8:8b:92:6b:37:c7:c9:2a:
                    05:21:d0:f2:c4:56:9a:3b:48:66:5e:73:09:9d:ba:
                    b3:e7:5c:35:4e:e7:6c:c9:d4:03:5c:ec:51:22:51:
                    eb:fe:f7:5c:bd:f2:1f:d0:5a:c7:b1:5b:08:ad:73:
                    b7:a0:96:13:0e:6d:80:27:a0:ba:fa:85:b3:bd:a6:
                    1a:09:ad:31:11:a2:56:4e:47:cf:5a:8d:2a:ed:03:
                    29:a6:a6:32:89:b2:4c:8d:f3:cb:57:dc:6f:5a:8c:
                    f4:1d:2a:9b:77:65:8d:be:e2:a5:57:87:5f:a6:5a:
                    db:92:7d:57:75:5d:8d:c0:47:d0:ad:d0:f8:e3:da:
                    1c:08:00:a5:79:ad:7d:a0:44:58:01:1a:57:d8:c2:
                    07:ee:50:31:0f:07:78:0d:c2:1b:bc:57:8f:e6:af:
                    a1:f8:c7:a5:43:51:2f:02:c9:4e:72:98:23:3e:62:
                    91:6b:88:b1:14:29:35:6d:4e:32:07:df:ee:7c:45:
                    61:75:ff:ca:31:69:fd:0f:8b:4f:bf:a6:61:55:01:
                    47:21:5d:2a:59:76:6a:0a:ac:17:06:b3:ab:07:0c:
                    dc:54:aa:c7:b1:de:15:26:9f:b8:58:02:e2:be:41:
                    ed:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:79:4B:CA:68:AD:F1:87:FB:05:3B:BD:E7:A6:E5:7C:5E:AD:56:1A
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e3132302e302f32322d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:e4:24:27:d3:75:df:63:98:f5:30:6d:a0:b5:ca:44:fb:98:
         f1:5a:ca:fc:94:08:36:a0:07:5b:dc:e9:a9:76:da:32:36:75:
         41:d9:41:04:92:3c:bc:a3:29:68:fc:f8:82:17:6c:92:dc:e1:
         1e:92:3c:08:93:22:60:77:44:ec:b9:58:2e:ab:5f:6a:fb:da:
         3b:4c:c8:34:b1:ea:13:c4:19:ec:75:d2:5b:42:05:f8:9a:ff:
         2e:d9:b7:59:90:ac:7f:60:b6:f0:4c:8f:02:5b:47:f0:ed:e2:
         41:3f:47:6d:ad:2f:7b:57:14:23:8e:8c:a0:09:b4:60:25:54:
         56:d7:d0:0f:8b:c1:b5:13:e3:0e:e9:3b:8b:12:11:70:30:0c:
         f8:25:a6:37:78:3b:55:75:a6:18:eb:f0:d6:9d:d5:d4:ef:ac:
         cd:74:d1:5f:4c:0f:a3:0c:58:7b:41:8e:84:9b:0f:c3:1c:ba:
         d9:ae:6b:1f:df:08:0a:9b:a4:e6:cb:a6:f3:c0:eb:a0:92:90:
         7f:6b:af:08:3f:57:71:10:0a:e1:ce:69:8a:c8:6e:97:ed:b9:
         1e:5f:5c:31:55:15:08:a7:83:2b:af:ed:8d:52:b4:2e:65:10:
         ce:25:06:e7:50:d7:f7:54:42:40:97:78:30:d0:3d:58:85:b8:
         5b:59:8f:59
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGedcbQ1lBzA6/7yO17FA0E9mLPwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxRjVDNzUzRUZEQjdGODQ3NkM2M0JCQjQxNDE3QjhF
MTk0QTJBMzAeFw0yNDA1MjMwNDI1MDFaFw0yNTA1MjIwNDMwMDFaMDMxMTAvBgNV
BAMTKEQ1Nzk0QkNBNjhBREYxODdGQjA1M0JCREU3QTZFNTdDNUVBRDU2MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQyeSTr2q5G8M8YH156BzS6lPv
8+64i5JrN8fJKgUh0PLEVpo7SGZecwmdurPnXDVO52zJ1ANc7FEiUev+91y98h/Q
WsexWwitc7eglhMObYAnoLr6hbO9phoJrTERolZOR89ajSrtAymmpjKJskyN88tX
3G9ajPQdKpt3ZY2+4qVXh1+mWtuSfVd1XY3AR9Ct0Pjj2hwIAKV5rX2gRFgBGlfY
wgfuUDEPB3gNwhu8V4/mr6H4x6VDUS8CyU5ymCM+YpFriLEUKTVtTjIH3+58RWF1
/8oxaf0Pi0+/pmFVAUchXSpZdmoKrBcGs6sHDNxUqsex3hUmn7hYAuK+Qe0dAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU1XlLymit8Yf7BTu956blfF6tVhowHwYDVR0j
BBgwFoAUwB9cdT79t/hHbGO7tBQXuOGUoqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQzAxRjVDNzUzRUZEQjdG
ODQ3NkM2M0JCQjQxNDE3QjhFMTk0QTJBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDFGNUM3NTNFRkRCN0Y4NDc2
QzYzQkJCNDE0MTdCOEUxOTRBMkEzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYxNTY4RDhDOUFERERDQTNDRTc3MDM5NzI3N0Q1Mzk2QjYzMTc0REIw
QzdCMDhCNTc4NjMzQkMzMjY3RTE0Ny8wLzMyMzAzMDJlMzczNzJlMzEzMjMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAshNeDAN
BgkqhkiG9w0BAQsFAAOCAQEAjOQkJ9N132OY9TBtoLXKRPuY8VrK/JQINqAHW9zp
qXbaMjZ1QdlBBJI8vKMpaPz4ghdsktzhHpI8CJMiYHdE7LlYLqtfavvaO0zINLHq
E8QZ7HXSW0IF+Jr/Ltm3WZCsf2C28EyPAltH8O3iQT9Hba0ve1cUI46MoAm0YCVU
VtfQD4vBtRPjDuk7ixIRcDAM+CWmN3g7VXWmGOvw1p3V1O+szXTRX0wPowxYe0GO
hJsPwxy62a5rH98ICpuk5sum88DroJKQf2uvCD9XcRAK4c5pishul+25Hl9cMVUV
CKeDK6/tjVK0LmUQziUG51DX91RCQJd4MNA9WIW4W1mPWQ==
-----END CERTIFICATE-----