Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e34362e302f32342d3234203d3e20323632393136.roa
File:                     3230302e37372e34362e302f32342d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          nxFcwymzwTjWOKjzOazJHAbJxA5j3W0T9CSbeWQYQ8A=
Subject key identifier:   80:06:24:96:69:1C:6D:FC:E3:9B:3B:4D:53:6D:46:F8:2F:D1:93:4E
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       22DF7D8C782232E689A36859F1FA6EAD9719116C
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e34362e302f32342d3234203d3e20323632393136.roa
Signing time:             Thu 23 May 2024 04:30:02 +0000
ROA not before:           Thu 23 May 2024 04:25:02 +0000
ROA not after:            Thu 22 May 2025 04:30:02 +0000
asID:                     262916
IP address blocks:        200.77.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:df:7d:8c:78:22:32:e6:89:a3:68:59:f1:fa:6e:ad:97:19:11:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:02 2024 GMT
            Not After : May 22 04:30:02 2025 GMT
        Subject: CN=80062496691C6DFCE39B3B4D536D46F82FD1934E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:88:44:79:de:92:97:f5:85:ea:f5:2e:26:
                    35:1f:57:11:db:75:19:53:0c:bb:10:ce:47:4b:00:
                    90:88:ee:5d:2e:72:1f:af:92:35:2f:68:7a:5a:b5:
                    85:df:05:4a:11:dc:3b:dd:b5:63:99:62:c1:1e:04:
                    b3:f3:93:b8:ea:c3:cb:fd:64:22:0a:4a:94:3c:b8:
                    c7:63:12:fb:74:b1:48:3b:f4:a0:a1:4c:89:ce:94:
                    48:1b:1d:6f:35:3b:67:fb:22:20:70:3c:4e:17:6c:
                    2a:15:2b:8b:b4:6d:9c:79:b0:22:13:82:d3:f0:49:
                    92:56:a7:25:a4:0b:ce:01:94:09:da:98:4e:ce:da:
                    7b:d9:52:c2:c3:a5:34:73:46:15:30:87:1f:e8:6f:
                    fc:af:75:c5:de:eb:d5:49:57:13:65:83:cd:e7:75:
                    05:45:86:86:c6:7b:68:b7:6f:b5:5e:8f:80:36:8e:
                    b0:40:7f:78:e4:24:5d:0e:18:fb:3b:96:a8:4e:76:
                    4b:fe:85:8c:c3:50:a5:84:50:48:d9:20:97:ff:c6:
                    84:0d:f1:9d:e7:d3:4a:25:53:e3:53:52:ce:c7:81:
                    c8:9a:5b:e0:5f:51:22:aa:17:98:25:de:6e:89:fd:
                    dc:ac:1b:cf:3c:a2:d1:e5:d3:9a:cd:01:8e:d8:f0:
                    29:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:06:24:96:69:1C:6D:FC:E3:9B:3B:4D:53:6D:46:F8:2F:D1:93:4E
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e34362e302f32342d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:e7:2f:c8:8e:36:02:c3:27:a7:13:4c:46:db:16:35:b9:11:
         b1:80:ee:15:f6:39:75:1d:b0:a0:9e:61:f2:04:90:db:e3:c5:
         c2:7d:33:a3:6d:45:27:76:24:73:5a:fb:46:ed:ef:16:25:fc:
         6d:48:0b:af:a2:47:ad:f5:d8:80:64:74:ac:38:9f:08:98:40:
         2f:c9:28:69:ef:0a:b2:fe:0b:78:6c:be:8c:e7:32:e5:7d:69:
         39:48:7c:70:bf:ca:f4:30:f6:0f:71:03:24:74:eb:e2:52:71:
         d6:ec:24:8d:1b:c8:00:ac:f7:67:06:92:5e:c7:c3:c2:ef:9d:
         4b:60:62:49:92:31:6f:92:d8:54:42:dd:ac:c1:3f:88:4d:98:
         94:5b:c1:8a:3e:d8:2d:e4:2a:bb:60:b8:33:33:60:d1:d1:4b:
         05:f2:5f:60:92:8c:f0:cc:34:d6:a4:79:d0:51:dc:f2:b3:ec:
         e7:79:2a:6e:85:3d:52:f8:a0:06:59:9d:b9:6c:72:43:cf:a0:
         f0:dc:5c:25:df:f3:50:0e:a3:a2:a4:3a:15:ad:c7:2e:92:38:
         ae:aa:ef:4d:9a:5e:9f:ef:ca:b5:47:8b:13:d0:2e:52:2e:a3:
         b6:09:8e:ab:b5:fc:78:b6:27:03:2d:4f:52:99:46:54:50:b1:
         34:fd:07:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----