Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3132392e302f32342d3234203d3e20323632393136.roa
File:                     3230302e39322e3132392e302f32342d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          jreaGJFzh0KA8fXWInyWHhVNJjYfjrqiXbOt/qYVtYA=
Subject key identifier:   83:EC:13:4D:C1:F2:14:A7:4D:84:13:9E:54:65:01:95:62:0F:AB:31
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       2D04E5FA56CEDB07989249496DECD84A643415FF
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3132392e302f32342d3234203d3e20323632393136.roa
Signing time:             Thu 23 May 2024 04:30:10 +0000
ROA not before:           Thu 23 May 2024 04:25:10 +0000
ROA not after:            Thu 22 May 2025 04:30:10 +0000
asID:                     262916
IP address blocks:        200.92.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:04:e5:fa:56:ce:db:07:98:92:49:49:6d:ec:d8:4a:64:34:15:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:10 2024 GMT
            Not After : May 22 04:30:10 2025 GMT
        Subject: CN=83EC134DC1F214A74D84139E54650195620FAB31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d5:1a:6c:cd:64:eb:c0:dd:96:5b:95:05:28:
                    14:85:75:18:f2:09:3a:cd:18:4a:d4:f0:99:a1:43:
                    3c:3b:1a:71:70:37:23:85:b9:dd:99:b3:b6:4b:57:
                    18:a6:dd:5f:9f:5f:44:b2:f8:8b:2f:8a:fe:80:a6:
                    4b:3f:3a:91:67:42:45:31:52:40:aa:14:df:49:67:
                    f2:00:68:04:b3:d4:03:c9:6f:24:93:27:86:1f:1b:
                    23:45:bd:82:10:78:3a:c9:4b:f2:40:91:8e:1b:d5:
                    16:cf:47:ec:37:ff:02:6a:78:a5:c1:44:3a:34:06:
                    14:d5:73:67:61:7d:17:6f:db:3c:42:cc:89:4a:5e:
                    dc:05:dc:67:ae:4e:c0:00:2a:c0:15:20:fa:80:c6:
                    01:ed:ca:12:08:a9:4d:6a:7c:05:63:53:29:f4:20:
                    18:8e:a4:c0:71:3c:25:3a:32:9b:c8:27:41:2c:48:
                    ff:5d:90:c7:6e:92:eb:fe:dd:3e:63:58:b3:b4:93:
                    7f:eb:9b:5f:87:0a:9a:eb:8e:b2:f2:d5:22:7f:80:
                    fe:f2:b1:42:76:68:ba:60:ca:4e:5d:ef:87:87:68:
                    3b:53:55:38:16:62:b3:f3:26:d9:c4:23:6f:a9:a6:
                    c5:3e:8d:2d:23:af:e4:52:2d:b1:38:3e:36:27:04:
                    a1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EC:13:4D:C1:F2:14:A7:4D:84:13:9E:54:65:01:95:62:0F:AB:31
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3132392e302f32342d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:76:96:c9:84:95:5e:2d:d5:c5:8e:f5:2c:f5:f8:29:88:7f:
         fb:6c:c1:27:4b:71:4a:d9:9f:fb:e4:7f:33:ce:46:34:64:ca:
         00:49:da:f7:a3:6c:db:fd:db:bb:93:fd:af:0d:fb:84:d2:6c:
         5b:c9:b7:cb:3e:ed:5d:fc:e1:cf:7c:1f:24:8a:14:08:58:ba:
         b5:f3:b3:e8:06:9b:22:05:96:22:b7:1f:6a:c9:2e:76:8e:9d:
         15:31:ad:94:fb:69:31:7c:10:7e:29:97:5e:d1:14:d1:37:3a:
         78:13:75:86:3b:81:70:4b:64:0e:08:41:14:6d:54:68:9a:60:
         17:86:c0:a4:d4:93:b7:dc:6b:ed:5f:9b:25:33:0f:dd:de:ce:
         e7:2b:eb:74:4e:b3:dc:a1:dd:2a:4e:ff:f1:4f:50:6d:2e:48:
         01:44:c2:df:cf:88:9a:d0:d2:5d:fd:bb:1b:8b:14:86:af:a7:
         8f:5b:2a:1a:28:37:4d:4b:b9:02:0b:44:02:b3:3a:33:f0:fc:
         b8:49:e5:ce:ef:fe:18:6d:48:97:de:64:ec:ff:8a:21:e6:1c:
         ca:05:60:a3:2e:04:11:3a:a5:a2:0a:94:ae:f2:b0:e3:36:3a:
         c7:8a:c5:4f:d4:65:c4:76:37:25:19:59:90:58:27:ea:af:4e:
         20:47:b2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----