Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3231362e302f32322d3232203d3e203133393939.roa
File:                     3230302e39322e3231362e302f32322d3232203d3e203133393939.roa (raw, json)
Hash identifier:          iTtjcsoU37APC32ISn/E1Fln9tbg1xkKmxiEskRQbGg=
Subject key identifier:   E4:D0:14:AE:F8:CC:8C:42:EA:1B:9F:F2:D8:01:5A:9C:BC:21:F0:C0
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       7A0F295230D728B545192D8E93DA598D019085CE
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3231362e302f32322d3232203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:12 +0000
ROA not before:           Thu 23 May 2024 04:25:12 +0000
ROA not after:            Thu 22 May 2025 04:30:12 +0000
asID:                     13999
IP address blocks:        200.92.216.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:0f:29:52:30:d7:28:b5:45:19:2d:8e:93:da:59:8d:01:90:85:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:12 2024 GMT
            Not After : May 22 04:30:12 2025 GMT
        Subject: CN=E4D014AEF8CC8C42EA1B9FF2D8015A9CBC21F0C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:e7:cc:6d:a0:93:14:ea:d4:04:2b:3c:a6:
                    b5:61:d1:3e:b9:3c:02:00:a0:bd:cd:15:b9:1e:aa:
                    8f:9e:7a:4c:39:02:ab:87:dd:97:32:ae:9a:34:ae:
                    ca:8f:e4:a8:f2:27:6d:24:57:a5:5c:93:66:9f:18:
                    48:bc:0e:06:0b:05:1a:34:31:51:c8:ab:bf:2e:c0:
                    f9:f2:5f:93:a7:2b:b3:63:18:a5:5e:6d:77:94:2c:
                    b2:91:91:26:31:c2:b7:a0:eb:39:a5:e1:4a:2c:41:
                    e9:99:7e:a9:4b:99:25:d2:0d:69:fa:d2:4b:fc:01:
                    4d:c4:f6:04:e6:f8:41:d7:0d:af:ed:2d:27:d7:04:
                    8f:98:0b:df:45:f7:f7:bc:3e:cf:80:08:79:bc:bd:
                    5e:02:db:18:22:54:a1:48:4d:1b:24:58:51:b4:f3:
                    dc:4b:35:d2:58:4a:9b:89:fa:8c:4e:7a:8e:d6:c5:
                    6b:83:10:69:b6:f0:7f:fc:d3:b0:74:be:07:81:10:
                    dc:ca:c6:be:10:75:39:55:f7:62:c8:16:b4:bb:88:
                    c0:f5:d4:72:6b:06:6f:56:09:3c:e5:0e:3c:b2:d5:
                    94:18:6c:d7:70:b6:79:0f:fb:cb:53:93:44:ae:55:
                    87:18:77:a2:a6:94:f1:ea:28:77:e4:55:15:f3:cb:
                    fc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D0:14:AE:F8:CC:8C:42:EA:1B:9F:F2:D8:01:5A:9C:BC:21:F0:C0
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3231362e302f32322d3232203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:05:02:92:b7:0a:39:07:85:05:c6:99:5f:45:4b:c3:04:82:
         1a:9c:59:8a:69:11:85:2f:29:df:21:97:e6:ce:44:c4:af:46:
         1b:2a:b4:a8:a5:60:38:f0:03:94:41:a1:e3:d4:54:33:9b:28:
         0e:fe:11:8f:50:67:de:0e:4b:32:34:69:69:e1:3d:ba:4b:e4:
         a7:c3:06:30:6a:3e:03:68:fe:fd:4f:3d:a7:47:ea:a5:4f:c7:
         6d:2e:c7:0a:41:b2:5f:5d:1e:47:0e:a2:16:ff:3e:3c:37:7a:
         37:56:d3:f9:78:10:b2:56:86:63:73:41:35:14:00:1c:bb:be:
         24:94:16:b0:76:fb:c4:02:da:1d:2d:d8:7e:46:e2:21:35:44:
         4a:1d:ce:cc:6e:92:e6:19:17:51:89:e6:36:33:de:0b:02:c5:
         d3:ec:08:c5:94:f5:21:55:c2:ef:4b:de:a6:2b:f5:6c:27:a2:
         cd:fd:bb:4f:79:b1:e6:40:34:1e:80:0b:23:a8:62:68:2c:5a:
         bf:69:80:e0:51:cc:7a:4b:4a:98:ef:f6:ec:db:f9:74:93:30:
         ea:81:38:79:61:aa:4e:13:de:01:69:34:33:18:aa:92:9f:7f:
         6b:b0:09:48:c2:1d:9a:d6:ec:cd:0b:63:9f:ec:29:38:fc:a9:
         45:87:e2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----