Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3233322e302f32322d3232203d3e203238343831.roa
File:                     3230302e39322e3233322e302f32322d3232203d3e203238343831.roa (raw, json)
Hash identifier:          olvuEA13Klb32d6fXz7utqlMrpVJNiLz8jXe8Dszy8A=
Subject key identifier:   F2:DB:18:5B:DE:4E:3E:57:19:BB:90:26:20:16:B1:FF:E1:38:0F:BF
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       2F5A8069A79363AC503F9CFD26AA5B1DE9CCA462
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3233322e302f32322d3232203d3e203238343831.roa
Signing time:             Thu 23 May 2024 04:30:03 +0000
ROA not before:           Thu 23 May 2024 04:25:03 +0000
ROA not after:            Thu 22 May 2025 04:30:03 +0000
asID:                     28481
IP address blocks:        200.92.232.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5a:80:69:a7:93:63:ac:50:3f:9c:fd:26:aa:5b:1d:e9:cc:a4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:03 2024 GMT
            Not After : May 22 04:30:03 2025 GMT
        Subject: CN=F2DB185BDE4E3E5719BB90262016B1FFE1380FBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:82:87:00:e6:41:29:bb:b1:1f:89:40:69:
                    90:d2:97:8b:f7:36:f8:06:18:21:17:5e:81:a2:99:
                    e2:b1:5e:2b:98:5e:ed:d9:f4:65:3d:24:2c:99:bb:
                    ae:76:54:94:de:56:40:a3:a6:a1:df:2c:8c:89:0a:
                    69:2d:66:58:47:77:9e:7d:22:fb:e7:e3:26:6f:3a:
                    2b:f5:b8:9f:d2:ed:cf:ab:fc:05:c3:a2:a0:b7:66:
                    33:8e:75:ac:aa:b5:59:7a:72:2f:1b:ca:40:a4:71:
                    23:a1:b2:e1:3c:87:1f:e7:7f:fd:83:83:89:7a:ca:
                    7b:e1:71:84:12:89:29:fa:fd:4d:1f:d0:cb:d5:99:
                    ee:ea:2f:41:95:55:32:60:1b:9f:25:2d:2e:39:df:
                    2f:f1:f3:11:49:70:a3:38:2f:2a:23:a2:8e:3c:ca:
                    e2:0f:20:a3:35:52:62:ec:99:9f:5a:9b:08:aa:f0:
                    65:db:db:e2:b8:81:46:27:11:ba:96:48:03:8a:04:
                    3e:56:45:c1:ff:9a:4d:a2:f5:dc:74:e0:19:f4:08:
                    bd:b4:e2:cc:3f:c3:18:30:f6:79:f4:f0:fc:2f:b9:
                    e7:b7:a2:0d:38:6a:47:c9:71:f9:f9:e5:7d:15:47:
                    76:6e:5c:4f:57:d0:f4:4c:55:fd:22:3f:1f:f1:19:
                    6a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DB:18:5B:DE:4E:3E:57:19:BB:90:26:20:16:B1:FF:E1:38:0F:BF
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3233322e302f32322d3232203d3e203238343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:1a:d1:88:12:5e:e8:6d:e8:17:4a:86:f1:1f:95:7c:88:63:
         ea:de:54:63:f9:25:00:e4:79:a8:a0:f9:63:ac:f3:e5:ee:61:
         f7:8c:d5:bd:8b:5d:5c:9a:6c:f9:8e:d3:06:34:05:80:97:9f:
         c1:3f:e5:84:6f:53:4d:33:ab:90:9a:30:ea:90:c8:cc:5e:a3:
         a5:fd:32:db:89:1e:a5:96:ab:6b:26:dd:7a:a5:ab:55:13:b9:
         bc:dd:06:23:76:18:54:f7:19:ae:dc:69:dc:fb:4f:b6:63:eb:
         48:b0:9e:cb:fc:37:bd:13:c1:03:e2:23:94:e2:f3:11:89:36:
         d2:3e:bc:5c:bf:4a:34:8d:d9:2d:28:f3:7d:c4:a7:64:6f:13:
         e0:7e:12:02:e9:a9:33:b0:a9:0f:6a:8c:f8:b2:02:4c:91:ca:
         50:1d:66:8d:4a:1b:25:87:9a:7d:94:10:a4:85:25:c7:7b:00:
         16:a7:cf:80:70:26:32:04:0c:42:2e:60:13:82:9e:1c:f3:0c:
         65:55:28:49:2e:68:ca:17:ba:70:4a:c7:bc:fc:17:e0:5e:57:
         20:6c:d7:a7:5e:42:1b:dc:62:ba:ac:3a:f7:0f:7f:f7:2b:4c:
         c5:23:29:d0:7a:74:08:41:99:92:15:24:4f:5a:9f:cb:6a:9f:
         46:30:73:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----