Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3234302e302f32332d3234203d3e203133393939.roa
File:                     3230302e39322e3234302e302f32332d3234203d3e203133393939.roa (raw, json)
Hash identifier:          sIpEcPg/uRVh6kN0IvrXmzAjrQP1f7ycB2S4mNgtEMc=
Subject key identifier:   39:70:84:0F:08:7A:8B:38:68:47:C7:E7:AB:65:48:69:37:25:F8:5F
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       4DF225D0C6760AC0AE3B7927641790EE53641CC5
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3234302e302f32332d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:17 +0000
ROA not before:           Thu 23 May 2024 04:25:17 +0000
ROA not after:            Thu 22 May 2025 04:30:17 +0000
asID:                     13999
IP address blocks:        200.92.240.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f2:25:d0:c6:76:0a:c0:ae:3b:79:27:64:17:90:ee:53:64:1c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:17 2024 GMT
            Not After : May 22 04:30:17 2025 GMT
        Subject: CN=3970840F087A8B386847C7E7AB6548693725F85F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f3:f3:91:9a:ef:44:f9:35:72:57:a0:db:2c:
                    6c:d2:f4:87:25:a8:87:26:15:39:89:c4:83:a5:92:
                    12:25:28:6b:a6:c3:ad:fe:d9:02:46:80:0b:22:dc:
                    92:d7:57:bc:25:86:10:ea:01:ae:64:69:e5:73:07:
                    c5:d1:83:3e:00:49:7b:8f:8f:28:61:bb:9c:01:39:
                    5a:9b:6f:00:27:12:22:b2:dd:43:32:5d:4f:34:8b:
                    a0:e7:b3:77:5f:3b:34:69:c9:8f:c9:a4:ca:c5:2d:
                    85:9b:e9:3b:29:ce:fa:58:30:ad:87:e2:15:bd:a6:
                    cb:11:40:8d:da:9d:d3:5b:f7:4b:5c:80:44:53:23:
                    cb:21:33:b1:db:46:46:8c:fe:9c:b7:fc:93:06:bc:
                    68:54:ed:bd:88:d8:24:95:57:12:ac:34:31:7a:53:
                    f6:db:ee:6f:80:84:55:b1:ce:30:15:54:5e:94:d8:
                    8f:1a:13:15:a7:b0:8b:2d:e1:7c:aa:b6:cf:da:4b:
                    2a:77:48:06:fa:f7:f6:5b:b2:c1:49:7d:7a:51:04:
                    59:6d:d2:42:8e:69:3f:51:9e:18:83:46:f1:cf:fb:
                    fe:12:f3:02:76:82:ab:0c:d2:2a:04:69:84:d5:a6:
                    38:45:d9:9f:76:c1:56:c8:03:42:4f:63:a0:d6:69:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:70:84:0F:08:7A:8B:38:68:47:C7:E7:AB:65:48:69:37:25:F8:5F
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3234302e302f32332d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:5e:77:a7:38:d4:2c:44:7c:9f:5b:ac:53:a0:0c:a7:22:75:
         9c:2a:db:28:a9:29:b6:f5:26:83:2f:83:88:e1:2f:c4:c9:5b:
         a0:20:70:7b:5e:93:36:6a:0c:16:cb:da:36:d5:39:0e:28:ba:
         fb:7b:e5:2c:c2:f3:42:ca:6d:ba:7b:d8:6c:1b:e5:ea:de:19:
         a6:90:f7:18:b8:fa:4d:6c:36:c7:38:cd:95:a4:ac:8a:b1:5b:
         13:ae:65:24:89:5c:19:45:25:93:84:53:58:99:aa:3f:62:42:
         47:fa:9d:65:d0:cc:01:f0:d9:84:7a:15:39:5d:ca:a8:ed:9b:
         d6:c7:b3:e1:25:da:ba:e4:3d:f6:b0:2b:32:ef:e5:6a:2a:d6:
         f8:36:ad:e1:c4:47:3c:29:02:0b:67:08:90:6e:e6:d4:fb:1f:
         7e:5c:fe:a1:6a:2f:e6:ac:cc:c9:42:29:40:ec:cb:e9:7c:29:
         f0:f2:1f:f4:88:fc:5a:8c:b9:04:fa:ad:7d:e4:2a:95:62:54:
         b7:ba:c9:75:87:3b:13:3d:c0:f2:d4:4a:06:5e:fb:be:bc:a8:
         ba:11:49:92:b9:90:5d:6b:79:b3:ce:60:4e:7d:fa:9e:43:1f:
         00:e1:e9:1d:8f:f7:91:da:19:7c:64:68:93:29:b6:7c:b4:cd:
         72:1d:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----