Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3234342e302f32322d3234203d3e203133393939.roa
File:                     3230302e39322e3234342e302f32322d3234203d3e203133393939.roa (raw, json)
Hash identifier:          5SmezQeVSn4qv9XY832HvxRb6Pl/LhToYYDvkboFzwo=
Subject key identifier:   F2:11:B8:67:2D:9B:9C:FE:B3:CA:A5:86:71:19:E3:B4:9D:89:D7:1C
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       351DFBB3FF44CB7BEE3CE6883B0D014FB2ADF1FF
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3234342e302f32322d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:11 +0000
ROA not before:           Thu 23 May 2024 04:25:11 +0000
ROA not after:            Thu 22 May 2025 04:30:11 +0000
asID:                     13999
IP address blocks:        200.92.244.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1d:fb:b3:ff:44:cb:7b:ee:3c:e6:88:3b:0d:01:4f:b2:ad:f1:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:11 2024 GMT
            Not After : May 22 04:30:11 2025 GMT
        Subject: CN=F211B8672D9B9CFEB3CAA5867119E3B49D89D71C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:be:8f:7f:d0:7c:86:15:bd:07:99:07:26:93:
                    92:e8:9b:f7:9e:33:06:df:25:31:72:6b:bc:70:92:
                    33:82:70:35:ab:c0:61:78:18:04:e8:ee:ce:da:12:
                    28:be:67:e7:02:cb:f1:a1:1c:dc:64:ed:42:6a:ab:
                    ed:ea:89:7d:83:25:2e:06:3f:a9:b8:c7:98:f3:4f:
                    cc:12:4e:04:67:0f:4f:8e:ae:16:21:b0:44:0c:74:
                    e6:62:09:5f:b6:d5:3d:b6:1a:8c:e2:44:e8:53:ef:
                    1b:e9:59:e5:f6:e1:49:79:15:f3:e5:d8:f5:1c:84:
                    c2:64:00:8d:2d:2e:1f:2e:d9:0e:2a:ac:e8:d5:cc:
                    55:85:87:4a:2f:3f:99:4e:4d:51:7e:74:89:39:a7:
                    a1:49:9a:e3:77:53:75:40:3c:4b:f9:a3:18:b2:dd:
                    41:d8:2c:ec:21:90:05:36:be:5c:ab:26:c0:43:f1:
                    e4:0a:82:f9:33:56:f2:24:13:cd:f2:3c:0d:0d:6a:
                    1d:e6:d1:d7:70:ed:fd:f9:6e:92:14:8f:e1:d3:93:
                    0b:f7:94:2c:8a:69:07:58:7a:10:ce:d4:4f:6b:43:
                    d5:f0:a7:d8:71:08:58:b5:55:3d:93:22:86:1f:2a:
                    09:54:9d:47:33:e7:ed:25:a9:07:e2:2b:5a:40:54:
                    36:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:11:B8:67:2D:9B:9C:FE:B3:CA:A5:86:71:19:E3:B4:9D:89:D7:1C
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3234342e302f32322d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:a7:98:6f:da:b5:4d:b4:ae:ee:4d:3a:9d:77:4d:c3:47:a2:
         b5:2e:16:90:77:f1:e0:51:50:cc:ac:21:4b:4f:f7:a0:77:a5:
         4a:2a:62:59:de:e2:de:e6:09:27:46:ec:25:08:a8:46:d0:da:
         0c:79:ab:3c:fe:fd:46:ec:1f:87:e3:21:c8:c6:cf:b3:b4:87:
         39:f1:83:22:3a:2b:ab:ea:50:ec:ef:6e:6f:dc:40:80:eb:1e:
         6e:0f:d5:ce:06:15:64:24:d6:28:dd:13:75:10:10:f6:bf:bc:
         13:f3:0d:0f:5d:a1:a2:16:62:ab:0d:6f:1b:70:7f:18:be:fb:
         47:1e:f5:d4:2f:b4:12:18:9f:17:40:ad:c8:a5:ef:e7:57:1a:
         80:00:6b:10:a2:21:c6:3d:88:8b:9d:46:42:09:a0:92:14:6d:
         42:cb:23:60:6a:68:84:70:cf:3e:65:9f:75:09:7c:a4:17:7b:
         99:35:d1:b6:05:3c:78:7d:5b:ab:90:c7:a8:0a:c6:d7:19:0e:
         5d:2e:8b:be:a4:ba:71:22:a2:55:1d:0c:17:0e:b0:93:03:09:
         53:97:71:9a:bf:ab:0c:9d:6d:72:50:33:3a:e7:4d:09:2a:de:
         a2:13:0d:10:8b:88:4c:09:81:e7:f3:27:8a:ef:87:46:4a:c6:
         19:90:0d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----