Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3234382e302f32312d3234203d3e203133393939.roa
File:                     3230302e39322e3234382e302f32312d3234203d3e203133393939.roa (raw, json)
Hash identifier:          k/aNPilIRYQtLhTdbpfIGJn7k76pZ16nddNfu/bo5cg=
Subject key identifier:   A9:98:DF:4B:D7:06:32:EF:91:37:AB:A6:A8:E2:92:E3:51:9D:30:76
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       5028452383EC0D45A332A8CE531A871DD73C9AC4
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3234382e302f32312d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:11 +0000
ROA not before:           Thu 23 May 2024 04:25:11 +0000
ROA not after:            Thu 22 May 2025 04:30:11 +0000
asID:                     13999
IP address blocks:        200.92.248.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:28:45:23:83:ec:0d:45:a3:32:a8:ce:53:1a:87:1d:d7:3c:9a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:11 2024 GMT
            Not After : May 22 04:30:11 2025 GMT
        Subject: CN=A998DF4BD70632EF9137ABA6A8E292E3519D3076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:c0:5e:2b:a5:a3:9a:67:f4:9b:0a:f3:40:
                    e2:ab:0f:1b:06:56:73:7f:db:87:96:9c:a3:40:86:
                    c8:8a:c2:a5:94:8c:96:a7:97:3c:f1:d6:6d:3c:62:
                    43:8e:82:76:81:af:da:fe:0a:78:45:36:30:92:75:
                    85:f9:fa:6c:cb:f6:b1:c1:f1:3c:7c:0e:4d:90:04:
                    83:9b:1b:de:6c:ba:d3:5a:77:19:ff:db:50:21:66:
                    8e:78:d7:d9:e3:da:cf:7c:69:8d:7b:49:83:4d:a5:
                    d3:c2:f2:6b:44:4c:44:06:2d:6f:79:99:bc:df:b7:
                    e3:5a:e5:45:61:3b:0d:19:71:18:2f:a5:d5:ba:51:
                    48:91:88:34:c4:da:9a:af:0c:1d:27:0c:d7:e8:31:
                    50:93:98:f9:a2:1a:35:2a:cd:7b:6d:be:37:95:0f:
                    fe:c3:fc:4c:49:7e:ba:86:f7:81:d0:6d:b4:3d:07:
                    de:cb:22:61:46:68:84:4d:4e:36:b7:ae:d3:aa:86:
                    ee:78:b6:e3:cd:39:2a:7f:8a:aa:6b:1a:3e:12:e5:
                    92:96:cc:7b:33:6f:f4:2d:6a:55:e6:74:1a:36:dc:
                    05:fc:86:54:78:8d:38:14:e7:cc:d2:ee:81:63:5c:
                    e6:7d:f9:4d:4c:2d:54:3e:72:dc:2b:bc:ca:95:9b:
                    c3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:98:DF:4B:D7:06:32:EF:91:37:AB:A6:A8:E2:92:E3:51:9D:30:76
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3234382e302f32312d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:e6:ed:a4:c6:fe:63:35:cc:b8:20:4a:89:5e:a8:6d:ab:b2:
         0b:60:49:97:a4:42:e1:57:36:a8:2f:de:4e:4f:e4:71:eb:0a:
         a6:f0:36:73:79:96:2b:55:60:f9:c1:6a:35:64:6f:3c:1f:b0:
         98:0c:ea:0b:b9:37:d2:b7:d6:6a:55:67:4c:aa:19:a4:77:2f:
         25:dc:8b:87:86:e8:98:b3:c4:f9:13:20:5b:36:08:c8:bd:5e:
         a2:2f:62:7a:b0:c0:d2:89:44:9a:b4:fc:26:78:d0:7c:80:3f:
         78:c1:f1:41:97:77:ac:8b:48:06:df:91:97:2e:f7:dc:e7:14:
         46:b0:93:d2:b5:5f:5d:64:6d:21:02:c0:be:87:38:b3:d8:69:
         95:5c:1d:b1:af:5e:ad:6f:5a:62:41:fb:fd:95:4c:96:37:80:
         97:59:3e:fd:94:04:a4:03:1a:88:f9:fe:dc:56:47:98:24:ba:
         3b:20:ad:82:2a:83:50:61:3c:72:b3:ab:05:2e:bd:87:4d:f6:
         94:ab:ee:3b:c8:52:cb:b7:1b:71:08:3d:98:1a:52:2d:82:02:
         58:5f:02:08:7f:11:ab:17:02:fb:9b:6f:6d:7e:93:6c:96:5a:
         0e:0e:21:dd:f4:a6:60:6a:b0:58:03:6b:6f:90:d3:7b:f3:bf:
         42:12:7b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----