Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3233322e302f32332d3233203d3e203238343831.roa
File:                     3230302e39342e3233322e302f32332d3233203d3e203238343831.roa (raw, json)
Hash identifier:          e2L/GmZENUKWS+/Sa7MJ4f/t6rrWNvq8GMQ1gRputmQ=
Subject key identifier:   C7:4A:31:29:0B:C1:5F:40:81:C8:67:45:10:94:D4:D0:59:D3:C5:A1
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       44C69D1F8AA62ED186CA3C4BEE384C4B044ABB79
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3233322e302f32332d3233203d3e203238343831.roa
Signing time:             Thu 25 Apr 2024 05:45:00 +0000
ROA not before:           Thu 25 Apr 2024 05:40:00 +0000
ROA not after:            Thu 24 Apr 2025 05:45:00 +0000
asID:                     28481
IP address blocks:        200.94.232.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c6:9d:1f:8a:a6:2e:d1:86:ca:3c:4b:ee:38:4c:4b:04:4a:bb:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: Apr 25 05:40:00 2024 GMT
            Not After : Apr 24 05:45:00 2025 GMT
        Subject: CN=C74A31290BC15F4081C867451094D4D059D3C5A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2b:1e:47:c7:6e:03:7c:9f:13:88:d3:4f:6a:
                    ff:a2:c5:05:bf:f5:47:7d:a9:e5:64:84:f2:b4:e6:
                    3c:2e:92:23:60:76:ec:ed:ff:3c:26:78:6e:5b:7b:
                    87:10:f2:67:98:e7:75:dd:2c:da:3e:0c:19:b6:a6:
                    f5:dc:98:c0:f9:c7:49:72:d0:65:c6:df:c9:7a:e2:
                    85:db:3c:cc:8c:02:0e:7f:d9:d2:96:d3:7e:44:76:
                    5d:d8:e0:8b:de:b6:5e:8f:22:2a:a9:f8:5a:7c:b4:
                    a3:26:5c:16:12:74:fc:eb:8a:88:d6:21:08:61:7a:
                    25:0b:52:3c:2d:ad:40:e2:53:8c:d7:32:9a:e1:e7:
                    2a:6b:65:11:cc:63:9b:90:f4:e6:69:f1:3b:80:9c:
                    be:5c:21:81:99:a5:1f:4c:6b:4d:aa:43:eb:25:f1:
                    85:5f:fb:19:cf:41:38:b4:b6:c1:97:e9:b5:56:b2:
                    c9:b4:a6:ba:6c:d9:31:7e:a4:bf:ba:a6:2d:e5:dd:
                    42:85:27:e5:6d:93:4a:1b:5d:5b:29:8b:4a:84:fb:
                    46:85:2b:9c:74:da:f8:ae:ae:0f:e8:a3:9e:27:93:
                    a4:3e:5d:e6:05:1b:23:f0:2c:56:81:fb:4b:77:b1:
                    ed:0d:a7:76:60:f5:6f:26:0d:3c:9d:b3:3d:2a:66:
                    07:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4A:31:29:0B:C1:5F:40:81:C8:67:45:10:94:D4:D0:59:D3:C5:A1
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3233322e302f32332d3233203d3e203238343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:db:8e:b9:92:14:20:2d:81:c1:38:23:e8:2b:b5:b2:23:cc:
         80:35:ce:87:d5:83:19:82:80:eb:fc:45:c4:c8:ba:30:cf:c6:
         18:af:17:cc:11:b5:4c:b3:ba:48:a5:99:d5:ed:1d:f2:65:a6:
         ef:45:f7:fb:f5:1c:bc:1a:c7:2a:48:88:a4:c6:91:3f:7b:ad:
         3a:ad:e3:c1:69:85:e0:af:71:36:6a:d9:b8:4a:4b:35:43:42:
         81:0c:ae:55:35:b2:ae:38:79:a3:25:05:0d:cb:7c:a9:ed:04:
         10:f9:97:3f:58:45:d1:3e:d7:35:8f:e8:75:a2:14:1e:61:f2:
         83:cf:2a:b8:58:70:c4:66:cc:16:d8:05:b7:d5:40:57:34:4a:
         5f:7f:28:59:f2:25:07:17:90:b8:fd:fa:0c:0e:3f:92:f1:5a:
         7c:a0:59:96:a1:3e:36:14:d1:33:8b:d6:04:17:5e:2c:67:33:
         f7:41:48:25:39:0e:e5:04:49:86:3c:33:1c:23:8b:32:47:e7:
         0d:56:66:b2:cf:c8:68:ee:a9:e4:43:71:f5:3f:54:d0:c8:d4:
         17:e5:68:6e:a4:5a:07:c5:cc:42:d3:b5:ba:fd:02:a4:e9:2f:
         0b:f8:36:9a:37:f0:14:21:cc:f7:c0:29:e6:23:5d:8a:ce:8d:
         10:03:52:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----