Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3233362e302f32332d3234203d3e203238343831.roa
File:                     3230302e39342e3233362e302f32332d3234203d3e203238343831.roa (raw, json)
Hash identifier:          IZehzphBMG0eJ8eprnYcT/D/qMcDs4QukwU7yB0KHJc=
Subject key identifier:   C7:80:5F:A4:1F:77:40:E9:E7:3E:56:3C:5E:30:6D:09:8B:F5:47:78
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       6853580F24993039B48F6DA03EEE5732585555EE
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3233362e302f32332d3234203d3e203238343831.roa
Signing time:             Thu 25 Apr 2024 05:45:00 +0000
ROA not before:           Thu 25 Apr 2024 05:40:00 +0000
ROA not after:            Thu 24 Apr 2025 05:45:00 +0000
asID:                     28481
IP address blocks:        200.94.236.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:53:58:0f:24:99:30:39:b4:8f:6d:a0:3e:ee:57:32:58:55:55:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: Apr 25 05:40:00 2024 GMT
            Not After : Apr 24 05:45:00 2025 GMT
        Subject: CN=C7805FA41F7740E9E73E563C5E306D098BF54778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:78:dd:02:53:0b:15:44:2d:30:ac:fd:64:13:
                    66:09:0d:46:5a:a4:7c:08:a2:6c:97:b6:c8:74:dc:
                    c8:31:3b:be:2a:fe:f4:70:22:32:7a:b3:76:7c:5a:
                    81:c4:5f:71:7d:ec:c3:33:51:3a:cc:54:92:20:fc:
                    75:69:ab:95:67:66:1b:27:3f:d3:07:b3:d8:4f:7c:
                    68:11:5d:9b:c6:ca:52:13:2b:c5:65:df:7d:48:14:
                    7d:84:4e:ed:5c:23:c8:35:78:93:a9:fe:47:ad:a3:
                    c0:42:ca:e8:f9:9a:b6:dc:93:31:a7:fc:3a:0b:6a:
                    c6:89:30:23:07:90:a0:a6:89:77:20:44:76:f7:c8:
                    dd:e7:60:6d:26:69:1a:eb:96:47:05:7a:96:92:2d:
                    8e:24:a4:42:47:52:8d:fd:85:f7:8c:6e:4b:06:86:
                    4f:f1:a3:43:77:15:b9:4b:a7:dc:a7:39:4f:f8:bc:
                    db:8f:28:71:54:ce:f0:40:d2:18:37:db:e4:45:67:
                    27:dc:74:a1:00:df:cc:9e:c4:f4:4d:dd:51:be:e1:
                    10:87:3e:58:c3:71:ae:bc:27:67:76:b5:d9:59:fd:
                    b1:98:bb:1a:39:bf:13:e3:dc:fd:2b:32:7f:a9:38:
                    ff:67:86:5b:53:7e:9d:c9:d3:c2:38:4e:20:09:ce:
                    95:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:80:5F:A4:1F:77:40:E9:E7:3E:56:3C:5E:30:6D:09:8B:F5:47:78
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3233362e302f32332d3234203d3e203238343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:9e:0c:bc:58:bf:68:22:52:54:f2:45:26:14:7e:42:db:c7:
         70:ea:e0:71:4a:00:59:7b:4e:5f:e6:a9:4d:3f:3b:c5:33:e7:
         5c:a4:f5:0f:a5:26:1d:41:a8:0e:a4:0e:15:d7:19:4c:85:ee:
         62:f1:bd:da:c7:b1:5a:49:40:9a:f4:5f:7d:f3:97:4a:3a:f5:
         63:b5:ab:a7:c6:b6:ef:73:91:43:9b:7f:28:c6:2f:f7:9b:ef:
         1d:df:8a:41:52:e9:c4:1f:27:7d:28:90:3f:30:dc:ce:c5:3f:
         4f:e5:0c:d8:02:a0:87:23:82:8a:b1:b4:01:4f:a1:2e:f2:d4:
         37:3c:84:0b:91:65:da:0b:71:ac:62:c4:06:1b:17:f3:1b:34:
         84:27:06:a1:cf:1f:89:76:37:d9:71:59:77:8a:9b:3c:f1:51:
         4e:ce:5c:8e:d0:e4:73:ae:17:b4:52:d2:66:2c:cf:e9:31:8a:
         99:31:81:10:f1:c8:9d:bb:12:97:35:25:9b:4c:e5:02:5e:88:
         19:04:e4:b7:62:dd:79:d0:b2:90:7b:98:cb:4a:07:7c:0e:67:
         e6:0d:7c:ab:78:50:f2:06:ca:da:e9:f3:8c:09:87:e2:9a:8f:
         51:85:b1:9b:dc:52:d4:f5:70:47:a5:3a:6a:e0:52:85:1e:99:
         32:9a:f2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----