Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139312e302f32342d3234203d3e20323730313134.roa
File:                     3230302e32362e3139312e302f32342d3234203d3e20323730313134.roa (raw, json)
Hash identifier:          UJMPPWMK6LXxUYSX4Vj+Pyg1IWTfOBBzptkj/XNsrxc=
Subject key identifier:   40:3A:B0:AF:5D:78:87:B8:35:71:D1:31:B8:F5:CD:13:41:AD:6D:4C
Certificate issuer:       /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Certificate serial:       47CEC115599FBEAC1708CEF704612455B6484F86
Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139312e302f32342d3234203d3e20323730313134.roa
Signing time:             Wed 24 Apr 2024 11:55:00 +0000
ROA not before:           Wed 24 Apr 2024 11:50:00 +0000
ROA not after:            Wed 23 Apr 2025 11:55:00 +0000
asID:                     270114
IP address blocks:        200.26.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 25 Nov 2024 13:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ce:c1:15:59:9f:be:ac:17:08:ce:f7:04:61:24:55:b6:48:4f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
        Validity
            Not Before: Apr 24 11:50:00 2024 GMT
            Not After : Apr 23 11:55:00 2025 GMT
        Subject: CN=403AB0AF5D7887B83571D131B8F5CD1341AD6D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:6f:c2:98:72:67:e1:ef:56:1b:1f:c9:c2:
                    f0:f7:48:26:40:62:70:23:8e:58:3b:33:dc:d3:cc:
                    bc:7b:7e:2c:ca:45:ab:f1:2d:ec:01:85:b6:5f:1e:
                    4d:08:c9:68:0a:81:5f:08:37:bb:85:85:69:6f:83:
                    28:8e:29:77:b3:45:aa:cc:23:a1:bc:df:50:e6:cb:
                    a3:ce:a1:12:b9:8a:af:6f:61:d5:e5:b2:07:2c:22:
                    3b:46:ae:68:9b:20:34:43:72:b4:aa:7b:6a:c8:16:
                    f7:3b:69:a9:46:f2:2c:11:3d:90:00:dc:de:06:9c:
                    cd:c8:50:dc:9e:58:57:07:da:a6:bb:e4:84:4d:cf:
                    bd:45:73:46:01:3c:61:1d:f7:67:eb:5d:28:b5:db:
                    b1:81:4e:e8:1f:34:80:0f:03:4e:d7:35:f6:83:0e:
                    6a:7e:e0:1d:6e:fb:6c:40:71:4e:e6:71:91:10:81:
                    05:4b:23:fe:fb:b1:49:7b:fb:e2:4b:28:91:22:fe:
                    db:3e:26:df:80:66:ce:65:32:33:38:4d:5a:d0:65:
                    03:01:8e:da:3f:f6:f6:fe:f5:77:17:5c:1a:73:75:
                    7e:bd:3f:eb:cf:84:6f:92:1d:93:b8:05:5b:52:7c:
                    a3:cf:11:8f:9d:ba:df:db:af:39:59:35:2d:50:a9:
                    32:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3A:B0:AF:5D:78:87:B8:35:71:D1:31:B8:F5:CD:13:41:AD:6D:4C
            X509v3 Authority Key Identifier:
                keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3139312e302f32342d3234203d3e20323730313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:1a:1f:2e:8a:52:27:f0:33:97:fc:bc:f2:6b:bb:ee:b8:52:
         06:ef:4a:db:fc:1c:4a:0a:93:2a:d3:75:f7:a6:38:9f:36:f9:
         6b:72:ae:f4:17:8f:53:c1:22:77:28:5a:ff:ca:37:6c:53:08:
         9d:78:08:5b:9a:d2:33:fc:2b:c3:af:98:75:ff:c5:72:e6:32:
         6d:f8:45:e9:97:12:71:be:56:e2:20:8b:79:0c:db:63:d3:25:
         47:5a:8d:73:f0:45:c4:fa:7a:7e:6a:46:5b:dc:00:43:d2:92:
         fe:66:d8:57:83:4a:80:a0:3c:b5:4c:fe:15:2f:c0:96:89:e3:
         50:c2:33:33:f0:94:35:65:53:09:7a:d8:f9:b7:3d:6a:54:6d:
         97:e3:2d:f4:12:d1:c7:6b:c6:8b:6a:6f:1d:ed:a5:6d:e8:5a:
         c9:8b:8a:32:eb:cb:06:96:50:3e:0b:d4:49:52:7c:d4:7e:08:
         e1:ba:ff:12:e2:0e:9c:15:75:4e:ab:57:96:55:d5:d1:84:1e:
         a7:d8:f7:33:d0:43:b0:98:b0:16:0c:ee:66:b0:0e:ab:f0:c2:
         86:bb:e6:cc:fa:50:e4:43:29:02:87:51:5d:33:24:1f:51:b3:
         95:d0:18:4c:f9:9e:ca:b5:91:a4:30:c8:c1:cb:98:94:1b:be:
         ad:ba:70:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----