Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32F76A5724B02A3A9A56A772DC53A9CEC8CF842310D15EFBA33AF33C390C008B/0/3230302e312e3230382e302f32312d3232203d3e20323635383232.roa
File:                     3230302e312e3230382e302f32312d3232203d3e20323635383232.roa (raw, json)
Hash identifier:          qzLTUTVA6b7ogJKBbaY2BvB3O2uyNZ4Uqr2WL9TWsbU=
Subject key identifier:   FF:C9:B4:3F:44:D2:88:A6:B7:F6:56:8F:E3:70:69:C9:1B:72:5F:E0
Certificate issuer:       /CN=044C73C833ED8F4D51E1C1A0A76C06F7DC33562A
Certificate serial:       44E434718ECD8F86D835F53A00BA89A8DD2064EE
Authority key identifier: 04:4C:73:C8:33:ED:8F:4D:51:E1:C1:A0:A7:6C:06:F7:DC:33:56:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044C73C833ED8F4D51E1C1A0A76C06F7DC33562A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/32F76A5724B02A3A9A56A772DC53A9CEC8CF842310D15EFBA33AF33C390C008B/0/3230302e312e3230382e302f32312d3232203d3e20323635383232.roa
Signing time:             Mon 27 May 2024 11:35:00 +0000
ROA not before:           Mon 27 May 2024 11:30:00 +0000
ROA not after:            Mon 26 May 2025 11:35:00 +0000
asID:                     265822
IP address blocks:        200.1.208.0/21 maxlen: 22

Validation:               Failed, certificate revoked on Mon 27 May 2024 13:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e4:34:71:8e:cd:8f:86:d8:35:f5:3a:00:ba:89:a8:dd:20:64:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044C73C833ED8F4D51E1C1A0A76C06F7DC33562A
        Validity
            Not Before: May 27 11:30:00 2024 GMT
            Not After : May 26 11:35:00 2025 GMT
        Subject: CN=FFC9B43F44D288A6B7F6568FE37069C91B725FE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8e:d0:e4:bb:06:9d:1e:f9:75:a3:50:ef:36:
                    d7:78:0b:9e:f5:94:8d:0d:e0:3f:df:81:d8:3a:11:
                    7d:0e:b5:2b:0b:82:7f:47:3f:6b:ab:0e:fa:a7:a3:
                    51:30:f9:66:96:f6:75:90:2a:50:34:44:56:40:ba:
                    e2:5c:9d:81:1d:6b:80:d8:61:76:2e:fa:e0:86:82:
                    2c:01:33:3e:8e:76:a3:f6:1d:11:3d:e5:d1:b9:82:
                    95:4a:1e:5c:40:24:86:5b:38:8f:ad:f0:55:fc:01:
                    bf:21:ac:2e:86:79:90:e6:d1:1a:36:29:8d:5f:1a:
                    26:2e:d7:74:4f:4c:58:f9:d9:9b:b2:56:ac:39:a5:
                    c6:27:4f:5b:dc:44:5a:4c:b9:ec:81:3a:df:e9:99:
                    c3:cb:0a:c7:7b:de:05:e2:a0:47:d1:a9:50:27:21:
                    37:93:ae:00:d5:ed:91:67:fe:c6:b9:21:69:70:1b:
                    07:e6:b4:ad:d9:c2:b6:b5:09:68:e4:9b:3b:65:3a:
                    34:86:36:d2:97:3b:cd:ad:f8:25:49:22:db:6e:f1:
                    2c:cb:3d:41:94:a5:5f:6e:91:65:0b:d8:67:10:c7:
                    82:f2:e3:0e:f2:d4:e9:8f:d5:53:42:9d:7d:07:96:
                    6b:81:9a:e9:8d:f4:b5:25:7a:f8:a3:af:75:6c:47:
                    4a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C9:B4:3F:44:D2:88:A6:B7:F6:56:8F:E3:70:69:C9:1B:72:5F:E0
            X509v3 Authority Key Identifier:
                keyid:04:4C:73:C8:33:ED:8F:4D:51:E1:C1:A0:A7:6C:06:F7:DC:33:56:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/32F76A5724B02A3A9A56A772DC53A9CEC8CF842310D15EFBA33AF33C390C008B/0/044C73C833ED8F4D51E1C1A0A76C06F7DC33562A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044C73C833ED8F4D51E1C1A0A76C06F7DC33562A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32F76A5724B02A3A9A56A772DC53A9CEC8CF842310D15EFBA33AF33C390C008B/0/3230302e312e3230382e302f32312d3232203d3e20323635383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:e2:49:88:2d:53:2e:23:e6:81:bb:1d:c8:d5:13:68:d4:9b:
         1d:e6:bb:e1:64:e1:71:24:c2:12:f3:5b:74:e6:94:1e:fa:56:
         37:ac:83:fc:46:8d:e8:d6:88:56:7d:25:8a:6e:44:ad:62:b1:
         67:a3:05:c3:10:ef:4b:8e:7b:79:62:89:4a:22:7f:f9:3a:ef:
         fb:ad:06:91:1d:8f:f8:52:4c:aa:dc:32:c3:81:5b:b1:1f:fa:
         0e:97:91:12:1c:1c:32:bf:20:bd:f4:1f:8c:2b:2b:d3:f0:5f:
         74:c9:02:ac:e5:d7:05:04:cc:e1:36:7f:4c:ed:90:3e:af:cf:
         b8:2e:2c:c2:5c:3d:a2:01:d5:b3:a6:5c:e9:c6:4f:04:9d:80:
         49:1f:a1:54:fe:b3:f1:d3:43:39:94:be:4a:1c:94:50:e7:38:
         e7:71:c1:67:43:62:09:70:e0:f2:01:bf:90:4f:e5:af:94:7a:
         1a:66:54:3e:5c:54:09:7e:6b:8a:7c:58:2e:72:d3:22:91:8c:
         83:96:95:dc:75:16:bc:a8:9e:f1:88:23:ad:e7:fb:b8:40:cf:
         e2:38:2a:d5:ea:d8:df:c3:ed:68:17:19:39:85:e7:3f:6f:9d:
         66:c2:a0:10:1d:0b:93:f8:5c:a7:8d:52:64:de:33:d9:cf:58:
         81:e5:fe:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----