Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3136382e302f32322d3234203d3e203133393939.roa
File:                     3230302e35322e3136382e302f32322d3234203d3e203133393939.roa (raw, json)
Hash identifier:          QBdW3v4bKpXguJJwq73psvsm3OB2J2puTD4VWMBtHHo=
Subject key identifier:   D3:A8:6D:91:49:99:2E:01:46:09:C9:1D:97:34:28:85:4A:E6:03:FD
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       16CFEEE16AF1C3372D29FDA56F1D590BEDE489FB
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3136382e302f32322d3234203d3e203133393939.roa
Signing time:             Tue 21 May 2024 03:55:05 +0000
ROA not before:           Tue 21 May 2024 03:50:05 +0000
ROA not after:            Tue 20 May 2025 03:55:05 +0000
asID:                     13999
IP address blocks:        200.52.168.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:cf:ee:e1:6a:f1:c3:37:2d:29:fd:a5:6f:1d:59:0b:ed:e4:89:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 21 03:50:05 2024 GMT
            Not After : May 20 03:55:05 2025 GMT
        Subject: CN=D3A86D9149992E014609C91D973428854AE603FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b5:61:5e:8e:4f:1a:02:97:5b:40:0b:04:4f:
                    b0:ea:34:df:ce:e7:f6:75:0d:6f:bb:90:f9:72:3b:
                    11:f0:45:1d:bb:6d:1a:1d:1f:b1:19:fe:d8:78:c9:
                    b6:80:b5:08:93:30:3b:33:cc:21:4c:e5:38:4e:e8:
                    37:33:5a:1b:ca:6e:e3:1e:77:20:de:8e:99:59:ad:
                    2e:dd:5d:aa:60:c5:0c:db:8b:cc:b9:e4:c8:5a:1d:
                    49:87:cd:68:30:95:7c:c5:e8:69:8b:d8:73:8f:b8:
                    78:b7:7f:d8:cb:36:b7:f1:0c:48:ba:2e:9d:e2:af:
                    b3:ed:d6:b6:12:d6:9d:85:60:2a:ed:8e:6b:9b:0b:
                    76:99:83:f4:b2:17:ee:eb:6c:ca:9e:e0:10:ca:91:
                    d4:e5:e8:56:59:7a:14:02:dd:34:7d:e7:e8:9e:5d:
                    df:6c:8b:46:a3:0f:65:9e:7f:6b:f5:b6:f7:c2:40:
                    07:92:bd:38:7e:4b:34:1d:17:99:7c:e2:96:cd:4b:
                    0d:e3:ad:26:8d:59:ab:3e:8f:d0:66:74:16:8e:6e:
                    90:51:00:1e:fb:ec:71:a7:ee:75:e2:fc:34:74:40:
                    05:87:66:70:04:e3:ac:7d:f6:a7:f6:47:7a:74:b4:
                    a0:71:55:e1:ae:ec:0e:3c:91:6f:38:9d:15:f1:a5:
                    2a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A8:6D:91:49:99:2E:01:46:09:C9:1D:97:34:28:85:4A:E6:03:FD
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3136382e302f32322d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:68:e8:d3:56:fb:ad:75:59:f5:d8:75:e8:9b:b4:a5:65:57:
         ad:a7:d1:25:fd:b0:dd:33:51:81:6e:ba:b4:2f:2f:58:a0:d6:
         c3:47:fd:a9:2c:f9:76:03:e3:df:12:54:63:20:fb:e2:aa:dc:
         33:e0:8f:de:a1:54:f4:05:ae:df:9a:c4:e8:6d:74:1b:f5:f6:
         23:04:ba:cd:97:44:9e:4f:85:73:ce:ea:80:78:60:32:7a:61:
         8b:57:35:6b:ab:d4:c4:81:f7:05:ce:c5:75:af:66:9e:5d:a2:
         a7:a3:8c:47:08:a2:c5:fd:da:26:85:0c:5c:fa:f1:c5:d6:cb:
         12:43:ce:f0:80:4c:cc:72:f3:ad:36:08:c9:fe:ab:69:42:5e:
         fe:a8:46:57:44:3f:41:7c:a9:fd:6f:fb:60:cd:ad:3b:e6:19:
         2c:5d:3e:47:b7:d7:75:5c:e6:21:92:db:06:2d:90:2f:eb:54:
         71:62:62:04:5f:03:1f:8d:2f:a7:38:11:d7:5c:4e:3d:1c:b3:
         3d:b2:3e:89:31:5d:49:4a:e7:a7:7e:77:8b:54:26:5c:80:b4:
         e1:cf:e3:65:f6:d7:d8:59:54:91:bb:1d:f3:9f:93:a4:39:91:
         23:f0:97:ed:0a:25:8b:70:eb:ad:e7:7b:ac:43:ae:4d:91:92:
         3a:ee:3f:18
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFs/u4WrxwzctKf2lbx1ZC+3kifswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxRjVDNzUzRUZEQjdGODQ3NkM2M0JCQjQxNDE3QjhF
MTk0QTJBMzAeFw0yNDA1MjEwMzUwMDVaFw0yNTA1MjAwMzU1MDVaMDMxMTAvBgNV
BAMTKEQzQTg2RDkxNDk5OTJFMDE0NjA5QzkxRDk3MzQyODg1NEFFNjAzRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYtWFejk8aApdbQAsET7DqNN/O
5/Z1DW+7kPlyOxHwRR27bRodH7EZ/th4ybaAtQiTMDszzCFM5ThO6DczWhvKbuMe
dyDejplZrS7dXapgxQzbi8y55MhaHUmHzWgwlXzF6GmL2HOPuHi3f9jLNrfxDEi6
Lp3ir7Pt1rYS1p2FYCrtjmubC3aZg/SyF+7rbMqe4BDKkdTl6FZZehQC3TR95+ie
Xd9si0ajD2Wef2v1tvfCQAeSvTh+SzQdF5l84pbNSw3jrSaNWas+j9BmdBaObpBR
AB777HGn7nXi/DR0QAWHZnAE46x99qf2R3p0tKBxVeGu7A48kW84nRXxpSpzAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU06htkUmZLgFGCckdlzQohUrmA/0wHwYDVR0j
BBgwFoAUwB9cdT79t/hHbGO7tBQXuOGUoqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQzAxRjVDNzUzRUZEQjdG
ODQ3NkM2M0JCQjQxNDE3QjhFMTk0QTJBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDFGNUM3NTNFRkRCN0Y4NDc2
QzYzQkJCNDE0MTdCOEUxOTRBMkEzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYxNTY4RDhDOUFERERDQTNDRTc3MDM5NzI3N0Q1Mzk2QjYzMTc0REIw
QzdCMDhCNTc4NjMzQkMzMjY3RTE0Ny8wLzMyMzAzMDJlMzUzMjJlMzEzNjM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsg0qDAN
BgkqhkiG9w0BAQsFAAOCAQEAL2jo01b7rXVZ9dh16Ju0pWVXrafRJf2w3TNRgW66
tC8vWKDWw0f9qSz5dgPj3xJUYyD74qrcM+CP3qFU9AWu35rE6G10G/X2IwS6zZdE
nk+Fc87qgHhgMnphi1c1a6vUxIH3Bc7Fda9mnl2ip6OMRwiixf3aJoUMXPrxxdbL
EkPO8IBMzHLzrTYIyf6raUJe/qhGV0Q/QXyp/W/7YM2tO+YZLF0+R7fXdVzmIZLb
Bi2QL+tUcWJiBF8DH40vpzgR11xOPRyzPbI+iTFdSUrnp353i1QmXIC04c/jZfbX
2FlUkbsd85+TpDmRI/CX7Qoli3Drred7rEOuTZGSOu4/GA==
-----END CERTIFICATE-----