Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3137332e302f32342d3234203d3e203133393939.roa
File:                     3230302e35322e3137332e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          RMoyETHd2oTA5hLOJ9MuUtVJsRRQEMGyizm8m66plcg=
Subject key identifier:   C3:47:0A:53:66:E8:48:86:EC:BF:22:67:18:F2:11:4B:3E:F6:EB:E8
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       157B3D3F01C7DA6AFE114D9D7D8A67DB3E4462E9
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3137332e302f32342d3234203d3e203133393939.roa
Signing time:             Tue 21 May 2024 03:55:00 +0000
ROA not before:           Tue 21 May 2024 03:50:00 +0000
ROA not after:            Tue 20 May 2025 03:55:00 +0000
asID:                     13999
IP address blocks:        200.52.173.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:7b:3d:3f:01:c7:da:6a:fe:11:4d:9d:7d:8a:67:db:3e:44:62:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 21 03:50:00 2024 GMT
            Not After : May 20 03:55:00 2025 GMT
        Subject: CN=C3470A5366E84886ECBF226718F2114B3EF6EBE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:de:c7:b6:ca:d4:5c:69:37:c0:85:23:50:f8:
                    6c:b2:67:4e:28:77:c2:ca:64:3e:b9:7a:d7:66:de:
                    e7:3f:8b:31:88:1c:ad:19:da:8d:c4:50:19:ac:6f:
                    47:ae:48:72:f3:0d:ad:75:30:28:ec:85:6f:5a:3a:
                    ee:0b:7f:32:48:ab:c9:03:90:d4:7f:ef:92:48:a1:
                    61:4e:60:94:71:12:f0:f8:d1:c1:ef:58:3a:ce:15:
                    1c:68:1e:03:e4:8f:b2:fe:fe:6c:33:99:42:cd:b3:
                    71:53:a1:2c:3c:2b:1e:a3:e4:01:b8:e7:1d:6e:d5:
                    17:fa:43:af:70:e4:f8:fa:35:d6:e4:90:72:a9:66:
                    01:5c:d2:7c:d4:ab:bd:2b:54:88:fd:e0:25:87:80:
                    25:3f:7c:b1:05:3d:6a:57:7f:28:c2:88:5c:fb:1e:
                    4f:cf:18:3c:f4:ac:bc:17:fe:d1:e7:a8:e0:9b:77:
                    45:2c:3a:8d:f1:c1:0e:38:f5:e7:5c:ea:2c:a2:7a:
                    59:cc:95:01:df:33:6a:ae:4b:2c:4c:00:82:7b:ea:
                    b0:d8:26:23:fd:38:95:ab:b5:eb:ca:af:ff:03:e6:
                    e8:44:b7:e9:79:3c:c4:f2:90:d0:44:b6:89:d8:4a:
                    29:e6:c2:9f:5a:7d:11:bb:6c:b2:e2:33:cd:ef:b3:
                    c6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:47:0A:53:66:E8:48:86:EC:BF:22:67:18:F2:11:4B:3E:F6:EB:E8
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3137332e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:27:75:c0:74:60:bc:54:82:b3:16:77:b4:70:0a:44:fe:2a:
         31:bb:04:ac:89:8e:f3:da:ec:0c:fd:f2:17:a1:38:f8:09:0c:
         4f:ec:48:1a:bc:5e:66:27:7d:90:4f:5a:a5:07:6e:9b:91:ea:
         a3:d6:9a:5f:9a:e5:2b:2e:0e:ee:ff:d4:4a:11:7c:27:89:4f:
         77:7a:f7:46:68:4b:07:df:ce:4b:74:4a:43:54:b8:36:55:5f:
         5c:06:6d:48:b3:11:33:2e:5c:ef:64:60:97:34:0c:d3:b0:08:
         b5:eb:14:09:8e:17:68:04:5c:fe:ca:52:b7:11:d3:e2:4b:84:
         2f:79:63:50:45:48:9f:45:c6:fe:9b:97:21:cf:09:a8:5b:07:
         e6:a4:6f:5e:8e:79:4a:32:cb:37:93:89:34:d4:1b:cb:98:cf:
         fd:c7:dd:8e:c8:22:e7:a5:51:22:ef:1e:ae:2e:b9:f7:e2:ac:
         d6:2f:89:d9:d3:1a:e5:e6:47:5e:73:29:99:4d:60:4e:06:2e:
         d4:50:1c:c3:78:df:7d:96:41:bb:25:c2:4c:83:e0:be:b1:74:
         34:7f:a7:f1:b3:59:3d:fe:fc:46:16:86:ea:85:68:19:a6:a3:
         8c:24:0f:c5:a2:b4:ad:a5:a0:92:c8:e6:42:5b:e0:8a:99:53:
         42:ff:47:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----