Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3139322e302f32332d3234203d3e203133393939.roa
File:                     3230302e35322e3139322e302f32332d3234203d3e203133393939.roa (raw, json)
Hash identifier:          zcwqlbrU5wBUZ606jnLh4Jw+9LxH1kkS+7gYsHsVKB4=
Subject key identifier:   2E:95:95:26:D0:55:C1:0A:81:D1:3A:5C:D4:AD:90:18:DF:EA:3E:3D
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       149A1FDEB63C67527DA18B9F72B6F60A942D6C0B
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3139322e302f32332d3234203d3e203133393939.roa
Signing time:             Tue 21 May 2024 03:55:02 +0000
ROA not before:           Tue 21 May 2024 03:50:02 +0000
ROA not after:            Tue 20 May 2025 03:55:02 +0000
asID:                     13999
IP address blocks:        200.52.192.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9a:1f:de:b6:3c:67:52:7d:a1:8b:9f:72:b6:f6:0a:94:2d:6c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 21 03:50:02 2024 GMT
            Not After : May 20 03:55:02 2025 GMT
        Subject: CN=2E959526D055C10A81D13A5CD4AD9018DFEA3E3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:84:40:a9:4d:0a:e1:08:71:29:5d:3c:63:
                    f1:a9:75:a3:85:b8:5d:90:46:d6:9a:ce:09:d9:a1:
                    d3:00:71:34:09:55:d5:cb:45:cd:1c:8a:83:d9:30:
                    32:36:69:3e:37:b0:95:7a:25:21:e7:e6:d1:b9:03:
                    93:f6:de:86:d9:f4:b9:4a:93:10:8d:29:3b:00:39:
                    af:61:29:dd:ee:03:e6:a7:4d:4e:f8:65:94:d5:d2:
                    7e:a3:5a:d4:54:ca:5a:ab:bb:84:14:d9:83:4b:2c:
                    df:c8:5d:93:e2:be:84:bd:a8:82:fe:dc:97:62:59:
                    e6:11:c6:57:eb:7c:f4:13:a1:18:fb:12:32:3e:a2:
                    d1:05:25:59:4b:85:c6:f6:75:4d:d8:d9:1d:61:3a:
                    99:4d:3e:6d:e6:93:76:68:df:83:ab:35:3b:b1:e8:
                    6b:11:fe:4c:14:bd:77:5e:8e:15:3a:11:0d:49:03:
                    08:49:8d:27:03:ff:69:46:71:fb:7d:25:de:1a:30:
                    50:b0:b0:1c:9c:c8:32:d4:96:24:e0:48:79:36:37:
                    48:40:fa:8f:df:5d:38:a9:31:57:c1:fa:ad:51:be:
                    2f:27:b8:ae:7f:05:36:5f:a9:a8:41:20:e4:c2:33:
                    4c:85:a1:2d:e4:af:de:7d:93:73:2f:ed:a3:4c:bf:
                    f9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:95:95:26:D0:55:C1:0A:81:D1:3A:5C:D4:AD:90:18:DF:EA:3E:3D
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3139322e302f32332d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:87:7e:92:19:a7:26:f3:65:37:23:88:69:8e:7a:e1:c1:e0:
         7a:f2:be:ce:86:a5:b0:80:f6:26:82:2a:ca:27:92:4a:c2:9a:
         ad:a3:a1:cf:94:d1:3a:81:b0:b0:54:92:b9:44:b2:e5:a3:0f:
         06:02:aa:66:eb:a6:e0:9e:9f:f6:fa:96:0a:90:51:df:d9:af:
         2c:1c:4b:cc:33:f5:a2:7a:cd:5e:3a:df:1a:90:be:d3:cf:51:
         21:d4:3b:53:9b:99:19:33:1c:d1:b7:6f:5d:3c:e4:99:c2:62:
         38:04:ee:20:ea:45:0e:b4:5e:52:04:1a:27:bc:1d:16:0d:47:
         30:f7:94:a1:ae:25:45:a1:6a:28:73:63:5f:ec:1a:38:bc:e3:
         7e:5c:c8:29:7f:ed:6a:20:77:4a:d4:f3:4d:17:8b:39:5a:31:
         d5:e5:f3:46:3b:ad:cb:fc:50:bf:8f:2f:b2:95:99:29:60:ff:
         2b:da:a0:f5:87:04:8b:95:60:85:65:c6:0c:d3:21:ea:ef:f9:
         92:df:4e:f4:2f:4a:4f:bc:05:cb:2c:d0:32:f8:26:ac:68:f6:
         63:5a:59:63:a6:91:cd:5a:9a:39:b6:63:b4:12:19:26:f6:1d:
         25:46:1e:d5:b2:18:98:15:cc:a3:10:7f:42:91:ad:c3:70:cf:
         d6:64:f0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----