Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3139352e302f32342d3234203d3e203133393939.roa
File:                     3230302e35322e3139352e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          a1SRwNuOEbfzGS1JVjY9EYAsaQ5cidIr4+ONa/Cnbp8=
Subject key identifier:   B1:C2:F8:BE:B0:C8:E9:59:98:76:C3:6A:37:6B:F0:0C:45:A1:CF:C5
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       5838A9AEB383BD3071BC1F2694EA4F3D470BBAC6
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3139352e302f32342d3234203d3e203133393939.roa
Signing time:             Tue 21 May 2024 03:55:00 +0000
ROA not before:           Tue 21 May 2024 03:50:00 +0000
ROA not after:            Tue 20 May 2025 03:55:00 +0000
asID:                     13999
IP address blocks:        200.52.195.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:38:a9:ae:b3:83:bd:30:71:bc:1f:26:94:ea:4f:3d:47:0b:ba:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 21 03:50:00 2024 GMT
            Not After : May 20 03:55:00 2025 GMT
        Subject: CN=B1C2F8BEB0C8E9599876C36A376BF00C45A1CFC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:58:f0:55:89:29:91:fe:de:f9:e9:9a:8b:f0:
                    b1:f4:ca:68:6b:be:3b:0b:f2:91:23:34:de:4b:09:
                    95:f7:ca:3a:d3:8e:49:9b:34:91:c9:33:5d:3c:2d:
                    c0:12:52:2d:a8:d2:97:8b:9a:ce:49:88:11:c0:f5:
                    25:a6:5f:b3:8a:d2:fc:d5:9a:57:25:b4:77:02:cd:
                    9b:88:93:a8:16:fc:5f:54:58:27:7e:d4:c7:98:07:
                    80:6c:1d:c9:d3:8b:2e:91:f2:82:ff:65:db:f0:00:
                    50:3a:2c:4c:ee:a3:fe:cf:e7:0a:b4:1d:7d:92:07:
                    48:01:07:4d:87:31:9b:7c:67:22:ac:2d:79:35:96:
                    8b:57:84:5b:ed:23:c8:95:a2:83:75:98:80:71:a1:
                    ed:39:ee:3b:a4:51:a0:38:63:2a:f1:11:52:89:a2:
                    6d:2b:17:ee:0b:9a:d1:c1:64:49:8f:67:f9:54:14:
                    ad:a9:cc:e0:62:08:3a:6e:8a:87:7c:fa:ce:f7:83:
                    44:bd:df:7a:d4:48:c6:84:16:5e:44:3f:d4:6d:60:
                    ca:18:a4:9f:27:49:14:59:96:93:2f:db:57:76:6b:
                    26:22:8b:90:95:36:9f:fe:58:f2:5e:5a:48:34:a9:
                    60:e6:3c:98:39:f6:1d:5f:e5:f8:f2:80:63:77:8e:
                    84:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C2:F8:BE:B0:C8:E9:59:98:76:C3:6A:37:6B:F0:0C:45:A1:CF:C5
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3139352e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:89:e5:77:62:ce:e5:c2:53:7e:8e:18:e1:2d:f2:bd:d2:64:
         2e:47:d5:8b:80:83:be:85:2d:78:32:fd:8b:ee:4e:15:dc:9f:
         53:c0:10:0f:b5:ba:5a:98:21:34:8f:9f:7e:8f:e0:10:a6:49:
         c1:50:77:f4:11:93:c9:9f:81:2b:38:b3:b8:bb:e7:44:16:ef:
         8f:bf:8e:17:01:c5:fc:82:94:ae:37:d6:1b:99:6c:b6:91:fc:
         d1:b3:cd:2f:18:bd:c5:48:b7:92:d8:6b:4c:25:47:6a:4e:5a:
         8e:11:df:e2:d7:ef:40:fd:17:b8:0f:20:69:fd:72:eb:e6:85:
         08:ac:57:62:49:9d:2b:fa:f4:de:2f:d9:52:ac:67:55:98:75:
         eb:6e:8a:54:70:4c:87:9d:ee:5f:89:48:58:29:3d:9a:36:c5:
         2a:6c:13:ca:8f:0e:92:15:60:94:1a:d7:b1:8e:a7:1f:6e:2a:
         86:bf:95:b9:05:80:09:f1:9e:66:84:57:76:cd:7a:54:c8:1f:
         e4:1d:eb:79:78:03:28:4c:6e:35:cc:d1:47:c9:de:11:e8:2d:
         ef:13:78:b6:17:90:18:9a:25:19:e0:67:12:e5:bc:6e:31:7f:
         df:a9:52:0d:00:3e:fc:58:51:ab:7d:38:11:19:02:94:4f:a0:
         a2:7a:33:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----