Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3139362e302f32322d3234203d3e203133393939.roa
File:                     3230302e35322e3139362e302f32322d3234203d3e203133393939.roa (raw, json)
Hash identifier:          wq+nzm6W5o+0s5YKBWe/YYIjevyLLQDNThT6nApphiU=
Subject key identifier:   BA:7E:C2:A5:8E:7D:0C:6C:8E:05:2E:47:3D:D6:2C:24:A6:69:35:29
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       30376C935E3E66CCA3FC0AB5DEB1E513D01E21BD
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3139362e302f32322d3234203d3e203133393939.roa
Signing time:             Tue 21 May 2024 03:55:00 +0000
ROA not before:           Tue 21 May 2024 03:50:00 +0000
ROA not after:            Tue 20 May 2025 03:55:00 +0000
asID:                     13999
IP address blocks:        200.52.196.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:37:6c:93:5e:3e:66:cc:a3:fc:0a:b5:de:b1:e5:13:d0:1e:21:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 21 03:50:00 2024 GMT
            Not After : May 20 03:55:00 2025 GMT
        Subject: CN=BA7EC2A58E7D0C6C8E052E473DD62C24A6693529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:c3:92:35:ba:2f:5b:e5:cf:54:eb:78:a6:
                    db:0e:02:ab:31:2a:a1:ef:70:65:3d:71:f1:91:8d:
                    d8:4f:8d:48:f8:a3:67:0e:b5:5e:60:c3:6c:ce:e1:
                    4d:de:ef:4b:54:9b:de:d8:cc:ab:c2:15:cd:68:fa:
                    32:fc:78:a6:06:e8:ee:47:79:0b:f5:2b:33:f6:fb:
                    56:bc:42:0d:f6:a5:9e:c3:2f:73:3f:e5:7b:f0:c0:
                    9b:99:dd:42:c4:c8:f8:8c:72:98:9c:7d:51:6a:36:
                    97:35:95:6b:d9:66:c2:18:05:fd:b1:6c:c7:d9:27:
                    d0:f1:19:bc:44:67:9a:39:c9:6e:64:2c:84:34:47:
                    96:c7:25:c4:e7:1e:47:a6:27:43:d6:00:6b:34:de:
                    ad:d3:74:d1:a2:a5:c0:17:b7:c2:fc:ae:e1:50:41:
                    a3:a4:18:7c:a6:d2:5d:ce:ac:86:c2:48:9f:7e:51:
                    7c:34:b2:5f:4e:95:5e:76:01:01:10:a0:e8:b0:3c:
                    74:13:8a:c2:ca:ab:64:99:13:04:6f:20:0e:f4:87:
                    4b:86:3c:ea:64:af:e6:ea:72:e4:87:c5:0e:8c:9c:
                    71:1e:e3:f3:1a:fc:82:f7:89:06:8b:91:ce:11:31:
                    da:3a:9b:d8:bb:c8:2b:c2:48:2b:0e:9f:44:62:4b:
                    03:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7E:C2:A5:8E:7D:0C:6C:8E:05:2E:47:3D:D6:2C:24:A6:69:35:29
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3139362e302f32322d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:6e:fe:d5:1e:2f:4a:3c:56:9c:b6:78:6e:ab:a7:b0:bf:7f:
         60:fd:73:7c:89:be:ff:af:69:d7:e7:23:76:aa:e8:2c:c3:6f:
         4e:5f:e9:ac:91:ac:7e:25:b8:dd:9d:7e:d4:78:84:d3:ed:59:
         5d:f0:ff:a5:70:a4:28:35:cb:a4:05:77:b1:d3:21:20:de:88:
         bf:11:9f:8d:d9:9f:85:fb:bb:32:e0:9b:9a:c6:8f:bd:2c:9b:
         30:d0:1a:27:f4:5a:cb:2b:42:d4:b5:a3:0f:9b:88:88:19:54:
         86:70:92:7b:ea:51:07:0a:7c:5a:08:46:eb:5b:ff:27:7a:63:
         fa:be:2c:ae:9b:ff:cf:95:0f:dd:6a:bd:60:38:e2:43:b1:fa:
         21:50:26:1f:2a:7f:f2:80:32:72:6f:5b:35:fe:d9:63:be:9a:
         6c:f2:fe:99:39:83:54:72:d1:b4:d0:63:cf:90:04:70:90:ca:
         05:8b:7a:a5:e7:60:4f:7e:fb:45:64:2d:a3:ed:36:d7:fe:7d:
         07:ed:06:28:d0:f3:78:dc:c8:f7:77:56:e0:ce:d2:0f:eb:61:
         ae:0b:e7:31:8e:9e:09:9e:3b:88:63:5c:5a:d6:9b:ba:97:b0:
         ad:56:4c:89:b9:bd:d3:76:2f:c8:96:f6:3e:01:69:ec:94:69:
         65:75:65:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----