Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3230302e302f32332d3234203d3e20323632393136.roa
File:                     3230302e35322e3230302e302f32332d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          TeOim46g8xUKjpHaFgY3rGqedKtD0/SQTrj0qYZhclg=
Subject key identifier:   D2:7B:FA:C1:6A:9B:DE:85:16:F8:DE:99:A1:83:99:A0:8A:C2:AF:76
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       1460F3C49CD41EDDEB41EB7F9D895BF23621E148
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3230302e302f32332d3234203d3e20323632393136.roa
Signing time:             Tue 21 May 2024 03:55:02 +0000
ROA not before:           Tue 21 May 2024 03:50:02 +0000
ROA not after:            Tue 20 May 2025 03:55:02 +0000
asID:                     262916
IP address blocks:        200.52.200.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:60:f3:c4:9c:d4:1e:dd:eb:41:eb:7f:9d:89:5b:f2:36:21:e1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 21 03:50:02 2024 GMT
            Not After : May 20 03:55:02 2025 GMT
        Subject: CN=D27BFAC16A9BDE8516F8DE99A18399A08AC2AF76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:24:3d:6e:70:57:07:e4:e2:28:99:8f:be:c2:
                    70:c7:ea:22:c4:f0:96:76:d0:09:45:a0:83:2e:19:
                    59:fc:4e:21:94:e1:c4:9d:70:15:11:db:18:19:a6:
                    30:95:58:fe:bc:2c:56:b4:3b:a9:24:df:9d:d7:c5:
                    5e:98:80:d9:83:eb:c2:6f:3c:74:d5:8c:3c:e0:c3:
                    50:0b:f2:2a:6d:80:d7:6f:06:17:c6:1f:1c:58:2d:
                    43:a7:3d:bd:ba:8b:e6:d1:fa:f6:e5:a0:12:36:2b:
                    27:d1:f9:f6:16:07:26:98:15:da:2a:49:e7:8a:ab:
                    26:f1:02:e2:cc:23:d0:71:c2:d3:96:00:73:ce:ee:
                    e0:67:a5:46:c2:4d:07:45:32:82:04:53:f5:08:25:
                    35:16:21:ed:df:be:68:70:b5:fe:5a:86:ba:cf:e1:
                    a1:e4:a2:11:72:27:55:81:29:f0:45:87:bd:7f:89:
                    60:ef:2f:a9:c7:ba:a2:f5:7b:93:60:48:01:26:a6:
                    31:65:6e:f1:f4:4e:82:56:5b:44:8f:85:c8:75:63:
                    e5:f1:1a:95:d7:4a:cf:f9:16:69:ac:6a:0b:7a:c9:
                    6e:9e:49:ae:ce:cf:0a:59:8f:99:6f:a7:46:04:ce:
                    38:7f:fc:7a:2e:31:6f:30:97:ef:35:6d:11:86:27:
                    c0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7B:FA:C1:6A:9B:DE:85:16:F8:DE:99:A1:83:99:A0:8A:C2:AF:76
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3230302e302f32332d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:b0:96:71:42:e1:c3:53:e7:20:d2:ca:a2:19:21:dd:be:28:
         de:bd:d4:0e:d8:50:21:4c:d4:ea:8a:44:30:10:a7:50:a1:7c:
         76:a0:fc:77:e9:c5:16:6f:9a:20:4e:ca:46:58:d2:12:e2:f9:
         d6:22:94:90:1b:e7:28:c7:91:19:03:09:84:09:c3:b2:39:cc:
         7a:a2:f3:99:d1:da:ef:80:c3:a1:a2:3f:0c:9f:47:d5:33:72:
         14:b5:31:c0:3e:1d:81:9d:fc:ca:a5:ce:7b:b4:62:9d:45:e3:
         e2:fe:76:85:26:d6:14:4d:f4:71:ae:0f:02:4a:db:a5:8f:4b:
         23:f9:1c:21:b9:68:90:c3:60:21:b4:ba:20:2f:29:53:88:89:
         e9:ea:0d:bd:07:f4:50:c6:7e:4e:ae:f4:4f:23:bf:32:ca:a0:
         17:cf:ba:27:04:26:0c:21:cb:27:34:d7:22:1d:58:26:05:14:
         f8:10:1f:eb:fb:cc:83:f5:f2:25:6e:5e:e2:6d:47:41:1f:2c:
         00:a5:60:ab:1c:46:3f:37:5a:d1:f2:f3:d3:bd:57:f7:0e:d9:
         9a:5f:53:38:c7:7a:f2:fd:e5:30:35:27:6e:8a:30:91:ad:a4:
         39:42:1f:61:d0:79:a7:7a:5a:68:af:15:2c:26:d6:b7:7d:9b:
         49:aa:72:2d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFGDzxJzUHt3rQet/nYlb8jYh4UgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxRjVDNzUzRUZEQjdGODQ3NkM2M0JCQjQxNDE3QjhF
MTk0QTJBMzAeFw0yNDA1MjEwMzUwMDJaFw0yNTA1MjAwMzU1MDJaMDMxMTAvBgNV
BAMTKEQyN0JGQUMxNkE5QkRFODUxNkY4REU5OUExODM5OUEwOEFDMkFGNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaJD1ucFcH5OIomY++wnDH6iLE
8JZ20AlFoIMuGVn8TiGU4cSdcBUR2xgZpjCVWP68LFa0O6kk353XxV6YgNmD68Jv
PHTVjDzgw1AL8iptgNdvBhfGHxxYLUOnPb26i+bR+vbloBI2KyfR+fYWByaYFdoq
SeeKqybxAuLMI9BxwtOWAHPO7uBnpUbCTQdFMoIEU/UIJTUWIe3fvmhwtf5ahrrP
4aHkohFyJ1WBKfBFh71/iWDvL6nHuqL1e5NgSAEmpjFlbvH0ToJWW0SPhch1Y+Xx
GpXXSs/5Fmmsagt6yW6eSa7OzwpZj5lvp0YEzjh//HouMW8wl+81bRGGJ8DRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU0nv6wWqb3oUW+N6ZoYOZoIrCr3YwHwYDVR0j
BBgwFoAUwB9cdT79t/hHbGO7tBQXuOGUoqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQzAxRjVDNzUzRUZEQjdG
ODQ3NkM2M0JCQjQxNDE3QjhFMTk0QTJBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDFGNUM3NTNFRkRCN0Y4NDc2
QzYzQkJCNDE0MTdCOEUxOTRBMkEzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYxNTY4RDhDOUFERERDQTNDRTc3MDM5NzI3N0Q1Mzk2QjYzMTc0REIw
QzdCMDhCNTc4NjMzQkMzMjY3RTE0Ny8wLzMyMzAzMDJlMzUzMjJlMzIzMDMwMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjMyMzkzMTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByDTI
MA0GCSqGSIb3DQEBCwUAA4IBAQAvsJZxQuHDU+cg0sqiGSHdvijevdQO2FAhTNTq
ikQwEKdQoXx2oPx36cUWb5ogTspGWNIS4vnWIpSQG+cox5EZAwmECcOyOcx6ovOZ
0drvgMOhoj8Mn0fVM3IUtTHAPh2BnfzKpc57tGKdRePi/naFJtYUTfRxrg8CStul
j0sj+RwhuWiQw2AhtLogLylTiInp6g29B/RQxn5OrvRPI78yyqAXz7onBCYMIcsn
NNciHVgmBRT4EB/r+8yD9fIlbl7ibUdBHywApWCrHEY/N1rR8vPTvVf3DtmaX1M4
x3ry/eUwNSduijCRraQ5Qh9h0HmnelporxUsJta3fZtJqnIt
-----END CERTIFICATE-----