Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3230322e302f32342d3234203d3e203133393939.roa
File:                     3230302e35322e3230322e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          eJvkLW7Q3wTNy6rDwWjyJhMRPgPhZwp1SR5J3yn0UUs=
Subject key identifier:   D9:8B:9D:17:9F:CB:20:9A:79:8A:68:7A:C3:F7:35:40:37:C8:43:2A
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       7F5CA14742D322BD9D7CA282FFB91CA63F71BFB3
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3230322e302f32342d3234203d3e203133393939.roa
Signing time:             Tue 21 May 2024 03:55:04 +0000
ROA not before:           Tue 21 May 2024 03:50:04 +0000
ROA not after:            Tue 20 May 2025 03:55:04 +0000
asID:                     13999
IP address blocks:        200.52.202.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5c:a1:47:42:d3:22:bd:9d:7c:a2:82:ff:b9:1c:a6:3f:71:bf:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 21 03:50:04 2024 GMT
            Not After : May 20 03:55:04 2025 GMT
        Subject: CN=D98B9D179FCB209A798A687AC3F7354037C8432A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:17:aa:65:29:27:97:2c:62:60:63:90:a1:76:
                    fa:e6:ca:71:70:c8:8c:3f:fd:9b:41:a7:d3:bf:56:
                    25:d1:f2:fa:24:c5:d2:40:e4:2e:12:ff:5d:8f:f7:
                    f7:27:01:e8:b9:1f:63:d8:20:e8:f0:42:be:fd:eb:
                    2d:3d:aa:6a:68:78:1a:84:6d:d3:eb:fe:a2:81:6b:
                    40:ca:19:c4:19:55:2d:ee:1c:d2:44:d0:36:e4:2b:
                    5f:b1:0b:95:4f:86:69:10:30:1b:18:98:ed:b1:0a:
                    84:ab:dd:0e:84:03:ac:ac:b8:d9:ec:22:47:05:4b:
                    63:45:09:80:21:8a:9f:c8:cb:ac:ed:58:27:f4:aa:
                    f2:70:a9:41:b4:ce:28:a8:6f:5d:e5:00:6e:17:e8:
                    ff:80:78:d9:fd:fd:23:d4:03:c7:7d:fe:cb:9f:e5:
                    ac:4e:7b:f8:f9:ca:29:88:fd:cb:76:04:a1:d2:eb:
                    01:05:fc:e3:ad:26:f0:ed:1f:64:32:05:7f:ba:37:
                    ee:e4:14:c6:3a:0b:3e:f0:08:86:6b:59:0a:2e:b3:
                    48:2f:e1:c3:1c:db:85:f0:ee:ea:69:22:53:71:ea:
                    4b:60:76:8b:8c:1e:04:86:b2:ac:ee:fc:51:05:d1:
                    50:32:a1:b0:36:ad:d2:d4:45:c3:f9:7d:02:f2:a2:
                    6d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8B:9D:17:9F:CB:20:9A:79:8A:68:7A:C3:F7:35:40:37:C8:43:2A
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3230322e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:6b:73:e4:3d:cc:41:6d:40:d6:1e:f3:35:ac:11:ed:4f:c8:
         32:ea:83:4e:d7:4e:6e:ed:60:8a:c8:8b:26:d3:46:8c:c5:3a:
         f8:09:08:4f:62:51:0b:1d:95:f8:80:a2:1e:54:d0:c3:24:aa:
         9e:c2:82:e0:60:ca:ad:41:a1:e7:9c:c7:24:25:71:a3:b1:36:
         d8:09:70:b1:70:f4:4c:42:4c:fb:c1:4e:13:79:a0:3a:c7:10:
         ed:6f:5b:63:b8:61:c0:7c:13:ec:ce:bc:f2:01:cd:73:7f:a5:
         7a:88:ac:66:e5:97:c7:fa:d3:c3:dc:22:74:ef:53:1c:ba:7c:
         c1:50:53:18:31:dd:74:86:f4:b0:e6:27:98:7e:0b:d0:af:dd:
         5f:aa:2a:86:7e:4d:02:ef:ac:36:e4:57:ad:df:30:ef:cc:16:
         9b:60:98:f0:5e:cc:55:5d:21:78:28:bb:96:57:33:66:bb:90:
         e3:28:cc:9c:eb:43:9d:f5:13:dd:58:10:f9:46:13:06:48:00:
         9c:c0:1e:95:8b:54:ff:87:e0:f1:5c:8d:ca:65:ba:a6:b4:de:
         e3:01:b4:7c:40:a2:b2:e4:1c:c9:80:fb:85:6a:96:bc:93:35:
         47:6a:0d:4e:a6:32:63:9d:22:41:73:59:4c:7b:5a:71:28:53:
         32:a7:5d:2b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUf1yhR0LTIr2dfKKC/7kcpj9xv7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxRjVDNzUzRUZEQjdGODQ3NkM2M0JCQjQxNDE3QjhF
MTk0QTJBMzAeFw0yNDA1MjEwMzUwMDRaFw0yNTA1MjAwMzU1MDRaMDMxMTAvBgNV
BAMTKEQ5OEI5RDE3OUZDQjIwOUE3OThBNjg3QUMzRjczNTQwMzdDODQzMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaF6plKSeXLGJgY5ChdvrmynFw
yIw//ZtBp9O/ViXR8vokxdJA5C4S/12P9/cnAei5H2PYIOjwQr796y09qmpoeBqE
bdPr/qKBa0DKGcQZVS3uHNJE0DbkK1+xC5VPhmkQMBsYmO2xCoSr3Q6EA6ysuNns
IkcFS2NFCYAhip/Iy6ztWCf0qvJwqUG0ziiob13lAG4X6P+AeNn9/SPUA8d9/suf
5axOe/j5yimI/ct2BKHS6wEF/OOtJvDtH2QyBX+6N+7kFMY6Cz7wCIZrWQous0gv
4cMc24Xw7uppIlNx6ktgdouMHgSGsqzu/FEF0VAyobA2rdLURcP5fQLyom0pAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU2YudF5/LIJp5imh6w/c1QDfIQyowHwYDVR0j
BBgwFoAUwB9cdT79t/hHbGO7tBQXuOGUoqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQzAxRjVDNzUzRUZEQjdG
ODQ3NkM2M0JCQjQxNDE3QjhFMTk0QTJBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDFGNUM3NTNFRkRCN0Y4NDc2
QzYzQkJCNDE0MTdCOEUxOTRBMkEzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYxNTY4RDhDOUFERERDQTNDRTc3MDM5NzI3N0Q1Mzk2QjYzMTc0REIw
QzdCMDhCNTc4NjMzQkMzMjY3RTE0Ny8wLzMyMzAzMDJlMzUzMjJlMzIzMDMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg0yjAN
BgkqhkiG9w0BAQsFAAOCAQEAB2tz5D3MQW1A1h7zNawR7U/IMuqDTtdObu1gisiL
JtNGjMU6+AkIT2JRCx2V+ICiHlTQwySqnsKC4GDKrUGh55zHJCVxo7E22AlwsXD0
TEJM+8FOE3mgOscQ7W9bY7hhwHwT7M688gHNc3+leoisZuWXx/rTw9widO9THLp8
wVBTGDHddIb0sOYnmH4L0K/dX6oqhn5NAu+sNuRXrd8w78wWm2CY8F7MVV0heCi7
llczZruQ4yjMnOtDnfUT3VgQ+UYTBkgAnMAelYtU/4fg8VyNymW6prTe4wG0fECi
suQcyYD7hWqWvJM1R2oNTqYyY50iQXNZTHtacShTMqddKw==
-----END CERTIFICATE-----