Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3230342e302f32332d3234203d3e203133393939.roa
File:                     3230302e35322e3230342e302f32332d3234203d3e203133393939.roa (raw, json)
Hash identifier:          YNTouJFzUXIMGtZCGdCjBUwNEu6gEXdhpn3NK6dj58I=
Subject key identifier:   1F:FF:1E:8D:61:5E:AD:82:D4:76:B8:BB:A2:9E:85:DB:3A:94:D6:9C
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       166A3DD000F4AF3C4BF0E046761C546FB752843C
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3230342e302f32332d3234203d3e203133393939.roa
Signing time:             Tue 21 May 2024 03:55:04 +0000
ROA not before:           Tue 21 May 2024 03:50:04 +0000
ROA not after:            Tue 20 May 2025 03:55:04 +0000
asID:                     13999
IP address blocks:        200.52.204.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6a:3d:d0:00:f4:af:3c:4b:f0:e0:46:76:1c:54:6f:b7:52:84:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 21 03:50:04 2024 GMT
            Not After : May 20 03:55:04 2025 GMT
        Subject: CN=1FFF1E8D615EAD82D476B8BBA29E85DB3A94D69C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:63:1d:2d:91:13:d5:ab:2b:28:75:d3:8c:d6:
                    9f:20:01:e7:90:68:27:14:fd:27:a3:38:c0:f9:80:
                    d4:ae:39:94:4b:6b:83:d8:46:24:2e:81:e2:b1:18:
                    ea:db:87:fa:5f:81:c5:1a:01:4a:0e:6c:d6:c0:a8:
                    dd:bb:53:ec:b7:3d:5c:34:8e:7a:a8:34:f6:83:a5:
                    40:97:05:6d:de:4a:e5:17:45:f7:6b:26:e1:d9:ec:
                    5e:23:12:94:3f:bf:5e:07:03:c5:b4:73:53:a5:cb:
                    57:00:ee:3e:53:23:44:ca:6d:f0:4f:d1:fe:59:b1:
                    06:4f:3b:3b:a9:b4:59:04:00:98:c7:d6:e1:2b:76:
                    9d:dc:67:79:22:89:8f:0b:5e:36:30:db:02:cf:01:
                    84:6d:84:d1:15:99:04:ff:bf:71:d7:cf:42:d6:ed:
                    32:e6:34:f9:14:b0:07:d4:b9:bb:99:b1:49:ec:ed:
                    3a:ab:83:d8:43:c4:a7:0b:79:96:d6:4f:33:ec:03:
                    8f:13:ce:16:5c:37:71:a7:89:5a:47:aa:7e:82:e8:
                    aa:bd:f0:e1:78:4a:17:33:77:5f:7a:24:ee:a5:98:
                    d5:92:a8:03:c0:15:09:97:7e:d5:d3:be:2e:3b:e0:
                    ec:b2:19:8f:ee:b1:c3:25:08:aa:46:ca:ce:e9:8f:
                    35:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FF:1E:8D:61:5E:AD:82:D4:76:B8:BB:A2:9E:85:DB:3A:94:D6:9C
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3230342e302f32332d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:43:2a:6d:37:02:b2:d4:a7:b0:6d:68:da:c3:44:6f:31:83:
         73:81:6e:d5:59:dc:c7:07:46:7c:5b:4f:83:e0:fe:2c:a3:89:
         cd:4b:5a:d2:c4:bd:19:8e:da:30:e4:78:06:05:75:94:9c:69:
         c8:00:2d:01:2b:cb:fb:0a:23:c3:fe:48:89:7e:3e:56:0a:38:
         c9:bf:34:db:4b:ef:77:34:69:f5:7e:2b:70:dc:5a:37:ba:7f:
         42:8b:6e:5c:54:7f:45:78:e7:95:98:95:87:a3:fe:6f:81:1b:
         3d:55:de:77:51:aa:4e:67:62:7a:f0:30:d8:f4:f0:f1:89:cb:
         07:8a:74:81:c6:67:0b:43:5f:e4:6c:7b:88:00:c3:44:5a:0d:
         ca:71:d4:95:59:a3:13:2a:f9:e7:79:4e:f1:01:86:80:fb:5f:
         e8:7c:1b:45:98:e7:4d:83:1a:9c:11:c6:e6:11:e9:3a:00:e9:
         5c:84:4f:34:3e:2a:9f:6c:c8:2d:f1:62:09:db:b4:b7:6b:8a:
         15:20:58:a4:87:61:4b:5b:08:35:6f:e5:05:d4:87:44:47:8c:
         77:9f:7a:e7:53:18:ba:47:5d:54:1e:7a:fc:8c:25:63:ea:25:
         d4:3b:e2:0f:b2:76:a1:38:2e:a7:10:af:3e:c6:32:34:7f:1e:
         63:a2:22:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----