Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3230382e302f32302d3234203d3e203133393939.roa
File:                     3230302e35322e3230382e302f32302d3234203d3e203133393939.roa (raw, json)
Hash identifier:          5LDfU/vTCcUEnCj+fMe6Ua40FjalJBHMeHofN3Oj714=
Subject key identifier:   47:C2:4F:94:E2:76:EB:0C:F4:B9:1F:24:5E:13:E2:8A:19:D4:29:A4
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       776602302B39B6AD757D120001F30A7D0120218B
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3230382e302f32302d3234203d3e203133393939.roa
Signing time:             Tue 21 May 2024 03:55:01 +0000
ROA not before:           Tue 21 May 2024 03:50:01 +0000
ROA not after:            Tue 20 May 2025 03:55:01 +0000
asID:                     13999
IP address blocks:        200.52.208.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:66:02:30:2b:39:b6:ad:75:7d:12:00:01:f3:0a:7d:01:20:21:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 21 03:50:01 2024 GMT
            Not After : May 20 03:55:01 2025 GMT
        Subject: CN=47C24F94E276EB0CF4B91F245E13E28A19D429A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:a3:f2:46:cb:b6:e2:a2:ab:6a:c2:2a:ba:
                    16:59:56:20:a9:34:62:8f:93:e7:1c:2f:3a:d2:e8:
                    2c:69:b7:2a:14:74:76:fb:bc:f2:97:e3:ac:ef:42:
                    9c:c1:f4:d7:ee:6f:1a:01:9c:f9:af:8f:ac:c3:bf:
                    4b:86:a2:e9:9e:f3:cb:55:bd:26:17:2e:37:ca:10:
                    48:0b:1a:52:03:f9:78:13:ee:89:ae:5f:58:44:8e:
                    d1:0a:9e:fc:9a:7d:c5:55:0c:85:e8:96:93:59:22:
                    30:82:0f:0b:4b:69:78:6d:47:ce:48:39:81:36:b0:
                    0f:32:a8:f6:61:f9:54:d7:de:be:bf:4f:d6:7a:f8:
                    9b:02:55:3b:0c:c7:74:72:3b:c7:39:db:0e:33:d6:
                    cd:1c:10:3f:06:20:4c:59:1c:b7:fe:25:af:be:5d:
                    16:8b:23:e5:69:36:cd:31:22:60:18:54:1f:09:49:
                    8b:79:0e:8f:8c:25:58:fe:e3:5f:b5:b2:33:95:d2:
                    7f:45:74:78:33:92:6f:5b:96:1f:49:1b:81:79:a0:
                    14:59:c3:d7:b2:7b:98:16:a2:18:8f:a5:ec:9a:30:
                    e8:04:ba:78:ae:a8:2c:a2:93:ee:3d:cd:82:fe:54:
                    34:1b:b1:c7:bb:ad:8a:1b:72:fd:3d:05:38:d9:e7:
                    6f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C2:4F:94:E2:76:EB:0C:F4:B9:1F:24:5E:13:E2:8A:19:D4:29:A4
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35322e3230382e302f32302d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:0d:58:0a:0a:91:a9:30:4f:db:a0:61:af:a8:e5:df:7e:c1:
         9b:c0:ee:44:fb:fe:20:19:87:6f:65:14:58:43:e4:ec:43:62:
         37:f0:37:00:4e:7b:bf:92:44:c5:ea:14:49:54:2d:48:ea:68:
         d3:bf:f6:54:1d:20:ef:e4:26:38:38:06:96:8a:c2:f9:9e:48:
         ab:5a:c8:e0:91:26:03:f3:77:a4:23:fb:d9:58:58:07:14:55:
         3c:ff:ef:fc:c7:90:56:49:5b:d2:3f:51:2e:ad:f3:63:0c:93:
         e5:dc:8f:08:b6:39:73:7c:3d:64:33:fb:59:a9:83:4d:68:d9:
         86:cf:1a:57:50:42:69:e9:e8:3f:f9:a7:2e:bc:57:28:a9:b3:
         96:2d:e1:aa:d4:72:97:3b:c2:c3:b8:bf:f4:f8:13:13:60:4c:
         4e:1b:d6:63:10:c2:85:51:47:3a:34:8e:f2:29:96:2c:d0:54:
         80:c9:03:c0:79:a3:ff:ea:60:b9:8c:09:e8:f3:8b:8e:4c:30:
         b5:c0:3b:cd:c5:9f:73:d1:7a:7a:28:94:ff:98:69:dd:a2:ec:
         27:e4:e8:db:68:c1:fa:42:b5:71:83:ec:68:6c:5a:89:e8:31:
         08:fd:0a:35:bc:b7:23:46:ae:53:c6:1e:79:07:f1:d9:50:ac:
         2c:27:04:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----