Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3133302e302f32332d3234203d3e20323632393136.roa
File:                     3230302e35362e3133302e302f32332d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          2fXxjXGtjGko/BBiXCgqOXQ4gutAHxYyGKYDLX/HNAI=
Subject key identifier:   C2:7C:8C:3E:54:EA:A7:D9:91:E0:A3:E8:D9:95:37:13:41:77:62:37
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       38B69EC11642FD1EB8F018C89304FB17A4E49E67
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3133302e302f32332d3234203d3e20323632393136.roa
Signing time:             Thu 23 May 2024 04:30:11 +0000
ROA not before:           Thu 23 May 2024 04:25:11 +0000
ROA not after:            Thu 22 May 2025 04:30:11 +0000
asID:                     262916
IP address blocks:        200.56.130.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b6:9e:c1:16:42:fd:1e:b8:f0:18:c8:93:04:fb:17:a4:e4:9e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:11 2024 GMT
            Not After : May 22 04:30:11 2025 GMT
        Subject: CN=C27C8C3E54EAA7D991E0A3E8D995371341776237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:67:3e:7d:d7:4d:75:7d:1b:6c:d5:58:1d:
                    40:65:0a:d6:00:5c:8a:2b:f4:18:62:05:80:61:74:
                    cd:1d:f3:f1:21:60:fa:50:47:49:d7:ad:5d:9b:16:
                    29:ec:51:64:5d:ea:86:ba:fe:c4:7d:05:b6:86:85:
                    23:8c:2f:ce:fb:19:4b:c5:a9:3f:ec:43:ca:4d:c7:
                    79:f5:35:b6:4b:eb:a8:0a:ea:1a:36:4d:c3:62:57:
                    fa:87:ab:fa:71:db:e1:ca:96:dd:a0:94:27:ba:73:
                    4a:6b:a7:78:44:53:25:63:9a:50:8e:fa:fb:3e:0a:
                    24:58:74:14:20:e2:fa:e1:98:30:a2:2f:fb:d3:6b:
                    8e:1c:70:a6:ef:8e:3b:23:93:48:29:fc:02:21:ec:
                    fe:cd:bd:61:a7:0c:25:45:d9:21:58:9f:ed:ec:5e:
                    20:77:45:55:de:f6:a3:5b:d9:45:a4:85:6b:35:7a:
                    32:e5:ed:31:4e:a7:9f:3b:5d:c0:4e:64:66:70:88:
                    f1:59:dd:71:84:e7:1e:9f:44:14:9e:b6:3e:34:f7:
                    93:ca:c5:53:01:b1:5d:00:f2:40:3a:0b:12:11:11:
                    4d:34:2d:34:ee:78:54:51:07:5d:c1:e8:89:4e:d2:
                    c5:9b:de:34:2b:04:c2:2e:0b:34:04:80:03:56:c0:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7C:8C:3E:54:EA:A7:D9:91:E0:A3:E8:D9:95:37:13:41:77:62:37
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3133302e302f32332d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.56.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:61:27:6c:23:cb:87:dc:76:a7:f3:c0:59:f7:5a:c8:0b:ff:
         f7:e1:55:ea:c9:21:04:29:f1:e6:b2:8c:67:ca:9b:6b:bb:db:
         9b:d2:08:3a:e2:72:84:96:94:24:5e:26:59:a2:e3:d7:a9:92:
         17:e2:cf:ac:cf:45:17:ac:1e:59:36:ed:dd:ef:93:a8:c6:16:
         12:b9:54:93:d8:38:5e:26:82:0d:0b:0f:f9:a8:dc:cb:29:1c:
         14:63:5a:48:0b:c3:1b:fc:e6:82:47:dc:36:3f:00:fd:4d:d8:
         d2:98:81:17:73:c1:3b:f4:3b:15:ea:86:d9:55:9a:a1:8b:43:
         7a:c9:34:9a:b2:77:d1:23:64:67:68:6e:fc:c9:4b:65:55:e2:
         06:6c:44:ca:41:e5:63:d3:38:54:b4:cf:c1:38:9d:65:5e:51:
         c3:84:bf:42:9d:88:5e:7f:e7:c8:3f:34:ec:12:1b:60:bd:13:
         9a:ad:21:04:34:35:53:89:ed:76:93:c5:3c:08:bd:9b:2b:d8:
         7c:05:1b:48:24:5d:a8:b1:17:fa:90:dc:1e:02:d7:b5:32:94:
         44:1d:cf:5c:3b:2c:14:68:f1:60:68:9e:5b:8b:79:7c:1b:82:
         97:92:02:f6:76:04:ef:ba:5b:6c:7a:92:67:f7:f0:58:b3:1d:
         81:4c:29:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----