Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3133322e302f32332d3234203d3e203133393939.roa
File:                     3230302e35362e3133322e302f32332d3234203d3e203133393939.roa (raw, json)
Hash identifier:          KI1w88ERp5mRl8oSIRJG92GbofQCdbPHz4TcCqh64rk=
Subject key identifier:   AA:0F:BB:49:40:7C:08:A1:8C:AD:65:94:E1:0B:0C:E6:65:6D:57:CD
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       50F6636BA87CF7F3D2CF7E335E906C25E57AB05A
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3133322e302f32332d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:18 +0000
ROA not before:           Thu 23 May 2024 04:25:18 +0000
ROA not after:            Thu 22 May 2025 04:30:18 +0000
asID:                     13999
IP address blocks:        200.56.132.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f6:63:6b:a8:7c:f7:f3:d2:cf:7e:33:5e:90:6c:25:e5:7a:b0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:18 2024 GMT
            Not After : May 22 04:30:18 2025 GMT
        Subject: CN=AA0FBB49407C08A18CAD6594E10B0CE6656D57CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:65:0d:98:97:28:df:35:08:c2:36:6b:b1:70:
                    c0:7b:c6:10:20:fd:8c:76:9a:92:c8:7e:ac:a1:f8:
                    44:ae:6e:00:c1:f8:02:98:4e:24:bb:64:a1:ed:13:
                    54:b7:1e:1e:ee:36:0c:66:b2:eb:d5:28:d2:71:77:
                    3a:3b:44:e3:e4:75:9a:43:de:22:e6:71:30:fc:18:
                    4e:ab:31:58:48:68:37:ab:3a:1d:ba:50:cd:4e:a9:
                    fb:e4:df:ff:b8:fd:fb:f8:d4:14:d2:bb:09:fe:e8:
                    d8:81:3c:8d:7a:6d:90:89:41:f6:68:31:01:57:56:
                    a5:61:17:a1:75:9e:c2:7c:18:e3:b3:77:b2:92:f9:
                    c2:9d:45:33:8e:6d:d9:17:49:98:2f:14:0c:72:d2:
                    c1:c8:e7:49:aa:f6:66:6c:e8:d0:ce:94:5b:88:60:
                    1b:e5:53:c2:69:b1:be:71:24:a7:b7:0d:69:aa:04:
                    3d:4d:bd:47:82:bc:77:91:dd:1a:11:4c:07:39:9d:
                    2c:b3:b6:fe:f6:67:20:3f:89:48:19:46:2a:c9:54:
                    94:66:79:29:a9:23:bc:bc:fd:ff:33:37:0f:0e:aa:
                    c2:f8:58:64:81:c8:b7:dd:c3:71:e5:b2:73:30:9c:
                    ad:15:0d:43:bf:d4:2a:4e:33:a1:4e:5c:50:3d:11:
                    04:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0F:BB:49:40:7C:08:A1:8C:AD:65:94:E1:0B:0C:E6:65:6D:57:CD
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3133322e302f32332d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.56.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:9f:5d:1a:f2:fc:13:66:a4:62:75:b1:6a:4b:cf:ef:b3:5e:
         04:2c:40:97:27:5a:37:8b:2c:89:cc:ad:0c:44:61:4c:51:ad:
         21:5a:5f:fe:51:54:98:ec:03:2a:d5:97:a6:50:ba:2e:ff:da:
         a6:35:32:2c:c6:30:2d:03:3f:8d:c2:2e:c3:7a:04:80:0f:77:
         67:b2:e8:d1:17:de:d5:38:bf:2a:8a:ae:d0:4c:c0:ec:df:3a:
         a3:c9:97:45:cd:d8:81:2e:8c:69:0c:99:20:7e:2d:1b:25:91:
         22:6f:89:f9:bb:26:52:e6:ab:16:52:fb:c0:e8:3c:59:11:a3:
         df:70:66:74:ed:a3:0a:ad:f3:e0:9e:25:1e:d7:0b:26:70:95:
         fa:2a:b9:04:8a:41:36:65:9b:bd:81:4c:a0:01:fb:d4:b0:7e:
         41:b0:9f:a0:21:59:42:5f:6a:ab:56:eb:71:7c:c4:cc:58:c7:
         4a:b4:f4:52:47:7e:cc:4d:1f:19:67:96:d9:6e:e2:12:1a:b5:
         4a:6b:e1:98:65:c0:53:7c:4c:60:64:8e:79:e3:9e:f2:36:0b:
         ef:aa:3b:03:0b:78:cb:4f:02:e2:6c:f6:2c:49:df:a0:d5:8f:
         10:cf:47:70:05:c3:16:64:b5:7e:10:5e:22:8e:77:53:c4:54:
         f3:4b:f8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----