Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3133352e302f32342d3234203d3e203133393939.roa
File:                     3230302e35362e3133352e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          aKFObvkc0zvEdQag+vPg5Tzewn2TNfgDoh7HHgdz7L0=
Subject key identifier:   A3:F7:57:31:E4:60:C6:FE:40:04:CD:CC:C8:10:A5:6E:94:F9:C6:EE
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       5C7FDB3CE132002AAF03D3AE4DFEC8D0C2D8BDF4
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3133352e302f32342d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:10 +0000
ROA not before:           Thu 23 May 2024 04:25:10 +0000
ROA not after:            Thu 22 May 2025 04:30:10 +0000
asID:                     13999
IP address blocks:        200.56.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7f:db:3c:e1:32:00:2a:af:03:d3:ae:4d:fe:c8:d0:c2:d8:bd:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:10 2024 GMT
            Not After : May 22 04:30:10 2025 GMT
        Subject: CN=A3F75731E460C6FE4004CDCCC810A56E94F9C6EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f1:2d:bb:73:8b:9f:5f:20:f2:1c:95:e0:c4:
                    07:cd:97:bd:8b:27:8c:d4:04:f1:93:a2:76:de:31:
                    f1:19:7a:d4:b8:1f:db:d0:25:4c:46:af:6e:96:31:
                    9d:36:95:4a:41:73:0b:8e:43:5c:08:7f:08:7b:70:
                    db:63:bb:82:0c:7d:e9:49:fa:16:57:6e:0e:95:aa:
                    bd:cc:44:f7:f0:5e:e1:03:53:ec:dd:fd:34:e2:37:
                    c4:d9:95:1b:38:8d:d4:b9:68:e9:6e:b3:fb:ba:d1:
                    98:73:50:e3:24:45:0d:36:3c:6f:be:d4:29:a5:10:
                    38:fd:12:00:8a:95:0f:45:b4:e1:6d:54:7e:80:11:
                    90:c2:cb:78:77:15:28:3a:40:ba:88:96:49:62:81:
                    a9:20:b4:da:13:58:2b:d2:e1:d6:7d:9c:0c:aa:ca:
                    04:5e:b6:6a:27:73:2b:ad:9d:37:70:56:c4:29:9a:
                    1c:04:59:dd:90:4b:5e:49:22:c6:c5:85:f3:0c:8c:
                    3d:25:86:63:18:8c:f7:01:92:d1:f6:61:36:e5:82:
                    92:9c:f3:18:5e:f6:8b:ee:8c:bf:b3:ac:81:12:1f:
                    3d:ff:15:a6:73:74:b2:f3:7e:b2:f5:30:fb:27:17:
                    e5:58:0c:1d:b3:e8:20:49:ac:4c:6d:10:dd:0c:c8:
                    a7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F7:57:31:E4:60:C6:FE:40:04:CD:CC:C8:10:A5:6E:94:F9:C6:EE
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3133352e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.56.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:2c:bf:1d:ad:dd:cb:89:00:7d:7c:bf:a3:ea:03:64:67:dc:
         bc:a8:b8:ce:94:e6:ca:f1:6c:b3:5b:7b:ff:37:bb:da:88:64:
         d5:08:a3:16:1d:e0:b4:ba:50:31:f0:16:79:70:2f:1c:44:06:
         39:eb:b7:e1:bc:40:b2:b9:33:e4:81:25:12:ad:29:19:6e:06:
         1c:9f:85:98:60:7a:a6:38:9c:0b:a9:22:40:64:7a:22:62:44:
         4d:7f:1a:e0:b7:60:d6:77:eb:cd:dd:1a:bf:1a:01:fd:29:cf:
         ec:92:6e:b8:bc:4e:b6:af:7b:f3:28:13:2c:3f:a2:bb:44:4b:
         52:6f:1f:5a:f9:07:7f:f3:fa:da:7c:c4:fb:c2:40:2e:db:02:
         ad:16:b0:5c:c6:e5:1b:8c:67:a3:95:81:ae:93:1e:7e:4e:0c:
         48:7d:8e:8f:7c:34:0b:d6:03:64:c2:eb:30:6c:0f:93:97:70:
         a3:36:92:35:63:70:ef:6e:e2:61:8d:2c:b3:e1:37:59:d3:47:
         a3:21:93:d4:c2:29:c0:13:3c:6c:f0:2b:90:36:b1:f7:ee:49:
         96:75:8b:da:e6:f4:94:8c:9c:cb:6b:85:1b:6c:bd:48:43:80:
         a0:0b:a8:8d:a6:f2:40:27:93:b7:9d:5f:95:57:96:12:67:c8:
         8f:9c:e9:13
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXH/bPOEyACqvA9OuTf7I0MLYvfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxRjVDNzUzRUZEQjdGODQ3NkM2M0JCQjQxNDE3QjhF
MTk0QTJBMzAeFw0yNDA1MjMwNDI1MTBaFw0yNTA1MjIwNDMwMTBaMDMxMTAvBgNV
BAMTKEEzRjc1NzMxRTQ2MEM2RkU0MDA0Q0RDQ0M4MTBBNTZFOTRGOUM2RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8S27c4ufXyDyHJXgxAfNl72L
J4zUBPGTonbeMfEZetS4H9vQJUxGr26WMZ02lUpBcwuOQ1wIfwh7cNtju4IMfelJ
+hZXbg6Vqr3MRPfwXuEDU+zd/TTiN8TZlRs4jdS5aOlus/u60ZhzUOMkRQ02PG++
1CmlEDj9EgCKlQ9FtOFtVH6AEZDCy3h3FSg6QLqIlkligakgtNoTWCvS4dZ9nAyq
ygRetmoncyutnTdwVsQpmhwEWd2QS15JIsbFhfMMjD0lhmMYjPcBktH2YTblgpKc
8xhe9ovujL+zrIESHz3/FaZzdLLzfrL1MPsnF+VYDB2z6CBJrExtEN0MyKetAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUo/dXMeRgxv5ABM3MyBClbpT5xu4wHwYDVR0j
BBgwFoAUwB9cdT79t/hHbGO7tBQXuOGUoqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQzAxRjVDNzUzRUZEQjdG
ODQ3NkM2M0JCQjQxNDE3QjhFMTk0QTJBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDFGNUM3NTNFRkRCN0Y4NDc2
QzYzQkJCNDE0MTdCOEUxOTRBMkEzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYxNTY4RDhDOUFERERDQTNDRTc3MDM5NzI3N0Q1Mzk2QjYzMTc0REIw
QzdCMDhCNTc4NjMzQkMzMjY3RTE0Ny8wLzMyMzAzMDJlMzUzNjJlMzEzMzM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg4hzAN
BgkqhkiG9w0BAQsFAAOCAQEAgCy/Ha3dy4kAfXy/o+oDZGfcvKi4zpTmyvFss1t7
/ze72ohk1QijFh3gtLpQMfAWeXAvHEQGOeu34bxAsrkz5IElEq0pGW4GHJ+FmGB6
pjicC6kiQGR6ImJETX8a4Ldg1nfrzd0avxoB/SnP7JJuuLxOtq978ygTLD+iu0RL
Um8fWvkHf/P62nzE+8JALtsCrRawXMblG4xno5WBrpMefk4MSH2Oj3w0C9YDZMLr
MGwPk5dwozaSNWNw727iYY0ss+E3WdNHoyGT1MIpwBM8bPArkDax9+5JlnWL2ub0
lIycy2uFG2y9SEOAoAuojabyQCeTt51flVeWEmfIj5zpEw==
-----END CERTIFICATE-----