Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3134362e302f32342d3234203d3e203133393939.roa
File:                     3230302e35362e3134362e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          4bvcjVx0eiXayhGEgjsMfcQhxJDUVW8S++cXfOVSwz0=
Subject key identifier:   57:82:78:99:A0:D1:B5:9B:56:84:1E:15:99:0D:22:FA:D0:E2:6D:C0
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       461FF57EB03715234781CD28E119A75FDA558F66
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3134362e302f32342d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:14 +0000
ROA not before:           Thu 23 May 2024 04:25:14 +0000
ROA not after:            Thu 22 May 2025 04:30:14 +0000
asID:                     13999
IP address blocks:        200.56.146.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1f:f5:7e:b0:37:15:23:47:81:cd:28:e1:19:a7:5f:da:55:8f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:14 2024 GMT
            Not After : May 22 04:30:14 2025 GMT
        Subject: CN=57827899A0D1B59B56841E15990D22FAD0E26DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:ba:74:20:e3:83:62:72:d6:15:29:a7:75:
                    67:9c:48:62:1b:7b:11:12:9a:52:28:f3:1d:ef:1f:
                    59:dd:18:a5:c6:a8:23:e9:0e:90:5a:92:cc:26:2c:
                    ce:7c:9b:6f:e8:47:0b:59:65:c4:46:f7:44:9d:e9:
                    db:a9:96:0f:90:e6:7a:0c:48:fa:ab:0d:15:9d:7d:
                    e2:af:d0:a3:b7:68:8b:fb:da:97:07:45:3e:67:28:
                    73:7c:52:25:29:49:cb:e9:e7:b1:7b:5c:13:ef:ab:
                    ce:2e:fb:f9:d7:5f:f3:77:0a:cb:2a:89:7b:ed:d3:
                    02:8c:3e:fa:28:cd:38:7e:0f:b5:ce:e9:8d:12:63:
                    27:23:a4:93:cf:fa:50:fb:3c:ce:a8:aa:7d:cb:83:
                    5e:db:ce:66:52:3a:2a:36:c7:41:b0:61:a4:1d:0d:
                    ec:84:ac:a4:f7:2e:48:4b:0c:77:bc:71:49:b7:14:
                    bf:78:2f:cc:76:96:84:7f:3f:ac:70:9b:e9:51:ab:
                    03:20:da:80:ed:60:8e:f5:01:62:f9:2c:11:bf:d0:
                    06:62:d7:ba:9e:53:1f:b0:42:0a:a7:fa:14:ec:6d:
                    37:51:11:47:00:69:74:f4:44:07:98:79:e6:6b:6e:
                    86:dc:94:d4:f1:84:37:36:bf:70:61:b9:d4:88:67:
                    56:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:82:78:99:A0:D1:B5:9B:56:84:1E:15:99:0D:22:FA:D0:E2:6D:C0
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3134362e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.56.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:02:2b:69:94:75:60:06:e8:ba:98:53:d8:17:f5:80:97:3d:
         02:29:98:d4:ae:cb:8b:03:2c:ee:bd:79:f8:9f:64:c1:f2:2c:
         1c:01:f3:cd:77:33:3b:b0:1c:e1:64:fd:7c:c7:0b:e7:44:b9:
         e3:82:2d:c9:a6:8a:f8:be:4c:8d:98:eb:64:19:3d:84:f2:48:
         cd:f1:d7:a1:e2:81:ed:2b:96:b6:ca:d7:9f:79:6a:22:95:1b:
         87:9d:7b:68:fc:2a:36:b0:88:6d:d5:ae:0d:8a:7c:31:71:17:
         7c:27:51:ea:c4:84:9d:31:b8:17:d0:ff:76:38:f3:6a:70:b6:
         39:d0:2b:95:62:fe:b5:87:dd:82:78:e9:59:31:fc:73:9e:f1:
         f8:60:01:c1:d5:21:dd:92:de:b4:0f:30:b9:b5:5e:94:9d:bd:
         76:9b:b2:48:a7:99:3a:7e:ab:2c:d0:27:4b:5d:e1:01:d4:18:
         d1:7f:13:eb:25:62:fc:1b:aa:b3:4d:65:c6:df:7e:e4:7f:ea:
         51:ef:41:c7:33:7b:0e:e0:1c:76:a5:09:fc:b8:49:0d:6a:d8:
         dc:96:72:fc:8f:ff:66:e0:20:8e:8e:dd:1a:70:b2:95:b5:ad:
         56:2e:82:79:dc:fe:82:f4:fa:4e:4b:95:48:b8:0a:b7:3a:81:
         76:f0:00:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----