Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3134392e302f32342d3234203d3e203133393939.roa
File:                     3230302e35362e3134392e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          PkRczKxwBQDR+6q1tPcg72AtsPlL3Ce/nK4f5VOXuZA=
Subject key identifier:   6B:4D:C1:C3:C0:88:EF:2C:CA:88:26:46:A4:A6:C2:7E:12:35:39:BC
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       0D22237501F7A5A2DF6F0C5427B0D1A8B764396B
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3134392e302f32342d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:19 +0000
ROA not before:           Thu 23 May 2024 04:25:19 +0000
ROA not after:            Thu 22 May 2025 04:30:19 +0000
asID:                     13999
IP address blocks:        200.56.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:22:23:75:01:f7:a5:a2:df:6f:0c:54:27:b0:d1:a8:b7:64:39:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:19 2024 GMT
            Not After : May 22 04:30:19 2025 GMT
        Subject: CN=6B4DC1C3C088EF2CCA882646A4A6C27E123539BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0c:50:16:66:9d:71:a4:f6:74:67:16:48:a3:
                    57:7b:19:ae:d6:70:d3:3c:01:21:11:2a:68:f9:94:
                    45:38:fa:33:53:62:62:42:a0:ef:37:e8:c3:3e:3b:
                    43:c7:9b:31:07:f7:5d:13:a8:26:b9:87:dd:e8:c8:
                    d8:dd:0b:24:f0:bd:66:d9:c1:8c:bd:ab:9c:1c:f4:
                    8b:ce:c1:8c:e4:a4:1d:61:9c:02:3b:a0:b1:50:d0:
                    49:98:bd:a8:50:b8:89:72:af:23:5a:ed:52:58:38:
                    ab:04:7a:1f:c6:c5:79:a8:e8:2d:90:21:9b:3f:2a:
                    99:d3:f7:85:40:09:9d:1d:74:39:25:ea:67:0d:a2:
                    73:2f:77:5d:94:c7:a9:64:a4:d2:46:70:f7:ae:38:
                    cb:6c:d2:ce:78:01:0a:6a:1a:cf:ba:b6:a8:01:3b:
                    2a:b4:35:72:85:58:4e:ea:62:f2:54:2e:97:b8:f8:
                    cb:0a:4e:19:05:2f:b5:74:6e:0c:95:b0:b6:b0:1e:
                    95:52:d4:62:5c:a8:9a:85:5a:a4:14:aa:d8:a4:55:
                    23:06:b4:ff:79:ca:a8:67:f8:59:37:a6:71:80:57:
                    e8:48:47:8a:2a:5d:3a:7d:f1:6f:2e:20:cc:e6:4e:
                    b8:45:f1:02:f3:13:47:ee:cc:d6:10:cb:53:34:60:
                    f5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4D:C1:C3:C0:88:EF:2C:CA:88:26:46:A4:A6:C2:7E:12:35:39:BC
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3134392e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.56.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:3e:de:3e:65:97:57:1d:2d:f9:4c:22:70:18:38:39:02:9e:
         d5:f6:83:55:41:44:84:40:b2:fb:21:cc:91:b4:ff:b5:ee:ec:
         11:bb:2e:b3:84:e3:f6:47:87:22:59:52:86:27:d8:7e:1b:15:
         d3:eb:e1:5e:9f:57:76:53:1e:a1:e4:36:9f:97:49:fa:85:6c:
         f7:3d:c2:a7:68:f0:37:e2:0c:50:63:7a:bc:bb:fd:11:40:96:
         4a:18:9e:3b:39:65:37:1b:0d:62:59:44:f6:60:89:f8:cf:ab:
         9b:28:07:3e:61:96:79:9d:ec:df:7c:93:58:25:5c:af:34:ff:
         c5:1e:80:00:17:5e:d5:2d:b1:df:1e:88:cd:01:18:64:d1:f4:
         05:7d:e5:36:9a:14:ed:4d:e1:b2:39:15:ee:5e:1f:bf:e9:7f:
         d5:74:2f:fd:96:ef:db:c8:4f:02:a5:63:41:de:71:c7:0d:de:
         12:67:90:45:67:a3:a7:ea:9f:ce:0d:39:95:48:3b:f4:6b:41:
         76:ca:6e:b5:89:21:dd:64:1a:11:f5:94:24:fd:e6:e5:73:c1:
         e2:c1:84:21:44:af:5a:0c:0c:3f:8f:d6:8f:5a:00:2a:72:9b:
         5f:70:ad:3a:9e:e2:0d:7d:83:7e:68:b1:93:e4:7c:aa:12:85:
         6e:52:2b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----