Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3135322e302f32322d3234203d3e203133393939.roa
File:                     3230302e35362e3135322e302f32322d3234203d3e203133393939.roa (raw, json)
Hash identifier:          Lt2nYO+f+4dIGolBvkS2G+M8+1Dxwc7IYgk1B9ocqHs=
Subject key identifier:   4B:32:BD:EB:90:80:4C:C7:94:A2:28:20:A1:A5:CF:3F:81:91:96:26
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       3767CC2FEFC87320D30238BD17A3AEDF845BD564
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3135322e302f32322d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:09 +0000
ROA not before:           Thu 23 May 2024 04:25:09 +0000
ROA not after:            Thu 22 May 2025 04:30:09 +0000
asID:                     13999
IP address blocks:        200.56.152.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:67:cc:2f:ef:c8:73:20:d3:02:38:bd:17:a3:ae:df:84:5b:d5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:09 2024 GMT
            Not After : May 22 04:30:09 2025 GMT
        Subject: CN=4B32BDEB90804CC794A22820A1A5CF3F81919626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7c:a2:46:ed:0c:99:54:db:8f:97:95:07:32:
                    14:33:7c:97:0c:eb:f1:17:fb:87:37:4b:8d:f0:86:
                    3e:ea:7f:86:aa:a7:49:2f:25:f2:b9:33:f3:5a:0a:
                    1e:7e:27:d8:77:74:7e:74:42:6f:60:78:30:bf:24:
                    25:df:18:70:40:05:39:db:73:5d:1d:92:13:0e:fd:
                    83:6a:e8:ba:62:2f:e4:d8:d1:ea:44:b8:5f:d8:6a:
                    8c:74:b4:b0:df:d9:7d:f9:19:b8:b2:44:62:47:84:
                    1a:ce:ec:bf:37:6a:49:46:87:2d:ff:7f:f3:4a:67:
                    d3:1c:93:46:43:1f:71:d8:25:27:38:91:3c:93:a3:
                    f8:ce:8c:b0:c1:c4:ef:9b:0a:be:58:d1:1d:a8:d0:
                    01:6d:ff:16:74:11:21:af:03:54:a2:92:24:00:f8:
                    5a:27:9b:f5:c3:35:7a:d5:5a:99:c7:d9:56:61:f0:
                    f9:33:a2:fc:ac:2b:94:9c:0e:4c:11:81:18:9e:e2:
                    cb:5a:c7:14:3d:b1:7d:30:46:a5:b3:1a:a6:bb:f1:
                    34:c2:e3:5f:f9:48:33:75:a9:20:63:00:55:a2:fb:
                    26:f6:bb:ad:fe:4d:42:da:01:4b:bc:67:c3:49:95:
                    50:47:14:25:fe:5e:ae:94:79:d7:8e:54:32:bf:b0:
                    c6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:32:BD:EB:90:80:4C:C7:94:A2:28:20:A1:A5:CF:3F:81:91:96:26
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3135322e302f32322d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.56.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:b2:85:2f:6c:63:93:cd:a9:3e:5a:e9:8d:03:03:fa:cc:ad:
         21:f2:18:7c:85:b9:d5:a3:9a:50:e8:43:11:c4:76:68:57:27:
         5e:10:97:38:f2:6a:c0:f7:5a:39:31:54:80:fa:d8:84:05:be:
         79:db:88:8c:f3:5a:ec:87:9b:4f:f8:17:2d:49:85:a0:1a:da:
         23:8e:3e:24:7b:5d:78:6a:ff:31:bb:84:c2:3b:b8:d6:45:21:
         0f:3c:02:2a:ec:cc:8e:c6:6f:5b:3b:69:bb:69:bb:00:2b:55:
         9c:db:55:df:2d:47:4d:66:71:4e:86:8d:1c:66:f8:a7:00:d2:
         49:10:0a:b7:56:96:61:72:01:a0:ac:06:36:0e:f7:87:fb:86:
         50:02:12:56:d2:22:2d:7a:01:fe:0f:5e:75:6e:c9:36:f9:24:
         18:6d:20:6b:36:1d:b2:a3:2e:f6:b6:9d:72:ad:73:f7:13:82:
         b5:04:2a:c6:24:01:08:ba:99:54:40:ac:68:e7:a3:30:3f:80:
         be:03:8a:00:a0:4b:96:dd:60:fc:1f:4f:38:77:ee:d9:15:a1:
         23:68:35:ae:66:f6:c5:e7:90:47:6d:56:39:bf:03:d8:26:93:
         ab:93:e8:2e:3d:b9:e1:d7:18:e5:b5:71:28:c1:fe:6a:f2:96:
         b9:9e:b7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----