Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3135382e302f32342d3234203d3e203133393939.roa
File:                     3230302e35362e3135382e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          JLE9ObMlQ0pI1pRFWO+vfTGfAQ8Vq5l3+aJUCBzNreo=
Subject key identifier:   58:EB:79:5B:DB:CB:79:ED:5C:4D:B8:71:8B:A3:81:E2:D6:9B:B9:2F
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       7D44E0AD14644A00C4B8D97A559F622D30B0B386
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3135382e302f32342d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:08 +0000
ROA not before:           Thu 23 May 2024 04:25:08 +0000
ROA not after:            Thu 22 May 2025 04:30:08 +0000
asID:                     13999
IP address blocks:        200.56.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:44:e0:ad:14:64:4a:00:c4:b8:d9:7a:55:9f:62:2d:30:b0:b3:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:08 2024 GMT
            Not After : May 22 04:30:08 2025 GMT
        Subject: CN=58EB795BDBCB79ED5C4DB8718BA381E2D69BB92F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c0:5b:b1:a2:bd:89:db:4a:57:27:e9:64:9b:
                    30:22:b6:e8:90:87:47:21:b8:d5:40:ef:da:7a:92:
                    20:69:9d:61:fc:93:9b:19:d4:83:e5:e8:16:8f:56:
                    87:59:aa:7b:b6:b5:f6:59:51:63:5a:94:db:02:cc:
                    54:8c:ff:b7:c1:19:f9:f4:be:31:20:0f:47:7b:f1:
                    d8:31:bc:c3:56:dc:26:89:51:f4:0e:ba:7c:18:20:
                    7a:0f:6f:1f:33:bd:8c:43:6f:08:e8:8d:1b:60:60:
                    37:a5:be:9a:d9:b6:77:1f:1b:84:82:7b:3f:ad:3c:
                    4a:9f:db:44:48:68:1c:8f:fa:78:09:b8:fa:2a:58:
                    a4:b3:20:de:51:d9:40:0f:a1:6d:ca:61:34:23:34:
                    a9:3c:81:03:63:e0:5d:fe:a6:7d:87:ce:2d:e1:de:
                    88:68:cf:3d:66:85:e4:1d:29:eb:31:72:33:84:3b:
                    bd:5a:22:ec:db:cc:df:ed:b2:db:ad:63:ec:92:8c:
                    a0:05:33:af:02:05:da:b2:9c:32:36:c0:e7:b1:ef:
                    83:5c:ec:5b:17:77:2a:32:28:4f:aa:7d:45:03:db:
                    b8:b3:a1:d6:51:88:63:67:b0:09:4a:ea:d0:f7:e7:
                    57:ee:cc:6e:96:d4:bc:7d:9f:bc:22:84:45:41:7f:
                    27:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EB:79:5B:DB:CB:79:ED:5C:4D:B8:71:8B:A3:81:E2:D6:9B:B9:2F
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3135382e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.56.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:63:11:8a:c3:7e:a9:78:64:19:12:62:13:0a:27:8a:66:09:
         a4:3c:9c:5a:66:7f:90:81:7d:86:65:2e:92:20:6d:4f:64:1f:
         72:84:29:57:75:83:41:cd:f9:6e:a8:f8:7d:b8:ad:e8:1e:8d:
         3f:d2:5f:9d:5a:29:9c:88:b3:b1:a7:9d:72:58:6f:8e:fe:d0:
         76:1f:6e:31:00:c9:16:dd:6a:d7:b0:a2:04:f6:07:0d:23:44:
         74:67:82:87:0e:36:fa:3e:68:4e:f3:95:2f:92:04:a5:a7:a8:
         bf:ed:77:2b:08:c1:05:72:08:74:5f:3c:90:75:ee:29:25:d3:
         40:25:d7:b3:4d:b2:3b:76:0c:7c:c7:96:a5:63:3a:9c:e0:28:
         6e:52:30:fb:70:dc:bb:e8:ec:5a:d3:a4:e4:7f:20:0a:bf:68:
         97:14:81:e6:ca:c4:8a:28:be:ea:68:4f:31:53:b2:48:44:c6:
         87:32:f5:3b:91:7e:de:2b:73:be:bd:1b:ae:0f:a6:a1:ea:2c:
         1e:63:b9:e3:0a:33:3f:37:46:23:ef:b7:eb:43:9e:9a:e8:b9:
         c9:a0:b4:59:f3:d8:4e:5b:51:32:14:0d:25:11:df:5b:7e:fe:
         4a:be:34:da:1e:c9:73:21:24:e6:70:9b:0a:3b:b5:7b:a1:86:
         e6:29:f1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----