Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3137362e302f32332d3234203d3e203133393939.roa
File:                     3230302e35362e3137362e302f32332d3234203d3e203133393939.roa (raw, json)
Hash identifier:          Ky/N4vaAT107da7fitN3Eq965rWJ4x3MpXANPdjtUyQ=
Subject key identifier:   2B:DF:24:6C:7A:5B:5D:12:6A:48:8D:22:64:CA:75:4F:38:7F:F5:F1
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       7EE2C6E4CA1A9F28617F1B95074981EED28A01
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3137362e302f32332d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:07 +0000
ROA not before:           Thu 23 May 2024 04:25:07 +0000
ROA not after:            Thu 22 May 2025 04:30:07 +0000
asID:                     13999
IP address blocks:        200.56.176.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e2:c6:e4:ca:1a:9f:28:61:7f:1b:95:07:49:81:ee:d2:8a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:07 2024 GMT
            Not After : May 22 04:30:07 2025 GMT
        Subject: CN=2BDF246C7A5B5D126A488D2264CA754F387FF5F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d5:1e:99:1c:40:2f:01:40:d6:b8:36:fa:5f:
                    42:82:a7:05:b3:41:15:b2:d6:bd:22:73:ae:40:89:
                    f9:c3:33:ea:66:d3:49:6f:53:6b:0f:6a:6a:b8:0f:
                    96:99:30:5a:66:ef:44:8d:45:bd:05:36:cc:e1:8d:
                    2d:b6:6a:5d:9b:82:92:09:de:3f:2b:17:57:75:2f:
                    7b:a6:09:d5:9d:5c:ab:aa:81:1b:f6:bc:e4:0e:eb:
                    17:15:4b:67:a8:6b:17:cf:2d:11:f0:21:1a:2f:8c:
                    a0:19:91:42:61:b3:9d:82:19:49:2a:42:eb:ba:4f:
                    d0:28:44:40:53:78:5f:45:63:a1:6b:d6:ad:26:05:
                    63:e4:3c:6a:a0:cd:56:57:82:73:fa:11:72:87:71:
                    e2:65:62:7d:2c:79:54:b9:c2:ec:16:b3:57:43:57:
                    c8:92:ce:40:fc:2c:4b:c6:51:90:c2:1b:cc:72:1b:
                    03:8d:2d:32:06:db:7e:3a:2c:aa:ab:6e:17:03:fd:
                    05:a4:a7:79:93:3d:72:fb:b9:55:10:f6:09:27:72:
                    c1:ae:0d:6e:91:61:62:60:b5:93:4c:94:f1:6f:88:
                    06:53:f0:24:76:74:9e:ce:3a:29:61:fe:2b:33:ec:
                    b5:8e:5a:e3:99:1d:71:d1:10:72:c3:0a:ca:c9:db:
                    de:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DF:24:6C:7A:5B:5D:12:6A:48:8D:22:64:CA:75:4F:38:7F:F5:F1
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3137362e302f32332d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.56.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:e6:33:d6:1d:4b:2b:08:11:6f:6e:0a:4f:19:0b:11:bd:17:
         dd:a7:b3:8c:cc:c7:cf:05:94:73:00:18:6b:da:0e:b2:1f:fe:
         d1:27:c3:81:95:15:ea:3d:28:f1:7b:0e:3d:c2:71:35:2f:ea:
         d9:24:18:dd:4d:21:12:81:1c:46:ba:ac:d7:55:cf:5a:2e:f3:
         62:f0:ae:12:92:60:43:ba:52:f1:a0:ff:82:75:d4:01:46:a9:
         c1:82:87:ec:f0:d0:ac:46:7f:00:b0:41:6d:ed:40:08:00:0f:
         d9:a8:5b:34:5b:bc:f2:04:fc:83:26:e1:88:ae:9f:35:77:10:
         78:85:70:7e:65:02:69:75:75:f4:58:f2:af:13:25:7c:a2:c7:
         c4:4f:9d:3a:be:b8:40:23:58:f7:66:f7:6f:5b:64:47:a9:4f:
         6a:36:06:20:42:11:9e:dd:3d:3a:0a:87:b7:1f:ed:6a:2e:24:
         92:d4:ca:c4:a5:07:6b:e9:e3:a6:ca:5b:1e:6f:db:ac:25:cb:
         ae:a6:a6:9c:9e:43:ea:48:61:32:74:4a:d1:b3:46:a3:17:f0:
         c0:47:7f:ae:5e:7d:56:98:79:c0:df:ca:2b:01:fb:34:91:92:
         f5:99:86:f2:b2:a5:4b:dd:5e:87:9d:db:dd:8c:db:5e:e5:28:
         2c:27:7c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----