Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e3132342e302f32322d3232203d3e203237363732.roa
File:                     3230302e37372e3132342e302f32322d3232203d3e203237363732.roa (raw, json)
Hash identifier:          UqYX6fr6O2xihJi2gf5oL9RWMT7u41UCvpql+jqfV8k=
Subject key identifier:   AD:59:91:82:A9:48:A0:AE:D4:EC:F8:79:B7:D1:87:22:97:58:DB:4E
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       0288F3F56E84FBBEF13139E76659A8A429257971
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e3132342e302f32322d3232203d3e203237363732.roa
Signing time:             Thu 23 May 2024 04:30:08 +0000
ROA not before:           Thu 23 May 2024 04:25:08 +0000
ROA not after:            Thu 22 May 2025 04:30:08 +0000
asID:                     27672
IP address blocks:        200.77.124.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:88:f3:f5:6e:84:fb:be:f1:31:39:e7:66:59:a8:a4:29:25:79:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:08 2024 GMT
            Not After : May 22 04:30:08 2025 GMT
        Subject: CN=AD599182A948A0AED4ECF879B7D187229758DB4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:67:72:07:c5:27:f0:99:cc:58:e4:7a:81:
                    c9:c6:5f:1b:0d:06:af:6b:62:b5:85:b9:a3:14:b2:
                    e9:ee:d2:ab:73:fd:c0:35:30:76:85:92:78:f3:cb:
                    08:f6:bd:a4:e4:96:48:b4:4f:c4:c8:ab:aa:e8:a4:
                    2a:c1:7f:e7:77:26:3c:81:fa:0b:37:08:ec:62:8e:
                    eb:b6:41:97:4a:b0:4f:64:c2:16:0b:3b:ff:4b:90:
                    7a:bf:c9:2c:07:6b:eb:b3:b6:29:27:9b:e6:dc:20:
                    4e:09:ce:45:21:ed:9d:4d:76:59:46:e7:a6:8a:48:
                    5f:fe:75:5c:59:e0:76:ef:5a:73:2e:d4:2f:3b:8c:
                    1d:46:15:76:7b:76:4b:96:4f:7f:4e:49:c0:57:53:
                    4d:84:fa:49:8a:f1:d7:fa:4a:a6:44:a2:83:af:8a:
                    58:5e:b5:94:e6:a2:83:91:7c:36:59:28:17:24:c2:
                    c2:fb:1f:dc:3f:89:84:ec:91:6e:a8:2e:40:6f:27:
                    0f:09:b6:79:67:bf:51:d9:99:dd:66:a2:87:d8:30:
                    bc:76:82:1d:a7:1c:ce:14:e2:54:a2:58:74:7e:72:
                    9b:ff:88:58:2e:d4:79:78:78:3b:68:ee:b9:18:a4:
                    a0:a5:99:6c:02:da:88:87:45:86:87:27:7a:8d:b3:
                    1e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:59:91:82:A9:48:A0:AE:D4:EC:F8:79:B7:D1:87:22:97:58:DB:4E
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e3132342e302f32322d3232203d3e203237363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:34:b5:ab:22:0c:01:64:e4:4d:de:cb:fa:67:ef:6e:4d:bb:
         d9:59:84:93:55:ec:34:7f:52:ed:62:57:72:bb:40:b8:4b:bd:
         3f:71:9e:66:ef:5b:0c:dd:77:08:07:45:a9:82:b7:38:d4:37:
         0d:d0:53:50:bc:23:f0:f1:ce:ea:92:ad:c1:a2:70:5a:fb:66:
         90:0e:09:d0:1d:60:9c:63:60:55:e7:1f:88:db:74:42:c6:02:
         a1:aa:f3:74:7d:e7:07:07:5b:10:52:84:3f:ca:8e:db:95:04:
         97:dc:73:86:93:07:7c:e4:4f:0b:18:53:2d:53:d4:3a:78:88:
         5d:cf:27:69:43:42:cc:12:43:e2:01:13:8e:43:91:d4:3f:ba:
         06:ee:ce:cc:56:71:c3:65:e1:19:80:84:f8:56:01:3f:7b:bd:
         e0:f9:ed:f9:1b:d1:63:ff:32:01:9e:a9:b5:a6:79:a1:47:85:
         fe:63:07:62:55:b1:cd:90:a8:bf:b8:de:31:6b:39:42:cd:d8:
         6a:ff:14:4a:ea:77:f0:55:58:e5:da:b0:7f:0d:56:73:01:af:
         9d:38:aa:b9:96:f2:8a:f7:1a:14:c7:e8:db:55:8c:2f:8e:29:
         68:d9:56:5e:38:7f:07:96:0e:3f:45:a1:e1:9e:dc:e1:af:57:
         d8:f2:98:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----