Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e33322e302f32312d3234203d3e203133393939.roa
File:                     3230302e37372e33322e302f32312d3234203d3e203133393939.roa (raw, json)
Hash identifier:          2DQHgia3j+kWyOUiZmMOkavVQdE7Pkpg0JidvsOF98k=
Subject key identifier:   C8:C3:7C:DA:F3:FC:E4:5D:70:EE:0E:FC:D4:9C:FB:62:5C:16:DF:CF
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       7B9059B91978B51AFA6938B221BB0257E35346F5
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e33322e302f32312d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:15 +0000
ROA not before:           Thu 23 May 2024 04:25:15 +0000
ROA not after:            Thu 22 May 2025 04:30:15 +0000
asID:                     13999
IP address blocks:        200.77.32.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:90:59:b9:19:78:b5:1a:fa:69:38:b2:21:bb:02:57:e3:53:46:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:15 2024 GMT
            Not After : May 22 04:30:15 2025 GMT
        Subject: CN=C8C37CDAF3FCE45D70EE0EFCD49CFB625C16DFCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7f:d7:e5:f7:43:7c:4d:dc:98:71:78:56:7c:
                    9f:75:7b:92:b2:39:23:fe:b5:f0:02:a5:dd:fd:69:
                    c9:f1:6f:5e:4d:cb:70:4d:7e:e5:03:24:ca:2c:90:
                    bf:6b:71:c0:b2:b8:61:7c:e2:bb:c3:87:7b:d9:12:
                    08:d2:28:06:6d:dd:82:35:88:06:b2:f1:3b:24:24:
                    b1:c1:d6:a5:8e:e9:33:d2:bb:b7:2b:12:06:28:f5:
                    dc:9c:25:9b:df:c0:66:a0:70:15:d1:f2:b5:68:11:
                    23:ea:b8:dc:64:ec:0f:92:8e:4b:4c:76:a2:03:49:
                    a4:f0:19:69:3d:4e:d0:17:78:24:18:04:62:72:a4:
                    a1:1c:3a:4e:8b:11:06:cd:e8:db:00:3b:4d:92:e6:
                    8c:31:ff:37:87:45:4b:e3:0e:6e:20:a4:83:81:db:
                    99:c5:92:86:01:f8:28:03:03:9d:4c:83:d0:eb:12:
                    22:cf:15:36:fc:f3:bf:b6:db:9f:ed:0e:75:8b:ab:
                    97:af:00:5d:5a:01:f3:7a:39:a1:3e:c2:63:82:7c:
                    a2:56:52:98:ea:51:84:24:15:15:f5:3d:3f:e4:d6:
                    67:58:c6:32:57:4a:83:fd:18:3f:2a:10:fb:dd:32:
                    73:79:69:2f:07:2a:82:14:d6:8f:9a:2e:e2:3e:5c:
                    fa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C3:7C:DA:F3:FC:E4:5D:70:EE:0E:FC:D4:9C:FB:62:5C:16:DF:CF
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e33322e302f32312d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:bb:7b:0d:c3:d9:d4:a9:27:82:6e:54:b4:1f:7b:4e:96:ca:
         12:95:84:11:a5:d0:1b:6e:1d:44:ba:49:f8:ad:e5:ab:a7:8c:
         5d:ee:c5:a9:5a:f5:4c:1a:b3:aa:f3:e9:46:43:5e:48:3e:a8:
         31:d1:4f:3f:ca:fe:8b:b8:60:22:a0:5f:49:6b:ae:f3:ec:7d:
         7b:9b:83:71:8b:15:f0:43:67:2b:e3:66:e6:ef:3d:e2:bb:48:
         9c:8a:c9:48:91:e2:7b:8a:9e:1c:48:5e:08:88:83:49:2a:a5:
         b9:0c:d2:fa:78:5b:c2:cc:87:3d:e0:05:ec:71:5b:56:9b:f5:
         63:61:21:65:2e:b0:56:a9:d9:cc:44:59:4e:08:5b:8d:74:e1:
         af:40:05:81:ad:f5:56:3b:20:ec:3a:2d:da:23:9c:4d:b6:bd:
         5a:9c:f0:17:80:1f:cb:c9:8c:e3:f6:2f:a6:59:35:db:95:6b:
         59:4a:36:c0:a5:82:61:46:f4:5b:dc:29:b0:fb:05:4e:a5:fa:
         3e:84:b2:07:8f:5b:01:0d:a6:b6:00:d0:11:c2:d0:59:d7:70:
         4c:0b:64:f7:4c:c8:9e:47:5b:19:43:e7:0a:b1:6c:ea:f2:19:
         6d:c2:9d:45:5f:47:d7:77:f3:10:12:0a:00:b6:7c:94:4c:d5:
         91:b0:59:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----