Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e34352e302f32342d3234203d3e20323632393136.roa
File:                     3230302e37372e34352e302f32342d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          tT7xNFwo/P3Z3zJv2vw574ChiZv7j7Gm9okv6kb0SXo=
Subject key identifier:   6A:B4:E1:92:D7:45:71:B2:9E:4F:95:AF:9B:9B:D1:09:AF:01:11:1E
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       19CA80D51CEDB77958CFBB26C67BAC897E2F2203
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e34352e302f32342d3234203d3e20323632393136.roa
Signing time:             Thu 23 May 2024 04:30:18 +0000
ROA not before:           Thu 23 May 2024 04:25:18 +0000
ROA not after:            Thu 22 May 2025 04:30:18 +0000
asID:                     262916
IP address blocks:        200.77.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ca:80:d5:1c:ed:b7:79:58:cf:bb:26:c6:7b:ac:89:7e:2f:22:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:18 2024 GMT
            Not After : May 22 04:30:18 2025 GMT
        Subject: CN=6AB4E192D74571B29E4F95AF9B9BD109AF01111E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3d:20:44:00:dc:cf:a1:ce:08:f4:3d:0c:ca:
                    7a:ae:bb:a6:c1:49:5b:a9:f2:41:10:fa:26:d6:7c:
                    ab:a1:03:0b:bc:70:8b:c9:73:2f:43:b4:a1:fb:0f:
                    7e:eb:5e:02:5c:d1:f4:b7:68:40:82:0b:1d:f6:86:
                    15:6a:51:c3:0c:3f:8b:35:f7:ca:67:f4:d5:8f:e4:
                    ec:7e:40:6e:8b:31:97:50:08:55:78:6e:28:60:b6:
                    af:77:69:08:33:4f:66:82:69:15:c7:9f:6f:2e:10:
                    26:6e:da:49:0a:ab:79:c4:db:93:c3:1f:84:53:c3:
                    22:87:d4:78:53:99:71:0a:0d:4c:92:d3:22:11:61:
                    ff:90:49:53:6a:fd:a1:5f:44:c5:a0:09:f5:bc:27:
                    cc:48:a9:2b:a1:08:60:59:7d:5d:7b:10:d9:ce:64:
                    9c:5e:da:bc:5b:ac:db:f2:e9:28:a0:bf:eb:45:02:
                    5e:6d:b8:39:73:a6:89:29:86:62:be:e8:96:01:8a:
                    a2:d2:3a:a5:c7:92:d1:d2:2f:40:23:32:ba:77:ea:
                    ec:ed:c3:2c:3d:d9:7b:89:32:ea:fc:61:a2:60:dc:
                    5f:f8:9e:b6:de:a1:9d:c1:d2:49:08:d7:76:ab:db:
                    bc:08:92:dc:b0:3c:41:ea:d0:db:53:2e:9c:0c:1a:
                    d9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B4:E1:92:D7:45:71:B2:9E:4F:95:AF:9B:9B:D1:09:AF:01:11:1E
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e34352e302f32342d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:0f:c2:ff:72:27:51:e7:15:f3:66:bd:a4:17:2d:ab:de:f1:
         7c:d3:0d:be:cd:6a:59:b3:5a:0f:ec:2a:f1:75:6b:b3:29:51:
         44:91:4f:9d:bf:86:7e:41:71:08:18:3a:5f:74:8a:62:8d:6a:
         a8:6d:ad:53:52:60:6c:86:b0:95:77:7e:81:30:cb:0f:c6:2b:
         b2:fa:75:f7:a6:19:28:70:f9:d2:16:40:2d:12:4c:37:69:79:
         c9:a4:e7:5f:ca:04:cf:63:71:ca:47:71:3b:33:49:d1:7c:32:
         c9:c1:b6:4b:9c:6e:4d:0d:60:38:ce:73:2f:76:8d:6e:4a:91:
         1e:85:19:7c:84:9f:30:36:83:e3:69:93:00:56:d2:fa:6a:c9:
         b5:da:3c:fb:0c:12:ba:49:2e:6e:93:33:8e:4c:95:46:00:bd:
         ae:69:dd:60:39:62:6c:1c:f3:d2:dc:73:6c:ab:42:04:92:13:
         17:2c:dd:1a:9a:29:c8:a7:d9:2e:59:e2:f2:4d:fb:08:a2:dd:
         8f:ff:4f:21:c4:bd:7f:d2:17:3d:6b:8a:b1:4f:e3:d1:5f:de:
         d5:8f:21:d8:bd:29:19:05:ae:f8:f4:11:3e:b3:07:b4:b9:5c:
         7e:c8:62:8b:33:5b:fe:10:ab:e3:71:13:6f:18:1b:f3:e2:18:
         2e:73:cf:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----