Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e34372e302f32342d3234203d3e203133393939.roa
File:                     3230302e37372e34372e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          WRIhHFp1zPuLYota32wR8tRJu7pjwIB3sqthoCDene0=
Subject key identifier:   BE:4D:21:3B:C9:92:F5:EA:B1:35:71:F9:1F:48:AB:2D:B9:B4:15:35
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       62D29D038882C87DCF1A0939658E24B66C056BAA
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e34372e302f32342d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:05 +0000
ROA not before:           Thu 23 May 2024 04:25:05 +0000
ROA not after:            Thu 22 May 2025 04:30:05 +0000
asID:                     13999
IP address blocks:        200.77.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d2:9d:03:88:82:c8:7d:cf:1a:09:39:65:8e:24:b6:6c:05:6b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:05 2024 GMT
            Not After : May 22 04:30:05 2025 GMT
        Subject: CN=BE4D213BC992F5EAB13571F91F48AB2DB9B41535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a9:8b:33:e8:94:99:9b:be:51:b9:38:ca:f7:
                    4c:8c:70:90:c4:e1:f0:9f:b1:16:49:d5:8f:ab:ab:
                    bf:2b:0d:48:97:43:56:d6:97:48:c0:91:33:54:f5:
                    cb:00:31:b9:54:a1:5a:f8:d9:50:f0:7a:b7:82:c2:
                    ae:f5:31:1d:4b:4c:a1:4d:e0:8c:c4:bb:f4:29:fd:
                    d0:09:f8:8d:d4:86:a7:46:8e:db:fa:f7:10:0d:49:
                    b3:04:f1:c1:9c:bd:30:aa:9b:04:47:1c:1c:d5:f8:
                    67:e6:3b:01:0b:2a:1c:8a:3e:dc:2d:f9:6f:f4:9e:
                    4e:d5:3c:87:ef:41:fb:0a:26:3b:b3:27:f0:59:cf:
                    74:83:c7:43:3c:16:63:85:19:14:4f:d3:c3:cb:06:
                    a5:3f:9b:ba:72:37:7b:ea:11:f4:ba:9c:ec:c4:44:
                    dd:7c:e4:dc:69:5a:33:17:5f:5f:da:e1:12:04:ce:
                    a3:47:fa:3e:9d:cf:20:f7:7b:f3:31:76:c6:2d:d6:
                    94:e3:b9:c8:2c:f8:d5:dd:b7:21:e7:2a:68:71:a5:
                    5a:56:ad:96:b3:54:05:5f:18:02:39:76:52:71:e1:
                    f7:d9:e7:de:2a:8d:26:7f:ee:05:ec:79:0f:65:a5:
                    61:4a:9a:3a:10:d1:fd:9c:8a:50:7c:5b:ff:c5:07:
                    30:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4D:21:3B:C9:92:F5:EA:B1:35:71:F9:1F:48:AB:2D:B9:B4:15:35
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e34372e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:52:53:17:ff:9a:d3:49:25:d8:63:f0:73:d8:f7:3a:90:65:
         c9:ab:69:29:d6:01:9a:be:b3:44:0d:fd:b6:b3:e7:54:1c:4c:
         9f:ed:a6:ba:34:98:ce:d0:20:f2:3c:e4:21:21:31:57:44:78:
         2c:b4:63:26:50:b8:38:60:b5:40:2e:79:88:aa:c7:29:2a:54:
         1a:25:38:83:26:e6:0f:dd:b3:b5:ef:89:42:76:36:0b:bd:b4:
         00:13:2d:ac:6c:46:08:a2:60:83:8b:76:3d:e3:61:05:b6:67:
         4a:39:e8:8c:7a:16:21:86:a6:68:ec:0b:2c:30:5d:93:60:88:
         76:34:dd:bc:16:e2:0e:6e:71:16:90:e7:c1:25:06:05:38:99:
         2c:35:7b:d5:10:31:8e:da:ec:84:36:44:80:ec:39:87:8c:15:
         ac:65:b4:47:bb:73:ec:d4:90:f3:12:1d:99:1a:c6:6c:78:43:
         47:27:a9:6e:1e:d7:40:c1:0e:7c:ed:9e:74:bc:a9:37:09:2b:
         78:9e:54:37:7a:f9:a4:66:b3:0a:d9:bf:c7:5a:b9:dc:69:e5:
         4f:97:d0:d5:0a:b8:be:9b:85:65:e5:ef:80:8c:6b:5f:93:5f:
         73:31:84:75:34:1d:6f:d1:e2:da:e2:0d:e5:cf:d7:5e:e1:74:
         5e:ae:e5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----