Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e34382e302f32332d3234203d3e203133393939.roa
File:                     3230302e37372e34382e302f32332d3234203d3e203133393939.roa (raw, json)
Hash identifier:          yAq5CTJjKno5eBzIpu/7jVKRBG4Uxc6Yo2Xdg8qDtJg=
Subject key identifier:   58:D8:75:57:53:85:0B:35:20:B3:A6:1B:3D:73:99:DC:0B:A0:32:80
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       28C5A8CEF450B170F42860195B76C0C754087390
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e34382e302f32332d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:07 +0000
ROA not before:           Thu 23 May 2024 04:25:07 +0000
ROA not after:            Thu 22 May 2025 04:30:07 +0000
asID:                     13999
IP address blocks:        200.77.48.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c5:a8:ce:f4:50:b1:70:f4:28:60:19:5b:76:c0:c7:54:08:73:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:07 2024 GMT
            Not After : May 22 04:30:07 2025 GMT
        Subject: CN=58D8755753850B3520B3A61B3D7399DC0BA03280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:bb:69:1d:e5:4e:d0:d1:bf:48:65:bb:00:
                    ca:fd:40:be:cf:32:1a:15:b4:b5:40:8e:57:de:fd:
                    4f:1f:dc:3d:10:38:5e:aa:12:fd:1f:99:ff:b9:4f:
                    7d:54:e9:a6:01:93:a4:ef:e4:10:f3:c5:02:00:d3:
                    d1:e9:99:b1:d7:8d:d3:21:78:db:af:6e:92:ec:f7:
                    07:f6:01:4a:61:00:05:d7:b8:8e:13:8d:37:e2:61:
                    6e:8e:7d:5d:9c:be:57:1f:1b:60:ca:2a:5e:68:98:
                    24:9b:37:6d:7d:af:89:8d:be:31:b4:2c:24:a6:75:
                    e5:6e:57:a5:3a:5b:85:d5:f4:7a:e1:56:ed:8a:63:
                    01:58:51:d1:26:96:ea:c9:1b:e9:5d:9d:ef:ff:01:
                    87:ee:24:b1:64:8a:7b:5d:97:59:e7:d3:20:5f:ae:
                    d2:01:2d:e8:3a:d2:42:66:72:1c:b3:7d:c7:d2:37:
                    6d:31:6c:a0:fa:b8:05:d2:28:13:82:98:a4:bb:f9:
                    a3:76:2c:52:69:a9:0a:fa:1a:75:b9:f9:bd:56:e5:
                    70:c9:48:70:44:67:3b:2d:7e:d9:b6:da:dc:f8:28:
                    59:11:97:23:7e:07:01:83:7f:50:c5:b7:c8:7e:71:
                    1f:e8:7c:8a:59:ce:4e:f0:9f:76:4e:61:49:a5:63:
                    73:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D8:75:57:53:85:0B:35:20:B3:A6:1B:3D:73:99:DC:0B:A0:32:80
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e34382e302f32332d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:f7:8c:36:07:45:08:87:8a:ef:42:5a:5a:3c:53:9e:68:f9:
         21:ca:7f:66:17:4e:46:14:0b:02:55:38:4a:6f:74:44:ec:01:
         c3:3d:2b:71:16:b4:97:51:41:26:36:db:aa:0d:1a:df:29:88:
         f0:b7:f1:36:87:ed:87:0c:97:0f:7d:97:58:f2:a4:9c:c5:0a:
         62:37:1f:24:43:55:2d:d8:0c:9e:9d:f9:d6:f4:66:2f:6f:e7:
         4b:94:56:c1:6c:c9:b1:7b:0e:6f:b4:ee:29:af:77:9d:7d:c9:
         52:ee:4d:dc:cf:25:58:63:ea:62:b7:f6:4f:cd:6b:2c:be:ee:
         a6:bd:97:79:10:fc:c1:89:3f:03:7e:e1:f7:f8:54:c8:0e:54:
         d7:25:46:1a:6d:db:b5:96:81:9d:26:fe:78:a7:35:69:91:ba:
         e5:ab:07:df:f7:1c:59:f7:23:09:fa:91:70:41:b6:18:4c:28:
         d8:d4:7f:75:fe:40:03:dc:61:f0:6c:15:7e:7a:6a:2b:56:87:
         a8:bf:03:7f:bb:67:e2:bb:27:c0:6c:49:6b:47:2d:24:3d:e6:
         bb:f6:33:b8:22:a4:d7:f5:2d:55:48:69:75:2e:88:7a:01:f3:
         3a:be:0c:82:dc:ba:ad:dc:07:e8:a2:d2:5a:88:23:89:58:7d:
         bd:5a:a7:7f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUKMWozvRQsXD0KGAZW3bAx1QIc5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxRjVDNzUzRUZEQjdGODQ3NkM2M0JCQjQxNDE3QjhF
MTk0QTJBMzAeFw0yNDA1MjMwNDI1MDdaFw0yNTA1MjIwNDMwMDdaMDMxMTAvBgNV
BAMTKDU4RDg3NTU3NTM4NTBCMzUyMEIzQTYxQjNENzM5OURDMEJBMDMyODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4zbtpHeVO0NG/SGW7AMr9QL7P
MhoVtLVAjlfe/U8f3D0QOF6qEv0fmf+5T31U6aYBk6Tv5BDzxQIA09HpmbHXjdMh
eNuvbpLs9wf2AUphAAXXuI4TjTfiYW6OfV2cvlcfG2DKKl5omCSbN219r4mNvjG0
LCSmdeVuV6U6W4XV9HrhVu2KYwFYUdEmlurJG+ldne//AYfuJLFkintdl1nn0yBf
rtIBLeg60kJmchyzfcfSN20xbKD6uAXSKBOCmKS7+aN2LFJpqQr6GnW5+b1W5XDJ
SHBEZzstftm22tz4KFkRlyN+BwGDf1DFt8h+cR/ofIpZzk7wn3ZOYUmlY3PBAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUWNh1V1OFCzUgs6YbPXOZ3AugMoAwHwYDVR0j
BBgwFoAUwB9cdT79t/hHbGO7tBQXuOGUoqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQzAxRjVDNzUzRUZEQjdG
ODQ3NkM2M0JCQjQxNDE3QjhFMTk0QTJBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDFGNUM3NTNFRkRCN0Y4NDc2
QzYzQkJCNDE0MTdCOEUxOTRBMkEzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYxNTY4RDhDOUFERERDQTNDRTc3MDM5NzI3N0Q1Mzk2QjYzMTc0REIw
QzdCMDhCNTc4NjMzQkMzMjY3RTE0Ny8wLzMyMzAzMDJlMzczNzJlMzQzODJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzOTM5Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHITTAwDQYJ
KoZIhvcNAQELBQADggEBAH33jDYHRQiHiu9CWlo8U55o+SHKf2YXTkYUCwJVOEpv
dETsAcM9K3EWtJdRQSY226oNGt8piPC38TaH7YcMlw99l1jypJzFCmI3HyRDVS3Y
DJ6d+db0Zi9v50uUVsFsybF7Dm+07imvd519yVLuTdzPJVhj6mK39k/Nayy+7qa9
l3kQ/MGJPwN+4ff4VMgOVNclRhpt27WWgZ0m/ninNWmRuuWrB9/3HFn3Iwn6kXBB
thhMKNjUf3X+QAPcYfBsFX56aitWh6i/A3+7Z+K7J8BsSWtHLSQ95rv2M7gipNf1
LVVIaXUuiHoB8zq+DILcuq3cB+ii0lqII4lYfb1ap38=
-----END CERTIFICATE-----