Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e35302e302f32342d3234203d3e20323632393136.roa
File:                     3230302e37372e35302e302f32342d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          ATxjifwqWFUnLWYzYQJ3Gsqjkwcxi9YongCiB0JlyRA=
Subject key identifier:   54:DE:37:F1:66:EB:C4:3F:D6:A0:31:12:C7:52:D0:D5:A6:89:8E:D0
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       1DC89BDF4D6E2B5ED736FE34D5146B6D25E919A6
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e35302e302f32342d3234203d3e20323632393136.roa
Signing time:             Thu 23 May 2024 04:30:01 +0000
ROA not before:           Thu 23 May 2024 04:25:01 +0000
ROA not after:            Thu 22 May 2025 04:30:01 +0000
asID:                     262916
IP address blocks:        200.77.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c8:9b:df:4d:6e:2b:5e:d7:36:fe:34:d5:14:6b:6d:25:e9:19:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:01 2024 GMT
            Not After : May 22 04:30:01 2025 GMT
        Subject: CN=54DE37F166EBC43FD6A03112C752D0D5A6898ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:d3:b1:49:88:ff:4a:a7:44:54:50:aa:aa:
                    8f:1a:8c:25:e2:6b:5c:12:bf:09:47:0d:d6:fc:47:
                    41:33:e0:4b:d4:a9:01:c4:e6:ea:68:56:fa:3e:d7:
                    eb:fc:61:f8:92:11:7b:a8:65:de:06:ff:1c:5a:ab:
                    52:7c:78:e3:7a:52:d7:98:4d:c8:75:d3:b3:ff:f2:
                    f2:76:61:f3:e3:bd:e0:c0:ef:71:a4:43:4a:50:d6:
                    0c:58:7c:cd:de:58:33:23:4b:38:8f:e7:0d:57:48:
                    ca:e3:e2:2e:cc:a4:07:63:35:e7:c8:30:5a:af:f5:
                    33:f6:62:5a:6a:e6:27:a8:4f:39:ef:bb:ba:d0:c8:
                    97:b2:24:63:3d:f8:3b:9d:8f:d3:23:dd:fa:db:40:
                    98:61:e0:25:28:79:90:57:c3:85:4b:2a:64:d5:b7:
                    8e:f9:4a:e2:73:fd:0e:ef:b5:f4:53:31:4d:2a:6c:
                    64:a8:2d:be:2e:93:70:ea:cd:f8:25:86:66:94:a6:
                    43:a8:0d:3c:57:d5:f1:19:49:ea:10:e0:e9:19:cc:
                    4c:7f:5b:2f:59:4a:db:93:93:e2:ab:1d:e4:c5:52:
                    91:03:d3:70:3d:55:60:10:8d:73:24:36:69:e6:d8:
                    64:93:85:4d:08:85:c1:ec:ef:08:aa:7d:31:69:3d:
                    f7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DE:37:F1:66:EB:C4:3F:D6:A0:31:12:C7:52:D0:D5:A6:89:8E:D0
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e35302e302f32342d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:ce:e3:ca:c6:71:cb:20:84:e5:01:34:85:5b:6f:8a:b3:67:
         5e:c6:2c:f5:3d:07:a4:8d:72:14:c5:13:7b:12:f0:3f:b1:69:
         bc:05:59:1a:6d:6b:47:04:4e:d0:b5:cd:85:84:be:0d:fa:72:
         80:54:2a:a6:96:f9:46:ba:d0:35:90:06:46:ce:11:ec:68:5b:
         a5:c1:8a:fc:02:e0:56:e1:2a:25:22:26:01:6b:ec:2f:fb:82:
         e4:d4:49:d8:f5:c0:67:c8:fa:a4:17:a0:45:c7:c0:3a:37:d2:
         92:61:30:0b:1c:c4:dc:ab:73:b1:af:4f:36:31:93:1f:a4:ff:
         bf:96:9a:a9:72:ff:b8:af:b2:5a:e0:c6:cf:3c:6f:9e:e4:dc:
         85:19:ff:c5:c7:c9:a8:d7:90:84:80:2e:12:7d:1f:d6:b7:27:
         23:57:5a:9a:30:1f:aa:eb:ff:77:a0:fd:f0:c9:2c:9a:7e:fa:
         6d:90:4c:eb:f3:01:c9:eb:2f:3f:b9:35:90:5b:85:1f:b2:d3:
         09:d1:b5:4a:bb:6c:b0:0e:e1:18:ee:99:9c:35:fc:53:dd:80:
         59:94:72:d8:af:03:0b:59:73:4c:a0:d7:92:57:fc:a6:42:be:
         00:4a:37:6b:1e:3a:9d:73:25:d6:fd:cc:cd:9f:1c:d0:c7:37:
         d4:de:a2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----