Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e35322e302f32322d3234203d3e203133393939.roa
File:                     3230302e37372e35322e302f32322d3234203d3e203133393939.roa (raw, json)
Hash identifier:          sMhSNNT6msTGMktw01uKeV6mhUAIJl74k3bGaklSAhA=
Subject key identifier:   5B:F4:D4:51:C6:51:34:2C:D9:CD:80:23:DA:F1:D8:AD:D3:70:C5:28
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       7840DC8B5EA000B928F6C0C92DAD1329F604FCBF
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e35322e302f32322d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:16 +0000
ROA not before:           Thu 23 May 2024 04:25:16 +0000
ROA not after:            Thu 22 May 2025 04:30:16 +0000
asID:                     13999
IP address blocks:        200.77.52.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:40:dc:8b:5e:a0:00:b9:28:f6:c0:c9:2d:ad:13:29:f6:04:fc:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:16 2024 GMT
            Not After : May 22 04:30:16 2025 GMT
        Subject: CN=5BF4D451C651342CD9CD8023DAF1D8ADD370C528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f3:df:47:78:d3:2c:0d:f1:27:00:db:d5:a3:
                    35:84:f8:5c:82:cf:25:af:4f:79:fc:d7:2f:12:16:
                    b4:e8:c6:c0:df:60:d9:95:20:26:ad:98:a9:d2:c2:
                    69:f4:79:10:c1:2e:02:f1:f9:64:ed:f3:e8:b5:c1:
                    0c:95:03:b8:92:8c:ac:7a:bc:ff:0e:a5:2e:bd:6b:
                    a2:f2:83:9c:9b:a2:32:a4:83:fb:2d:43:48:eb:57:
                    e2:c2:c7:97:2d:89:85:90:07:d7:43:68:4d:ba:1c:
                    93:1e:a4:14:10:2c:df:8f:22:8b:1a:8c:95:79:10:
                    db:83:a4:75:73:68:09:ca:f4:95:a8:d7:04:0f:f5:
                    7e:72:cb:ba:e6:0d:98:3c:9d:90:91:a3:7f:8f:93:
                    3f:bf:3a:e7:26:84:57:47:29:84:8f:1a:23:1d:a6:
                    de:b7:9f:c2:b5:ed:01:bb:92:f9:d2:fc:7f:21:7a:
                    fe:b5:8d:bb:76:1f:31:9a:e8:41:cc:a8:6f:4c:e4:
                    da:19:98:24:f8:04:b3:62:23:83:59:51:67:a8:d5:
                    e9:64:84:ae:44:e6:83:4f:ac:1f:62:87:5e:b2:01:
                    47:87:5f:af:e5:7c:6a:1c:24:93:db:c1:04:01:b4:
                    18:1c:7b:db:1a:53:d3:51:f1:51:f9:45:a2:89:66:
                    0e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F4:D4:51:C6:51:34:2C:D9:CD:80:23:DA:F1:D8:AD:D3:70:C5:28
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e35322e302f32322d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:fa:d5:87:9d:4a:f0:1a:a6:b1:20:f3:8c:db:9f:83:bb:2d:
         05:d4:dd:0a:74:00:6c:cc:cb:82:7f:71:70:60:9e:0c:fe:7e:
         12:3e:3d:87:03:f1:df:53:ad:a4:b8:2f:5b:84:66:5e:e5:11:
         87:f0:36:6d:90:26:7c:92:ae:99:94:2b:eb:b7:3e:af:dc:05:
         b2:8c:88:02:ad:ea:db:25:69:46:e8:b0:7d:f7:94:66:70:55:
         ac:06:8a:49:5e:1f:e9:d6:d5:14:6e:05:7a:b2:5f:94:ff:73:
         95:62:c5:d8:18:87:13:55:f3:a4:50:d6:d3:82:b7:e3:6d:d2:
         d9:a0:20:00:6f:1a:52:d5:eb:5c:d2:46:4f:a1:1a:64:a0:0f:
         96:50:32:00:12:c8:e9:47:50:39:b2:d4:ae:2c:55:cd:b7:f7:
         c0:85:18:78:a4:16:bf:4b:f2:03:62:d6:24:50:e1:6b:98:97:
         a4:96:dd:a6:29:c2:72:90:1a:25:2e:2e:d0:1a:00:16:7f:8b:
         2f:24:e1:3a:44:c2:4d:c8:20:59:11:36:60:33:ea:49:e1:e7:
         38:f3:e5:71:d4:ac:43:af:21:8a:0f:0c:b0:6e:5b:cd:a5:16:
         e3:3c:cd:0b:a0:18:5b:6c:9d:44:e7:48:35:da:f4:9f:9e:d8:
         c2:8e:82:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----