Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e36302e302f32322d3234203d3e203133393939.roa
File:                     3230302e37372e36302e302f32322d3234203d3e203133393939.roa (raw, json)
Hash identifier:          Pd3JsLN0GfAUdmelK1kib7703kUmNT/d5Ogoy3fi000=
Subject key identifier:   E1:8A:AB:84:86:A5:CF:E1:96:B5:2B:8F:A1:76:5D:94:AA:AB:80:0A
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       6DE94DA56ADD457AAD1419A17EFE4A4AC7725054
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e36302e302f32322d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:04 +0000
ROA not before:           Thu 23 May 2024 04:25:04 +0000
ROA not after:            Thu 22 May 2025 04:30:04 +0000
asID:                     13999
IP address blocks:        200.77.60.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e9:4d:a5:6a:dd:45:7a:ad:14:19:a1:7e:fe:4a:4a:c7:72:50:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:04 2024 GMT
            Not After : May 22 04:30:04 2025 GMT
        Subject: CN=E18AAB8486A5CFE196B52B8FA1765D94AAAB800A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3d:e6:0f:99:ef:af:1e:f8:38:e9:8d:eb:6b:
                    29:13:64:3e:09:ea:a8:d1:cb:cd:4c:56:c9:72:5e:
                    28:18:20:19:41:4e:b0:ca:e5:4b:cf:2c:3e:70:4e:
                    d6:50:7e:02:83:ba:78:47:44:c5:38:d8:74:dd:97:
                    c6:ff:a3:05:ed:c7:2b:40:a6:d3:c3:9a:05:10:b4:
                    fd:42:ef:77:bf:bd:2f:0f:dc:27:f4:a7:d0:cf:a3:
                    4c:1f:f5:30:fc:f8:d5:11:ae:f2:8f:6c:02:74:65:
                    f9:70:b5:18:dc:29:86:38:28:32:ed:6f:a5:42:c2:
                    25:15:b3:42:5c:28:a7:e6:55:f5:9d:c1:89:c6:a6:
                    ba:c0:aa:a8:70:60:52:c2:74:1e:b7:35:64:4f:d0:
                    2b:ad:5a:40:ee:3f:27:a3:e4:5c:02:63:22:0b:4c:
                    b3:53:d2:54:e1:c5:12:b1:20:76:f4:b7:e4:cf:88:
                    b2:a8:79:ac:3c:b3:c0:b6:36:78:cc:be:0e:54:28:
                    f5:50:be:55:5a:0f:04:a9:65:96:db:e5:42:11:68:
                    2e:3d:76:e5:f6:97:43:79:48:11:23:ac:a9:f3:aa:
                    01:5a:fa:d3:e9:df:62:11:e7:0f:e0:c7:c4:e7:7c:
                    cf:9b:98:15:bc:82:43:01:fe:e4:fb:f4:6b:26:56:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8A:AB:84:86:A5:CF:E1:96:B5:2B:8F:A1:76:5D:94:AA:AB:80:0A
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e37372e36302e302f32322d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:d7:63:06:7f:e0:d2:c4:8e:a4:50:22:c7:6d:4d:5c:71:6e:
         93:c5:f5:90:eb:7e:49:97:2d:47:9e:c0:23:46:af:eb:54:c6:
         43:1c:13:23:51:83:b4:a3:9c:91:dd:60:a4:c3:de:3d:4a:0d:
         4c:00:fb:cb:74:db:26:d9:00:5d:1f:05:c2:25:60:f1:a3:64:
         fb:b3:61:db:e2:aa:b3:7e:d1:83:21:b9:91:d2:71:ae:94:87:
         75:02:f0:66:ef:0a:42:d8:1a:00:9b:35:e9:09:af:f9:9e:cf:
         b0:20:57:c2:79:43:64:77:58:c5:c6:1a:fb:0d:3a:56:cb:cd:
         ab:df:8f:d8:f0:5b:54:35:08:12:10:d9:94:78:db:e5:fa:45:
         24:bf:21:ae:0f:5b:58:04:a4:3d:84:ef:43:48:50:e8:9f:f7:
         68:a3:2e:73:17:9c:57:57:d2:e4:3f:ee:13:dc:fc:20:bf:d6:
         96:20:4b:15:1d:62:ef:f8:ff:d9:5f:54:b6:b6:a7:d8:60:0f:
         47:2d:09:b9:b9:fc:b8:aa:83:d0:b3:5b:69:ae:bf:e8:ba:71:
         8d:78:3b:1c:d8:f1:9b:6a:cb:b6:3c:96:9c:fd:f4:4d:0f:a1:
         6e:7a:5b:06:de:c8:8e:07:77:97:50:4a:d1:ad:70:21:77:08:
         a4:d9:71:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----