Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3133302e302f32332d3234203d3e203133393939.roa
File:                     3230302e39322e3133302e302f32332d3234203d3e203133393939.roa (raw, json)
Hash identifier:          DDL+CZ9Kr9f2a4w7YMmVegas3ytSvBfbJtpmhbYQAQo=
Subject key identifier:   EC:97:4B:C7:00:D2:83:20:8C:C8:D3:07:6D:A4:5A:8A:63:F3:79:AE
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       0AB41EEBDCCDC3B765B81C546431D0C63F2A9A9B
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3133302e302f32332d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:03 +0000
ROA not before:           Thu 23 May 2024 04:25:03 +0000
ROA not after:            Thu 22 May 2025 04:30:03 +0000
asID:                     13999
IP address blocks:        200.92.130.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b4:1e:eb:dc:cd:c3:b7:65:b8:1c:54:64:31:d0:c6:3f:2a:9a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:03 2024 GMT
            Not After : May 22 04:30:03 2025 GMT
        Subject: CN=EC974BC700D283208CC8D3076DA45A8A63F379AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cf:81:69:21:a8:5f:87:d5:a2:2d:89:58:6c:
                    f3:ff:d9:58:26:68:96:66:b8:6e:55:40:9c:9f:1e:
                    86:24:13:aa:5e:68:ac:dc:76:2d:26:90:60:e5:fb:
                    cc:01:a2:31:e2:00:dd:b4:e5:c9:6e:0d:eb:58:0d:
                    12:05:64:85:a8:ba:ff:52:7b:db:ff:5d:9b:ac:64:
                    8d:92:02:a7:09:e3:52:36:cb:86:6a:bb:e1:aa:81:
                    b8:3b:7d:6b:70:20:99:92:40:c0:9c:52:af:d1:58:
                    f3:5f:ef:78:ba:6c:dc:d9:46:d1:b2:64:fe:36:3a:
                    19:03:4f:8a:98:6a:70:79:44:e5:da:9c:7e:8b:da:
                    44:39:53:4d:96:7e:59:49:6a:81:ec:30:83:ea:b6:
                    56:9b:5b:2c:7e:c8:a6:85:91:e6:82:64:2d:5a:cd:
                    db:16:7b:d7:98:25:1a:da:db:6f:4a:ff:23:29:4f:
                    a6:ea:ed:48:7d:b9:71:25:b9:7a:2a:88:0b:18:64:
                    46:ea:54:f2:57:84:69:14:d5:85:49:cf:c8:2a:58:
                    44:c9:b9:ca:5e:f4:16:25:97:ca:0f:10:58:95:b2:
                    71:c0:4f:ab:a9:98:56:e2:4d:e1:6b:2c:17:e9:ab:
                    a4:94:f5:e1:1a:32:21:39:a7:dd:fd:05:77:c6:5f:
                    9b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:97:4B:C7:00:D2:83:20:8C:C8:D3:07:6D:A4:5A:8A:63:F3:79:AE
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3133302e302f32332d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:e9:07:58:7a:62:a8:59:f7:ea:97:88:dc:25:84:a4:85:4d:
         52:dd:24:c1:c5:42:1d:da:30:38:71:99:33:dd:56:fc:a6:5e:
         21:90:ac:6f:25:65:3c:d8:b2:e5:22:8b:bf:6f:ad:14:88:10:
         eb:57:99:8f:63:03:25:40:23:5a:22:14:aa:7d:8d:68:a0:2e:
         f5:cb:8d:92:5b:8a:b6:97:7e:b3:8d:1e:f1:22:23:e3:b1:56:
         f5:1a:56:3f:7c:7c:f9:e0:07:b0:7f:22:12:e7:32:4e:7d:5c:
         10:33:45:9a:fe:93:d6:6d:5c:fb:a3:89:cd:22:4c:f5:5c:04:
         b3:b3:22:97:14:c6:a0:c5:c3:23:48:04:c8:ac:1e:57:70:50:
         93:78:6b:7b:56:44:e9:65:83:5c:f4:da:a3:3e:46:e3:e8:d6:
         60:00:4d:76:37:47:f0:a1:36:d3:dc:83:74:91:ee:6b:02:31:
         6f:bd:23:02:8b:0f:c3:18:32:76:77:b6:25:e0:98:6a:ae:82:
         a8:28:32:89:b6:0e:5e:f9:c3:60:26:5c:1a:c0:5d:40:d4:6f:
         e0:49:8a:e0:94:1f:dc:7e:41:f6:85:5b:62:e0:02:25:b6:d0:
         a2:12:d5:40:ae:70:df:d5:2d:cf:ad:43:42:3e:58:7f:71:e1:
         20:49:4c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----