Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3135342e302f32332d3233203d3e203133393939.roa
File:                     3230302e39322e3135342e302f32332d3233203d3e203133393939.roa (raw, json)
Hash identifier:          4QOW5oQkmpxZ5QdP2FmjUgRiTwTHOmmgOq3xfLoEbDY=
Subject key identifier:   FC:7B:B2:D2:F3:BB:85:97:08:E8:C7:50:D0:C0:F1:2A:5B:55:B9:F5
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       246043681D6B819CDEBCC82EFAF68B155790A3DC
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3135342e302f32332d3233203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:10 +0000
ROA not before:           Thu 23 May 2024 04:25:10 +0000
ROA not after:            Thu 22 May 2025 04:30:10 +0000
asID:                     13999
IP address blocks:        200.92.154.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:60:43:68:1d:6b:81:9c:de:bc:c8:2e:fa:f6:8b:15:57:90:a3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:10 2024 GMT
            Not After : May 22 04:30:10 2025 GMT
        Subject: CN=FC7BB2D2F3BB859708E8C750D0C0F12A5B55B9F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bc:35:75:e9:2c:c1:b8:e0:04:cf:68:dc:f5:
                    53:77:ec:12:d2:81:08:96:34:c2:53:1a:ed:5c:a2:
                    20:12:9a:b6:27:17:60:8a:74:35:e5:35:8a:70:bc:
                    80:65:2c:4d:62:2d:ed:c1:38:7a:4d:81:5b:7e:7e:
                    47:0d:76:02:aa:41:c2:ce:b0:de:50:a4:fc:0e:70:
                    6b:d3:f6:3f:67:8c:56:f8:86:7b:b2:b4:f8:21:c7:
                    98:f2:a6:bd:40:0a:3f:4c:d7:01:5f:91:45:bc:e5:
                    81:01:ba:f0:c4:aa:de:71:ad:61:59:9e:9b:3c:42:
                    3e:6a:27:d9:56:40:40:b1:ee:63:1a:f4:a3:1d:f7:
                    68:d9:5a:66:32:eb:72:6b:ca:78:38:f2:4b:e2:36:
                    c4:93:73:8e:3d:78:2a:15:be:db:92:23:e3:3e:4e:
                    ed:29:5a:4b:4b:e3:75:de:24:4e:31:52:28:ae:0b:
                    2e:5f:46:a1:46:67:6a:26:9d:1c:af:b2:0f:d0:97:
                    a6:18:d1:dd:89:cc:3d:62:e7:8c:e0:79:b6:ce:d1:
                    ea:ca:3d:59:ab:71:5d:a1:df:9c:8a:9b:9e:d5:27:
                    36:06:0f:75:f5:e5:95:9a:50:f3:4e:15:f2:59:9c:
                    64:9c:03:64:ad:dc:02:37:4d:2a:a0:1d:7e:f9:60:
                    99:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7B:B2:D2:F3:BB:85:97:08:E8:C7:50:D0:C0:F1:2A:5B:55:B9:F5
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3135342e302f32332d3233203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:f3:1b:f4:b0:0c:f0:81:01:bd:08:5d:ff:1b:00:8f:13:67:
         47:91:07:c0:de:9b:2a:38:6e:c2:d9:da:3d:4d:5f:74:c5:d4:
         b5:68:81:37:35:c7:3b:47:45:11:9f:2f:96:76:ee:0a:f6:6a:
         c4:44:93:1f:7e:1d:9e:8e:1d:d3:26:2a:9c:3b:dd:df:2a:d7:
         1f:9c:b0:b1:9d:b0:95:4d:18:ed:4f:8d:f8:6f:b9:d1:b9:6e:
         ad:4d:60:97:33:61:e7:f5:c3:6c:75:93:4d:d5:f8:cf:ca:8a:
         34:f0:3c:e9:d0:0b:48:c6:85:3b:e8:9d:71:59:82:fe:d0:66:
         bf:9b:c9:8d:a7:33:f1:57:73:05:f4:95:9c:17:6f:2a:88:7d:
         87:81:82:fb:32:f4:12:8a:e4:a9:15:ac:b3:e6:31:5c:af:d4:
         42:ad:68:bb:8d:10:4a:ad:aa:d1:ee:55:0d:e1:de:f3:41:10:
         ff:2f:08:07:93:e5:b6:37:52:5c:4e:fa:5a:6a:c3:f7:d7:d6:
         3c:7b:dc:f8:ca:26:5b:04:c9:95:08:c6:44:5f:a8:37:ed:34:
         25:f5:ca:51:78:50:64:54:b0:d3:c2:14:8f:27:b4:52:09:74:
         bf:64:ba:e3:6c:54:fb:46:d2:b5:e0:33:f4:4d:56:c3:3d:d2:
         13:88:c1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----