Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3136302e302f31392d3232203d3e203133393939.roa
File:                     3230302e39322e3136302e302f31392d3232203d3e203133393939.roa (raw, json)
Hash identifier:          7KA3BfgbvDb9eQnn7jwUMGoKTHZagCUN+abAUBIyY/0=
Subject key identifier:   B2:69:7E:BA:B5:D9:5A:55:39:44:E2:30:62:42:D8:A7:FE:74:75:D8
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       76B39790FE25ED20DC515C8736303D01C8DDD16F
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3136302e302f31392d3232203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:14 +0000
ROA not before:           Thu 23 May 2024 04:25:14 +0000
ROA not after:            Thu 22 May 2025 04:30:14 +0000
asID:                     13999
IP address blocks:        200.92.160.0/19 maxlen: 22

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b3:97:90:fe:25:ed:20:dc:51:5c:87:36:30:3d:01:c8:dd:d1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:14 2024 GMT
            Not After : May 22 04:30:14 2025 GMT
        Subject: CN=B2697EBAB5D95A553944E2306242D8A7FE7475D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f4:09:c9:85:8e:ab:a7:b3:69:ce:46:f6:0e:
                    c7:7e:3f:e7:a7:ac:1d:76:12:c4:01:3f:63:4e:b3:
                    da:af:00:64:77:4c:70:ff:0b:1d:a1:a7:96:e6:ff:
                    fa:51:35:e7:1c:b2:df:ce:8d:7a:af:93:61:cf:24:
                    0b:04:99:a0:e7:2d:2b:04:2b:42:db:60:73:42:78:
                    37:4e:78:69:3b:3e:57:cb:01:12:66:25:74:6f:2b:
                    7f:34:3b:c3:82:7e:c6:07:ff:30:a2:ba:d4:85:7e:
                    f7:27:14:f4:fe:cc:24:84:77:a0:3f:98:88:93:77:
                    41:f4:18:92:d1:3f:ec:85:85:6f:88:29:77:d8:53:
                    79:ef:a7:74:1e:f6:eb:98:91:64:fb:41:6d:8d:b0:
                    f8:29:d1:90:f5:dd:94:d9:88:f3:c3:1d:ef:68:c3:
                    6c:ea:b4:d5:ca:ec:21:34:fa:88:4f:1d:11:f6:c8:
                    eb:04:5d:66:79:fd:4c:eb:4e:b0:55:98:0f:a0:e1:
                    34:3d:1c:79:88:19:8a:c3:d1:ca:b2:ca:20:1e:c2:
                    ea:5c:84:93:a3:08:b3:64:46:16:77:ef:0e:10:4c:
                    44:a9:97:e7:dc:3c:b6:9f:ca:34:42:be:67:71:9d:
                    24:b1:75:de:89:e7:16:b9:1f:c0:97:2a:77:62:3c:
                    91:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:69:7E:BA:B5:D9:5A:55:39:44:E2:30:62:42:D8:A7:FE:74:75:D8
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3136302e302f31392d3232203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6a:a3:1e:31:90:ca:d8:f8:59:80:8d:da:70:83:ee:2f:34:18:
         c0:05:d1:e0:d4:d8:72:71:03:69:4c:bc:f5:0d:24:44:bc:59:
         b8:ee:60:2b:ad:cc:05:2a:b0:3c:d3:c3:03:19:ca:93:15:7c:
         13:8a:48:dd:ce:24:6e:b8:62:7b:33:c9:de:3a:eb:3e:5e:09:
         c7:78:58:e3:77:b3:fb:f0:fe:f2:80:18:32:ae:eb:f9:3c:d8:
         b0:ba:fd:95:f0:c5:b0:1d:ff:76:bb:51:d3:96:46:be:f5:39:
         83:e2:57:00:a1:2e:ff:3d:77:0a:5f:a5:30:30:ba:62:1a:58:
         ea:be:c1:36:8a:a8:87:d4:d5:72:fe:39:cc:f6:5e:41:e6:43:
         33:52:00:4f:47:d5:af:35:c9:91:3a:e1:28:f5:6e:6c:8e:33:
         90:62:51:24:28:18:73:de:e3:bc:36:17:51:32:de:17:08:c8:
         c1:cb:a5:41:91:38:0d:e2:4a:8a:18:74:b3:b9:f6:88:1b:eb:
         88:f8:6a:a6:fe:66:ec:f2:75:51:df:7f:41:50:22:f6:e7:ca:
         1c:20:3c:76:f3:0c:45:97:91:86:c1:e6:df:8a:7e:81:bb:05:
         eb:04:7e:0a:f5:aa:68:99:0c:cb:22:b5:f9:bb:98:28:ee:b1:
         c1:3f:db:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----