Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3139322e302f32302d3234203d3e203133393939.roa
File:                     3230302e39322e3139322e302f32302d3234203d3e203133393939.roa (raw, json)
Hash identifier:          zu72Tx1Zzqk8G1z95xziMEEm58IEQYID6RryBeF9f6w=
Subject key identifier:   08:4D:A5:90:5D:4C:53:10:B4:EE:50:E4:9A:80:E0:80:31:23:70:E8
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       4AAE22AF6FD4D80C683C245B319A732B5DD5FEEC
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3139322e302f32302d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:12 +0000
ROA not before:           Thu 23 May 2024 04:25:12 +0000
ROA not after:            Thu 22 May 2025 04:30:12 +0000
asID:                     13999
IP address blocks:        200.92.192.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ae:22:af:6f:d4:d8:0c:68:3c:24:5b:31:9a:73:2b:5d:d5:fe:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:12 2024 GMT
            Not After : May 22 04:30:12 2025 GMT
        Subject: CN=084DA5905D4C5310B4EE50E49A80E080312370E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d1:af:02:1e:dd:53:3b:94:b7:cd:5f:2a:58:
                    f0:57:7a:15:59:11:42:17:03:0d:8b:a1:95:2f:7e:
                    7e:e1:75:63:a5:fb:75:d8:d5:19:a5:45:e9:9a:82:
                    03:c3:d4:07:3b:c1:85:46:0f:bd:fe:ad:0e:4d:49:
                    5d:79:5f:34:b7:36:f5:ae:de:5b:d2:c3:14:ba:07:
                    d4:08:29:3b:a8:d5:fb:e1:c8:1c:17:e4:25:51:f5:
                    27:1f:eb:42:ec:12:58:74:33:47:a0:51:c8:f9:33:
                    5a:82:1d:f8:3c:b5:65:09:25:46:00:4f:84:5c:fe:
                    dd:a7:7d:e6:36:f2:03:79:93:4a:c2:44:87:38:1f:
                    16:5d:c8:21:6d:1a:18:03:4d:b9:8d:c8:1c:2c:17:
                    72:94:53:9e:12:49:c4:d1:da:73:34:74:48:3e:67:
                    89:b1:27:71:36:cb:55:ee:27:a4:00:f4:d6:65:5a:
                    ab:69:54:bb:b7:0c:f0:97:81:a1:37:1c:28:66:08:
                    f7:de:2d:29:71:f0:da:2f:ae:41:de:cd:7e:ac:55:
                    d1:3c:6e:5d:29:12:13:93:56:fa:a1:f0:54:88:96:
                    3c:57:53:c8:d0:59:3f:b1:33:97:3d:ed:db:cb:68:
                    af:29:cb:bf:a7:82:9e:72:a3:95:63:6e:25:34:d5:
                    14:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4D:A5:90:5D:4C:53:10:B4:EE:50:E4:9A:80:E0:80:31:23:70:E8
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3139322e302f32302d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:19:9a:1f:8e:95:0e:31:48:7a:ba:c2:d0:e0:37:e2:cd:fb:
         67:f8:e5:c7:9b:59:b7:ec:dc:b0:1a:77:eb:bf:3c:90:d5:97:
         c2:12:38:77:63:be:50:96:62:1c:b5:f6:e1:d7:65:61:c1:dd:
         cd:b1:fe:4c:94:26:23:b8:f2:2e:0c:6f:d6:3a:f8:02:24:65:
         da:fd:ca:c8:de:67:66:75:5c:14:52:b9:99:7e:19:e2:6f:44:
         29:d1:33:9d:cf:7d:13:70:d0:c6:a0:fb:13:c9:c9:d8:b7:f9:
         cf:f9:eb:41:12:fa:bc:b3:1a:df:d8:f8:09:4b:23:d8:82:98:
         76:fc:a6:5f:98:3c:a9:38:3a:b0:19:7b:a0:ef:cc:35:f0:cf:
         b8:89:c8:b1:3d:60:0d:7c:71:f0:d3:5c:92:a6:8b:17:1c:46:
         d0:9a:08:9d:f4:0d:72:19:f7:b8:87:4d:c4:6d:a3:db:2e:57:
         7f:df:d3:c8:b2:62:d0:e6:33:ac:cd:22:91:0f:b1:49:af:67:
         d7:de:d5:26:5e:5e:d7:0d:66:30:2e:ef:2c:32:1e:86:b2:fb:
         f0:7c:45:26:d1:6c:a6:92:09:70:a4:53:38:3c:c5:e0:e7:ce:
         53:d6:29:53:e2:f5:8f:43:c5:77:19:d6:36:3f:f5:ef:c2:c3:
         ee:e8:3e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----