Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3139392e302f32342d3234203d3e20323632393136.roa
File:                     3230302e39322e3139392e302f32342d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          sWjlXhjDQzN8GHjkU8HpJxPjfd0nV5/tihDDnycFgXE=
Subject key identifier:   FF:1B:2A:79:41:0F:BF:B6:40:84:95:F2:02:3A:ED:8A:4A:6C:D6:06
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       254EE89938F18555AC49D5C15C8DBD2EC6AFBB7F
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3139392e302f32342d3234203d3e20323632393136.roa
Signing time:             Thu 23 May 2024 04:30:17 +0000
ROA not before:           Thu 23 May 2024 04:25:17 +0000
ROA not after:            Thu 22 May 2025 04:30:17 +0000
asID:                     262916
IP address blocks:        200.92.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4e:e8:99:38:f1:85:55:ac:49:d5:c1:5c:8d:bd:2e:c6:af:bb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:17 2024 GMT
            Not After : May 22 04:30:17 2025 GMT
        Subject: CN=FF1B2A79410FBFB6408495F2023AED8A4A6CD606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:13:4c:f1:1b:bd:49:2b:f5:09:3e:e3:7a:28:
                    74:f6:61:7d:2f:7f:4f:03:db:47:1d:41:e1:9f:f6:
                    ec:62:72:9b:40:87:92:09:94:41:b1:66:a7:6e:00:
                    5b:1c:ce:c7:82:21:90:e0:f9:d9:bb:0c:8c:3d:9a:
                    69:53:70:90:67:6b:dd:46:ca:83:b8:f4:7b:d9:19:
                    39:cc:fc:0e:03:f1:e7:bd:49:0c:c5:f4:a7:7e:15:
                    88:f8:25:d5:1c:94:d5:95:d9:ba:21:b0:3f:50:a1:
                    2b:f1:ae:81:15:54:d6:10:5a:53:a8:ea:57:51:35:
                    fb:e8:46:be:be:87:19:82:af:d4:f1:41:0c:c8:f6:
                    23:08:7c:d1:e3:45:20:3e:e2:09:e1:60:fd:e0:13:
                    6d:1d:8c:f7:63:88:ff:24:a6:c9:ba:be:6d:a2:fa:
                    29:72:4b:cc:22:fd:a8:be:2e:4b:a6:e9:eb:5a:cd:
                    76:f8:ac:03:18:fc:a1:58:50:ed:e9:d9:8b:b7:e7:
                    be:39:80:81:04:de:8d:d9:9f:a5:5f:70:5e:4a:62:
                    44:53:1e:c8:7f:a0:8c:7d:c2:8e:8c:60:ab:70:28:
                    fb:af:7c:c7:4f:cb:8c:a8:06:74:d4:85:1f:c7:56:
                    43:cd:8c:be:ec:e0:46:fe:89:21:c8:ed:4c:a9:0b:
                    88:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1B:2A:79:41:0F:BF:B6:40:84:95:F2:02:3A:ED:8A:4A:6C:D6:06
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3139392e302f32342d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:f5:32:7d:d3:d1:46:9d:43:02:17:ca:b1:83:20:0c:64:80:
         82:04:41:34:33:de:f4:92:5b:44:90:d6:8b:9d:b5:72:56:13:
         5e:07:de:37:9f:81:69:bb:e9:d9:5f:e0:c8:14:dc:47:74:d7:
         99:82:c2:06:83:b4:37:30:f2:dd:38:5e:58:1d:63:ae:c0:2c:
         24:ab:26:18:6b:ed:d0:98:00:a4:be:47:74:4b:3f:af:2b:f6:
         bb:6d:13:c9:d1:d4:13:d3:52:ff:50:9e:5f:ee:4c:8b:7a:c2:
         ab:b8:d8:e3:23:f4:a8:f9:de:72:6f:56:e5:0e:7e:9e:0f:6e:
         e1:ce:f5:61:04:9f:b7:30:8c:fe:a5:f6:67:7f:1b:a7:e2:db:
         ce:e9:25:7e:c4:39:a5:53:6f:2a:1a:df:4b:b4:34:a3:43:58:
         8e:db:89:d0:dc:fd:33:8a:47:03:f4:62:db:38:3c:b9:05:c8:
         0e:e0:dd:20:e6:ff:b3:b8:e5:0c:f4:fe:0f:e3:9b:3e:1d:04:
         69:ff:59:52:07:5e:48:1e:6e:ae:ba:e2:1c:db:ba:9a:96:26:
         34:43:a9:24:8e:93:b5:59:9f:2b:76:99:db:0e:ce:09:ad:07:
         db:c0:32:b2:61:60:80:c1:ac:c6:20:98:34:fa:93:0a:06:25:
         8d:5d:1f:5e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJU7omTjxhVWsSdXBXI29Lsavu38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxRjVDNzUzRUZEQjdGODQ3NkM2M0JCQjQxNDE3QjhF
MTk0QTJBMzAeFw0yNDA1MjMwNDI1MTdaFw0yNTA1MjIwNDMwMTdaMDMxMTAvBgNV
BAMTKEZGMUIyQTc5NDEwRkJGQjY0MDg0OTVGMjAyM0FFRDhBNEE2Q0Q2MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGE0zxG71JK/UJPuN6KHT2YX0v
f08D20cdQeGf9uxicptAh5IJlEGxZqduAFsczseCIZDg+dm7DIw9mmlTcJBna91G
yoO49HvZGTnM/A4D8ee9SQzF9Kd+FYj4JdUclNWV2bohsD9QoSvxroEVVNYQWlOo
6ldRNfvoRr6+hxmCr9TxQQzI9iMIfNHjRSA+4gnhYP3gE20djPdjiP8kpsm6vm2i
+ilyS8wi/ai+Lkum6etazXb4rAMY/KFYUO3p2Yu35745gIEE3o3Zn6VfcF5KYkRT
Hsh/oIx9wo6MYKtwKPuvfMdPy4yoBnTUhR/HVkPNjL7s4Eb+iSHI7UypC4hLAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU/xsqeUEPv7ZAhJXyAjrtikps1gYwHwYDVR0j
BBgwFoAUwB9cdT79t/hHbGO7tBQXuOGUoqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQzAxRjVDNzUzRUZEQjdG
ODQ3NkM2M0JCQjQxNDE3QjhFMTk0QTJBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDFGNUM3NTNFRkRCN0Y4NDc2
QzYzQkJCNDE0MTdCOEUxOTRBMkEzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYxNTY4RDhDOUFERERDQTNDRTc3MDM5NzI3N0Q1Mzk2QjYzMTc0REIw
QzdCMDhCNTc4NjMzQkMzMjY3RTE0Ny8wLzMyMzAzMDJlMzkzMjJlMzEzOTM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzkzMTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyFzH
MA0GCSqGSIb3DQEBCwUAA4IBAQA99TJ909FGnUMCF8qxgyAMZICCBEE0M970kltE
kNaLnbVyVhNeB943n4Fpu+nZX+DIFNxHdNeZgsIGg7Q3MPLdOF5YHWOuwCwkqyYY
a+3QmACkvkd0Sz+vK/a7bRPJ0dQT01L/UJ5f7kyLesKruNjjI/So+d5yb1blDn6e
D27hzvVhBJ+3MIz+pfZnfxun4tvO6SV+xDmlU28qGt9LtDSjQ1iO24nQ3P0zikcD
9GLbODy5BcgO4N0g5v+zuOUM9P4P45s+HQRp/1lSB15IHm6uuuIc27qaliY0Q6kk
jpO1WZ8rdpnbDs4JrQfbwDKyYWCAwazGIJg0+pMKBiWNXR9e
-----END CERTIFICATE-----