Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3230312e302f32342d3234203d3e20323632393136.roa
File:                     3230302e39322e3230312e302f32342d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          U/wtOMqMTMysGKfsBxE3RB3vmvzfsUFp/Kwhp24UC3U=
Subject key identifier:   AE:71:44:71:AC:E9:98:6D:40:16:8E:6B:73:CB:09:D2:3D:95:7E:8E
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       2153BFD54C6FB142337DB95A1FF6EBACC5C3DAD5
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3230312e302f32342d3234203d3e20323632393136.roa
Signing time:             Thu 23 May 2024 04:30:16 +0000
ROA not before:           Thu 23 May 2024 04:25:16 +0000
ROA not after:            Thu 22 May 2025 04:30:16 +0000
asID:                     262916
IP address blocks:        200.92.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:53:bf:d5:4c:6f:b1:42:33:7d:b9:5a:1f:f6:eb:ac:c5:c3:da:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:16 2024 GMT
            Not After : May 22 04:30:16 2025 GMT
        Subject: CN=AE714471ACE9986D40168E6B73CB09D23D957E8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ce:b9:31:89:da:7e:d1:b0:ad:3b:ab:73:ba:
                    23:c4:bb:d6:f4:ff:09:e9:89:87:81:7f:37:c5:4d:
                    69:6b:7e:41:a7:8a:1b:9e:d2:15:49:d8:71:ff:47:
                    5e:47:91:cd:96:2d:59:6c:20:c5:a5:16:ba:eb:54:
                    15:5a:a0:c4:98:ef:95:4c:2c:1c:33:90:62:2f:b3:
                    25:15:b1:5a:c1:7d:1c:11:08:92:1f:62:a3:1b:12:
                    b5:a6:a6:35:10:85:47:7f:f6:2f:4f:4a:2d:7d:93:
                    49:48:df:fb:a9:6d:ab:ca:2a:e0:b7:57:2f:72:0b:
                    14:97:4f:92:d4:37:1d:44:be:ac:3d:ac:e9:82:72:
                    1a:a9:f9:a9:d5:bc:b8:3d:78:39:c8:82:fa:ac:74:
                    29:2f:c4:5b:a1:9a:2c:96:3d:56:a1:80:54:11:13:
                    89:14:20:bc:c7:24:47:cd:f3:96:9f:43:ad:69:06:
                    9a:70:2f:81:bf:cb:e9:e3:27:df:83:8c:a2:21:18:
                    b5:dd:d7:ff:0d:ac:cf:86:73:b2:75:76:ef:25:01:
                    f1:8c:66:8b:f8:80:1f:38:66:cf:19:c8:bc:fa:07:
                    85:13:5f:36:6d:c2:dc:a3:38:3e:66:08:f1:7e:1d:
                    eb:20:9e:52:b9:32:d5:e0:2f:6c:e7:88:10:86:ee:
                    87:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:71:44:71:AC:E9:98:6D:40:16:8E:6B:73:CB:09:D2:3D:95:7E:8E
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3230312e302f32342d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:54:1a:39:7d:f6:d4:f5:4f:64:fc:57:4a:a7:6b:de:f1:39:
         ec:c1:1e:6b:8c:cc:b6:02:51:f0:e7:e8:7d:a5:21:93:c1:0d:
         bc:c0:27:a5:a0:26:6d:64:0b:6f:a9:93:d7:a0:57:29:e6:95:
         c6:80:b5:e5:b6:b8:4a:21:51:a1:3a:c7:4b:05:0d:af:b7:9b:
         f8:7d:8c:77:68:c5:3f:b5:46:24:4d:e5:dd:11:e8:4a:12:6e:
         fd:34:b4:0e:97:65:40:e3:93:f7:be:86:ac:e2:1a:28:b3:8a:
         48:fe:73:43:17:c3:db:21:3b:02:8d:b2:2e:90:0a:bd:f0:bc:
         50:35:5e:dc:9b:68:bc:a3:e4:ac:c7:8d:9e:52:e6:04:78:6a:
         cc:83:ed:57:b2:60:7d:5e:ea:df:92:d3:39:94:7c:ad:81:02:
         2b:39:69:69:6b:70:56:59:9c:38:43:a4:c6:3c:3f:44:95:9f:
         44:9c:87:bd:1a:b7:0e:47:58:41:65:f2:f8:23:68:77:b4:c7:
         20:b4:f9:cc:5d:83:fb:38:a9:e3:8c:77:e7:a4:73:26:f3:d2:
         c8:12:25:ca:71:59:05:f3:8e:dd:45:18:96:84:db:a4:99:f7:
         8a:68:9d:32:3b:b4:b9:01:3d:86:ce:ec:34:b9:c0:ca:fb:d7:
         e1:8f:14:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----