Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3230322e302f32332d3234203d3e20323632393136.roa
File:                     3230302e39322e3230322e302f32332d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          hCBRVVC07FfAHRbpJwXBKD/M0//aQtFQ+xzSKskGDak=
Subject key identifier:   C2:F9:60:9B:EB:A8:6F:6F:7A:05:4A:93:42:C9:BE:CE:1C:40:A1:77
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       4D7EFDE431E221CD4EBD2464E2A45B5B2533F398
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3230322e302f32332d3234203d3e20323632393136.roa
Signing time:             Thu 23 May 2024 04:30:02 +0000
ROA not before:           Thu 23 May 2024 04:25:02 +0000
ROA not after:            Thu 22 May 2025 04:30:02 +0000
asID:                     262916
IP address blocks:        200.92.202.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7e:fd:e4:31:e2:21:cd:4e:bd:24:64:e2:a4:5b:5b:25:33:f3:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:02 2024 GMT
            Not After : May 22 04:30:02 2025 GMT
        Subject: CN=C2F9609BEBA86F6F7A054A9342C9BECE1C40A177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:29:99:a6:b1:47:ee:68:6b:53:0a:90:fe:
                    7d:89:15:1e:72:ac:1b:7b:cf:75:f0:d8:3f:28:18:
                    c3:8e:42:1d:a5:f8:2f:5f:26:03:7d:dd:3b:e1:85:
                    35:60:32:55:9d:c4:62:3e:fc:07:ea:2b:3e:ae:c6:
                    59:ee:84:8d:de:05:44:92:40:36:5f:7d:f7:89:d9:
                    ad:1a:09:b1:3a:7c:ca:df:63:f1:fe:38:2a:31:38:
                    ed:5c:f3:0d:30:13:09:3f:84:f8:1d:27:ca:8e:3c:
                    a4:23:4d:73:e3:2b:fd:13:bf:73:97:58:44:c9:9a:
                    fc:f2:69:c6:d1:c5:b0:5f:fe:ad:24:ba:7e:3b:cf:
                    fc:58:a6:5f:b0:19:99:70:63:c9:c5:f1:3b:c1:88:
                    9e:39:f9:e5:2c:c1:24:47:59:11:be:90:a1:9c:b4:
                    41:99:4a:8a:2a:c1:7c:6b:1a:bb:40:68:75:02:7b:
                    6c:1d:fd:ad:54:a6:07:d8:88:b5:51:ab:28:81:49:
                    2c:b9:dc:ac:fb:e3:ea:53:df:7a:9a:5d:3d:0b:d4:
                    30:49:1d:89:18:dc:6c:b9:f2:bc:8e:7f:af:03:de:
                    05:d8:88:14:00:23:55:a1:05:7d:3d:39:4d:b6:ca:
                    08:be:35:ed:d7:c2:e4:52:38:00:68:cc:6c:17:d6:
                    5c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F9:60:9B:EB:A8:6F:6F:7A:05:4A:93:42:C9:BE:CE:1C:40:A1:77
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3230322e302f32332d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:65:17:22:9a:89:ea:34:ce:ab:ea:a0:a3:cd:56:93:d2:f5:
         b3:18:65:06:7f:98:57:c4:a4:b3:22:d8:7a:13:d1:94:89:e3:
         3d:3a:e5:97:60:74:5a:72:ce:bb:9c:60:7b:4b:db:64:fa:cc:
         bd:a6:19:68:45:4d:79:9a:84:2e:a9:41:40:63:4b:4e:a9:8a:
         8c:85:b6:be:bd:bc:c8:eb:1a:83:f8:97:56:74:b3:7b:10:d4:
         36:5f:a2:92:69:fb:70:99:66:5b:a3:c4:39:96:6f:7b:56:40:
         f5:b1:f0:6b:f5:3c:b2:2d:09:86:18:be:69:49:60:13:50:09:
         22:5e:45:bc:0c:b6:01:be:83:09:72:68:b7:13:a8:24:ad:40:
         be:83:cb:d2:bd:28:19:89:00:c2:a5:ba:d4:75:62:e9:a5:85:
         7c:ec:4c:fd:6d:80:94:89:53:89:1a:b7:15:ae:b1:5c:de:9e:
         a1:c5:91:d2:fb:72:7a:c1:38:5d:86:66:18:d9:6a:85:66:da:
         e9:47:6c:57:75:d7:85:d8:0d:bc:c0:ea:a8:af:f1:69:8a:c2:
         95:31:52:b6:34:98:9f:7a:d4:99:a3:7f:2c:0a:3d:d1:75:2f:
         b2:29:fd:fd:18:c4:c3:bb:d3:ce:a2:b9:a9:59:fc:91:41:13:
         20:79:b6:be
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTX795DHiIc1OvSRk4qRbWyUz85gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxRjVDNzUzRUZEQjdGODQ3NkM2M0JCQjQxNDE3QjhF
MTk0QTJBMzAeFw0yNDA1MjMwNDI1MDJaFw0yNTA1MjIwNDMwMDJaMDMxMTAvBgNV
BAMTKEMyRjk2MDlCRUJBODZGNkY3QTA1NEE5MzQyQzlCRUNFMUM0MEExNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuDymZprFH7mhrUwqQ/n2JFR5y
rBt7z3Xw2D8oGMOOQh2l+C9fJgN93TvhhTVgMlWdxGI+/AfqKz6uxlnuhI3eBUSS
QDZfffeJ2a0aCbE6fMrfY/H+OCoxOO1c8w0wEwk/hPgdJ8qOPKQjTXPjK/0Tv3OX
WETJmvzyacbRxbBf/q0kun47z/xYpl+wGZlwY8nF8TvBiJ45+eUswSRHWRG+kKGc
tEGZSooqwXxrGrtAaHUCe2wd/a1UpgfYiLVRqyiBSSy53Kz74+pT33qaXT0L1DBJ
HYkY3Gy58ryOf68D3gXYiBQAI1WhBX09OU22ygi+Ne3XwuRSOABozGwX1lyPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUwvlgm+uob296BUqTQsm+zhxAoXcwHwYDVR0j
BBgwFoAUwB9cdT79t/hHbGO7tBQXuOGUoqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQzAxRjVDNzUzRUZEQjdG
ODQ3NkM2M0JCQjQxNDE3QjhFMTk0QTJBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDFGNUM3NTNFRkRCN0Y4NDc2
QzYzQkJCNDE0MTdCOEUxOTRBMkEzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYxNTY4RDhDOUFERERDQTNDRTc3MDM5NzI3N0Q1Mzk2QjYzMTc0REIw
QzdCMDhCNTc4NjMzQkMzMjY3RTE0Ny8wLzMyMzAzMDJlMzkzMjJlMzIzMDMyMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjMyMzkzMTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByFzK
MA0GCSqGSIb3DQEBCwUAA4IBAQA4ZRcimonqNM6r6qCjzVaT0vWzGGUGf5hXxKSz
Ith6E9GUieM9OuWXYHRacs67nGB7S9tk+sy9phloRU15moQuqUFAY0tOqYqMhba+
vbzI6xqD+JdWdLN7ENQ2X6KSaftwmWZbo8Q5lm97VkD1sfBr9TyyLQmGGL5pSWAT
UAkiXkW8DLYBvoMJcmi3E6gkrUC+g8vSvSgZiQDCpbrUdWLppYV87Ez9bYCUiVOJ
GrcVrrFc3p6hxZHS+3J6wThdhmYY2WqFZtrpR2xXddeF2A28wOqor/FpisKVMVK2
NJifetSZo38sCj3RdS+yKf39GMTDu9POormpWfyRQRMgeba+
-----END CERTIFICATE-----