Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3230382e302f32312d3234203d3e203133393939.roa
File:                     3230302e39322e3230382e302f32312d3234203d3e203133393939.roa (raw, json)
Hash identifier:          VHElxDKMBpeXo/MzpivYZGJ6JDl89icnOx4/F1eutxs=
Subject key identifier:   23:03:31:89:80:5A:1B:41:E6:F1:2A:1B:CA:2A:F4:98:3C:1F:DD:B7
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       40497CDFE8D4E44FC67E7CC7F41089689FA481A5
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3230382e302f32312d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:06 +0000
ROA not before:           Thu 23 May 2024 04:25:06 +0000
ROA not after:            Thu 22 May 2025 04:30:06 +0000
asID:                     13999
IP address blocks:        200.92.208.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:49:7c:df:e8:d4:e4:4f:c6:7e:7c:c7:f4:10:89:68:9f:a4:81:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:06 2024 GMT
            Not After : May 22 04:30:06 2025 GMT
        Subject: CN=23033189805A1B41E6F12A1BCA2AF4983C1FDDB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:df:ff:11:c8:7f:d5:86:8d:d1:6e:30:41:
                    09:e7:d3:20:dc:2a:8e:be:56:f9:07:d3:9a:c8:e0:
                    f9:7f:2b:46:04:19:f6:aa:1d:1a:6a:28:c6:20:5f:
                    ff:42:2c:27:60:a1:88:7e:c3:61:dd:09:91:8d:46:
                    8c:df:bc:be:6e:9c:a8:b4:ec:53:f1:a3:a4:78:9b:
                    cf:ed:1b:da:a7:2b:a0:7e:76:9f:b7:eb:25:16:cd:
                    9b:3a:c5:5f:e3:6d:17:e3:65:f4:88:0b:a7:c8:3e:
                    29:e3:1c:a4:dc:3e:90:79:4f:97:81:6b:02:1c:53:
                    5d:da:a3:a7:13:90:5b:c0:c1:b8:75:c0:11:7c:73:
                    4e:a0:b1:8a:0a:44:db:f3:7d:c0:eb:d3:6d:db:a3:
                    36:42:bb:1e:dd:0d:05:b0:b2:55:9a:2e:0c:c4:6f:
                    78:cc:29:71:0c:4f:85:04:be:54:fc:20:d2:e9:27:
                    24:39:74:57:fc:36:2a:52:9b:e7:84:f2:f1:b3:f0:
                    ca:aa:24:48:31:89:95:74:39:5f:f0:03:20:e7:44:
                    dc:cb:d7:e7:af:e6:01:74:9a:a7:ce:b2:ab:be:03:
                    2d:1b:54:a7:6d:51:81:3b:0b:c8:25:98:ce:ec:68:
                    a3:66:64:75:6a:5d:9b:d2:98:98:92:66:fb:21:de:
                    a7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:03:31:89:80:5A:1B:41:E6:F1:2A:1B:CA:2A:F4:98:3C:1F:DD:B7
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3230382e302f32312d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:67:26:77:29:54:a3:f7:f1:83:e0:4c:04:d8:59:d1:0d:ac:
         13:b1:d0:6e:76:5e:f7:19:54:9f:9b:bf:52:61:80:fa:a4:56:
         99:18:8a:95:96:55:fb:23:f0:da:86:7e:f4:0f:4c:10:51:e4:
         1a:83:f1:ac:55:cd:67:0c:e1:e8:fe:be:82:98:7f:5b:8b:61:
         72:33:1c:f1:30:02:f6:35:a0:7f:94:b5:74:c1:23:20:70:cb:
         20:19:21:8e:4b:22:37:72:e0:f3:f1:ac:00:c3:f5:64:69:d5:
         75:49:46:e6:9e:37:e9:66:0d:d6:2a:04:4e:70:7c:48:91:08:
         a3:15:24:d4:03:4e:f6:72:26:cd:5a:4a:2b:1b:0a:72:99:fb:
         86:67:b3:b6:2a:0f:f1:f4:18:98:fe:36:89:c6:02:3e:e5:b8:
         37:cc:e2:f5:40:86:5f:f4:51:a0:e6:1d:07:af:14:d6:ce:ac:
         81:96:78:9b:0b:b6:4d:83:b5:65:42:14:4c:9a:b9:e1:54:fe:
         d6:6d:67:ab:8e:a8:94:94:b6:19:09:08:23:0f:df:1b:0f:b8:
         a8:a3:30:ed:ba:cf:6e:da:48:f9:98:36:66:24:44:d2:3e:4b:
         e9:6f:8e:1e:b5:be:e0:ff:fa:38:42:47:6e:0f:46:6c:a1:3e:
         4b:fd:d7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----