Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3232302e302f32322d3232203d3e203238343831.roa
File:                     3230302e39322e3232302e302f32322d3232203d3e203238343831.roa (raw, json)
Hash identifier:          z6hpEQdQUNf0fY/dlXn3DzFl0DdU2S+yiNnT1IxhEWI=
Subject key identifier:   35:AA:8F:AA:67:CD:71:07:77:14:B0:12:DA:22:BB:D4:20:BC:09:4E
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       59419A18C4286EA569D679438BFBABB7FE39E4FB
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3232302e302f32322d3232203d3e203238343831.roa
Signing time:             Thu 23 May 2024 04:30:12 +0000
ROA not before:           Thu 23 May 2024 04:25:12 +0000
ROA not after:            Thu 22 May 2025 04:30:12 +0000
asID:                     28481
IP address blocks:        200.92.220.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:41:9a:18:c4:28:6e:a5:69:d6:79:43:8b:fb:ab:b7:fe:39:e4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:12 2024 GMT
            Not After : May 22 04:30:12 2025 GMT
        Subject: CN=35AA8FAA67CD71077714B012DA22BBD420BC094E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c8:bd:42:51:96:b8:8e:f1:72:6c:d8:96:bc:
                    97:23:7a:63:da:05:65:46:95:09:f1:73:37:95:e9:
                    de:13:57:e0:6c:09:c2:23:10:fe:8c:a6:d7:96:6a:
                    27:45:d2:c1:11:27:3d:02:34:24:78:35:e7:97:df:
                    f0:c4:6e:23:0d:56:4d:09:36:b0:ff:64:5d:01:e9:
                    0e:36:ad:96:cc:76:94:72:5a:fb:66:87:e3:8e:ca:
                    2e:bc:05:c0:ef:cf:df:6a:db:16:cc:dd:f1:70:47:
                    8a:e1:0c:90:72:58:f0:43:17:1a:2d:f7:65:2b:85:
                    be:5d:d6:b0:da:4d:87:5c:80:c3:79:66:f1:22:cd:
                    eb:0d:76:b8:15:53:53:b2:a0:21:b3:56:32:cc:6d:
                    f5:f9:f6:ed:28:8b:2b:ea:ed:85:24:95:1f:2c:33:
                    17:ea:21:2c:fb:51:92:7d:e4:df:1a:b7:6a:15:08:
                    cc:cd:7c:1d:04:0a:2c:59:7a:fa:97:29:08:e1:28:
                    40:f7:5d:67:3e:32:80:70:2c:3e:b9:04:09:bc:c6:
                    f7:f0:f0:c1:fd:c5:f2:25:85:8f:83:07:56:6c:45:
                    2c:03:c9:7e:a9:a6:8b:a0:65:3e:a8:ed:e1:75:74:
                    f3:90:3a:31:db:e7:c7:75:21:ae:8f:6f:70:11:79:
                    cc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AA:8F:AA:67:CD:71:07:77:14:B0:12:DA:22:BB:D4:20:BC:09:4E
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3232302e302f32322d3232203d3e203238343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:84:8e:60:b6:6d:86:51:b9:3f:0c:7c:7a:dc:4a:b9:bd:15:
         81:73:65:a7:62:10:ef:3c:29:66:5c:e4:1b:7c:eb:43:84:6a:
         17:f1:c7:49:09:bf:d2:a3:e6:35:fd:cc:07:db:34:0a:6c:cc:
         cc:72:04:4c:65:f1:15:f8:9a:ef:2f:74:97:70:66:30:42:3b:
         e1:82:0a:30:eb:fd:b5:8f:87:c9:6f:99:8f:d0:d7:2f:0a:19:
         6e:72:7e:36:5a:6e:7a:b7:2c:e1:36:86:86:67:63:c0:67:6d:
         ad:6d:d7:97:f2:5f:71:0d:1e:e7:89:09:63:4b:02:6a:c0:b4:
         b4:75:2e:bf:ba:80:bf:e3:cb:07:91:25:09:e8:e6:09:1b:54:
         2e:7e:47:d6:ba:6f:e9:57:97:7c:01:0d:2b:ba:7c:d4:83:c6:
         f7:d7:fb:41:a0:2a:64:f2:9c:8c:4f:15:fc:45:37:9a:f6:c0:
         73:50:31:ed:45:d8:d8:5d:f7:57:08:5f:18:a0:3e:04:c7:f1:
         30:2f:9e:6a:9b:0a:12:b5:41:04:10:ff:c1:49:b7:fd:9d:02:
         63:4e:2d:0d:fc:56:ee:d7:ff:88:e2:31:81:c4:81:08:97:d0:
         d8:f5:9f:8f:67:fb:89:78:d0:1d:ee:f0:e7:89:b3:87:e1:68:
         19:96:0c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----