Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3232342e302f32312d3234203d3e203133393939.roa
File:                     3230302e39322e3232342e302f32312d3234203d3e203133393939.roa (raw, json)
Hash identifier:          pXePfgXI88J02w8ukIBsvnkB48llOZ8iCZ942hl2PcI=
Subject key identifier:   5A:C2:A3:84:20:48:A2:D2:2E:27:61:1C:79:E9:81:73:42:AD:23:9A
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       7875DA7A665DEB2281C320DCBEF6C655A8D5BF58
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3232342e302f32312d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:02 +0000
ROA not before:           Thu 23 May 2024 04:25:02 +0000
ROA not after:            Thu 22 May 2025 04:30:02 +0000
asID:                     13999
IP address blocks:        200.92.224.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:75:da:7a:66:5d:eb:22:81:c3:20:dc:be:f6:c6:55:a8:d5:bf:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:02 2024 GMT
            Not After : May 22 04:30:02 2025 GMT
        Subject: CN=5AC2A3842048A2D22E27611C79E9817342AD239A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:6c:a9:10:9d:67:9f:81:bb:68:db:e8:09:
                    3e:82:bc:70:9b:2c:d9:0f:c2:17:04:f4:ab:77:20:
                    ae:5d:55:93:8c:2b:60:f2:dd:8e:9a:23:2a:83:86:
                    70:f2:df:a8:09:d1:65:7d:77:bc:e8:3c:2c:44:b7:
                    c7:ba:cc:f5:93:75:c8:2f:7b:c6:e8:95:be:fb:ac:
                    ef:f1:68:47:a6:c4:35:94:5e:f9:4d:88:43:d7:41:
                    71:6f:c7:a7:53:4b:4d:48:7b:2e:dc:e4:c3:ec:59:
                    83:4b:62:c4:13:ef:55:57:5f:f8:77:7d:e7:c2:92:
                    ed:24:2e:b8:16:3a:5a:c3:bc:8e:23:9e:8d:5b:f6:
                    fa:0d:bb:52:a1:18:46:b2:f6:25:69:5f:7b:9f:b5:
                    8f:c9:f2:3e:ca:15:98:87:31:5a:17:5b:28:ac:db:
                    23:4c:dd:d7:7b:2f:1a:9e:79:3f:6a:22:de:21:fc:
                    a9:1e:85:e5:14:d1:6a:1c:1b:85:23:72:9f:e5:90:
                    82:76:56:83:39:8d:6e:db:b0:2d:91:80:97:86:d2:
                    ae:e3:d3:a4:e0:14:f8:16:d0:0a:1e:4e:66:4c:7f:
                    e2:a9:94:b0:fc:0e:c0:f6:73:b6:bf:66:fd:5f:f5:
                    e7:9d:3a:66:d2:44:93:01:30:b6:a1:05:90:a9:63:
                    fd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C2:A3:84:20:48:A2:D2:2E:27:61:1C:79:E9:81:73:42:AD:23:9A
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3232342e302f32312d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4d:99:c1:23:57:f8:af:63:5e:68:aa:8f:89:55:b2:21:81:d9:
         62:f5:34:f0:99:dc:f4:c2:2e:e1:92:55:07:fe:c3:97:e7:e6:
         70:9a:62:d9:12:33:7f:4d:f4:0f:95:ab:1c:1e:33:78:de:e1:
         ba:df:2b:6f:05:fa:c9:57:98:cb:70:60:1b:3e:ef:f0:0c:1c:
         10:07:de:46:6b:b2:d6:2c:b9:eb:7f:d0:d5:7b:98:83:bd:71:
         bb:19:bb:ca:88:bd:af:0f:71:ce:c8:85:1f:70:39:c8:d9:14:
         9f:c3:13:a5:49:41:9a:6b:da:4c:e1:83:a6:07:6b:34:f2:e0:
         b5:1c:86:bc:f0:8b:50:fd:33:bb:3a:be:09:34:11:a3:fb:02:
         8e:43:98:74:47:a9:ac:5b:32:d2:ce:68:64:60:b6:ab:9b:e2:
         a7:7a:c3:63:f7:f7:81:f0:1c:3d:43:db:3b:e8:1a:c7:47:f1:
         5b:47:05:ee:b5:b3:52:3c:b7:63:3e:c9:23:92:84:f6:8b:18:
         86:f7:67:33:6a:f8:c2:10:bd:2a:59:e5:6c:46:e3:34:23:f5:
         1a:a2:6a:75:36:fd:7f:d1:25:f1:19:7f:f5:b3:41:75:60:38:
         af:4c:d5:fd:35:94:b4:df:26:85:15:8a:fd:3b:c4:0f:a5:a5:
         c3:e7:9f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----