Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3232342e302f32322d3232203d3e203133393939.roa
File:                     3230302e39342e3232342e302f32322d3232203d3e203133393939.roa (raw, json)
Hash identifier:          uZ27WfvdMSHXfY34Q66gEsG2Awe45t9PLVoV09Wa8TM=
Subject key identifier:   94:B5:9A:E8:21:24:1C:D6:A1:51:B7:F8:67:33:FD:FD:F9:B2:49:AF
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       79EFC862C359EF74A8334A5204FA0ADBE31DE412
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3232342e302f32322d3232203d3e203133393939.roa
Signing time:             Thu 25 Apr 2024 05:45:00 +0000
ROA not before:           Thu 25 Apr 2024 05:40:00 +0000
ROA not after:            Thu 24 Apr 2025 05:45:00 +0000
asID:                     13999
IP address blocks:        200.94.224.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ef:c8:62:c3:59:ef:74:a8:33:4a:52:04:fa:0a:db:e3:1d:e4:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: Apr 25 05:40:00 2024 GMT
            Not After : Apr 24 05:45:00 2025 GMT
        Subject: CN=94B59AE821241CD6A151B7F86733FDFDF9B249AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:5e:41:1b:15:76:14:08:a1:56:ba:5b:10:
                    dd:71:e3:9a:57:5c:ac:16:44:50:9b:5d:e7:99:38:
                    8b:4b:4f:88:a3:f4:cb:ab:15:a9:a6:ad:1f:7d:d5:
                    ae:1a:cb:98:dc:21:56:4c:f9:32:01:5d:b5:4d:96:
                    5c:da:e4:61:e9:75:f0:97:56:04:e4:19:af:38:89:
                    33:13:64:18:12:5b:59:46:39:e2:69:09:cf:62:d7:
                    ed:ef:b8:20:ca:6d:ac:2c:9f:76:22:98:b1:71:23:
                    57:e6:10:46:e6:25:c5:ca:bc:e0:4f:c4:42:c8:c8:
                    8a:8f:49:b4:db:be:41:83:d6:8c:e2:42:94:6d:c6:
                    74:74:3f:e6:2c:c4:1f:5d:c7:49:e2:6d:83:87:37:
                    ba:55:62:0d:37:f3:3d:51:80:3d:d2:98:fa:49:0f:
                    2c:e1:ec:4b:a0:60:14:53:7b:fa:88:8e:64:97:11:
                    c8:c5:25:f8:30:a9:40:00:7d:e5:6a:45:48:d3:ac:
                    8f:a2:45:ff:8b:8a:62:25:86:b0:6a:01:83:e9:56:
                    29:25:88:99:04:26:b4:5c:5c:66:a2:bc:bf:69:7b:
                    53:2c:cf:5b:3a:d2:20:c0:6e:40:d4:51:17:2c:c5:
                    81:ea:7c:a5:7c:54:6e:4e:d2:48:17:4f:21:58:71:
                    e9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B5:9A:E8:21:24:1C:D6:A1:51:B7:F8:67:33:FD:FD:F9:B2:49:AF
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3232342e302f32322d3232203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:e4:6c:a3:a9:f5:2a:b5:f8:39:bb:01:51:f5:06:18:24:27:
         87:8b:da:aa:36:0c:ec:ec:d9:b6:d2:61:4d:26:78:85:5a:33:
         fe:52:c9:f7:a7:73:7c:89:12:d5:2c:e5:b9:c5:3f:69:a0:6e:
         84:3f:2d:dd:46:72:aa:51:08:42:a3:87:1b:17:4f:3c:29:29:
         51:f8:f3:a6:93:67:5e:a0:2a:21:07:62:b2:d2:ce:b4:45:b5:
         84:94:cd:02:37:c0:b4:0b:6c:de:d4:0a:56:d0:c6:3d:13:04:
         e0:35:c8:22:8c:6d:6f:5a:98:7f:e6:aa:e2:2d:45:35:b8:30:
         d5:5f:0d:7e:a4:e6:d6:1d:85:99:5d:ea:b0:6a:ff:4a:2a:9b:
         e8:96:a2:f0:63:54:43:92:81:58:47:5e:65:c3:37:13:75:78:
         0d:9a:13:78:52:7f:1a:9e:3a:19:5d:2b:41:fa:f5:d0:42:ff:
         fc:6e:ba:f4:d0:32:c2:39:b4:12:ce:f9:ad:9d:b0:ab:78:43:
         6c:5f:0e:d3:bb:e3:d4:70:54:7d:7d:10:8f:01:dd:fd:e3:ea:
         a2:85:18:4c:71:66:69:ed:bb:f4:c9:f2:86:e7:c8:91:37:1e:
         0c:e6:40:4b:ac:13:d1:f9:9e:30:3e:aa:c9:30:61:7c:c3:5f:
         41:df:a2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----