Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3232382e302f32332d3233203d3e203238343831.roa
File:                     3230302e39342e3232382e302f32332d3233203d3e203238343831.roa (raw, json)
Hash identifier:          5U31GtY6gXlPSNCEpkDqpe4QabjUDfVBEIX6RgMNsvk=
Subject key identifier:   9B:FB:C0:22:94:37:3C:5A:9F:7E:13:8E:EF:0C:D9:50:09:12:C0:B5
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       44F6D53CB30C6E6721979BA46021403D36370687
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3232382e302f32332d3233203d3e203238343831.roa
Signing time:             Thu 25 Apr 2024 05:45:01 +0000
ROA not before:           Thu 25 Apr 2024 05:40:01 +0000
ROA not after:            Thu 24 Apr 2025 05:45:01 +0000
asID:                     28481
IP address blocks:        200.94.228.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f6:d5:3c:b3:0c:6e:67:21:97:9b:a4:60:21:40:3d:36:37:06:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: Apr 25 05:40:01 2024 GMT
            Not After : Apr 24 05:45:01 2025 GMT
        Subject: CN=9BFBC02294373C5A9F7E138EEF0CD9500912C0B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:65:15:d2:f8:38:46:ca:d7:9f:55:5e:c8:de:
                    f8:9c:1a:56:2b:7c:57:33:1b:c7:23:b8:66:03:e5:
                    fe:50:6f:77:fe:1d:2b:ec:d6:63:eb:88:a9:de:95:
                    b9:90:3b:05:6e:d6:1c:f1:ad:39:5d:6d:ee:0e:59:
                    ff:c5:94:4a:c7:bb:19:16:bd:1d:b8:9b:6d:12:c6:
                    6a:dc:c3:0f:3b:0e:42:62:a6:40:fd:6e:9c:cb:bb:
                    6a:c0:18:48:95:db:7b:07:dc:f5:c3:ef:d0:f5:98:
                    c2:92:11:26:4e:b6:00:dd:af:fa:9c:b3:2d:40:55:
                    05:76:e2:c2:4a:c9:60:f8:41:36:76:88:cf:cf:ff:
                    6e:e8:c4:61:2e:f9:f6:ca:40:4b:26:5c:d0:e2:0a:
                    3d:3d:d1:6a:87:cb:bc:c1:e6:b0:95:87:b7:47:0e:
                    92:2f:19:bc:a0:19:c9:17:b4:a5:ba:11:72:16:06:
                    6f:1b:59:ea:b2:ca:da:a3:d5:8d:2d:5d:75:41:32:
                    28:29:2e:f0:03:eb:93:d1:31:85:38:cd:95:15:b4:
                    52:68:63:b4:58:36:50:d7:58:b8:fb:92:b3:2b:36:
                    49:a6:64:f7:b1:df:29:7b:22:81:ab:03:f7:16:17:
                    f5:bb:fc:95:b8:12:c0:d2:30:21:2a:73:e0:89:c7:
                    9f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FB:C0:22:94:37:3C:5A:9F:7E:13:8E:EF:0C:D9:50:09:12:C0:B5
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3232382e302f32332d3233203d3e203238343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:d3:ed:5a:fe:0b:9b:b7:28:e5:61:4f:92:09:47:26:80:a2:
         4c:5c:f0:ee:11:c0:87:1f:fd:29:a0:d8:13:15:7d:54:fb:6d:
         68:54:70:66:89:25:6b:51:b3:41:ac:89:6c:2e:17:f0:8f:21:
         aa:c4:57:3a:19:8d:04:a4:ca:99:db:f0:d7:16:b9:71:42:62:
         47:15:ec:4c:c5:47:88:13:5b:f7:e8:31:11:4a:5b:c7:7b:7d:
         d8:04:23:a5:a5:f3:9f:c9:1c:2f:54:c8:99:a4:f6:57:29:b5:
         77:65:e6:bd:d6:3a:1b:01:39:c7:83:bd:f5:70:00:1c:35:ea:
         6b:89:75:a6:5a:1d:a1:34:c7:7f:31:f3:04:6a:48:4d:64:2c:
         b1:ef:a3:f6:69:1c:b7:c9:9d:0b:d4:22:4f:e6:c0:bc:76:8d:
         26:84:d7:ce:79:52:c4:33:a3:55:1f:5b:d6:15:fc:11:0c:ef:
         b5:83:a3:b3:4e:df:4f:7a:9c:52:04:6e:cc:3d:4f:6c:75:a2:
         79:a5:d8:7f:94:f4:1c:ce:ab:05:e9:c6:0e:08:66:fd:80:d1:
         56:41:23:28:f7:54:3b:37:e5:8b:5e:a5:75:ff:63:88:03:02:
         54:3a:c8:03:02:8d:c3:21:f1:0d:fc:b2:75:85:b6:17:64:e7:
         41:18:7d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----