Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3233302e302f32332d3233203d3e203238343831.roa
File:                     3230302e39342e3233302e302f32332d3233203d3e203238343831.roa (raw, json)
Hash identifier:          j/Nae4ahkeOR+dFtAz2Wq0XTNEl3qHS8RSHr/dS3zpk=
Subject key identifier:   31:26:65:58:C0:A5:83:DA:59:FF:72:4A:5A:55:6E:71:BF:76:D5:AB
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       34C08C6F9C64F5A019C43FFA77C14D8CB2CAD491
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3233302e302f32332d3233203d3e203238343831.roa
Signing time:             Thu 25 Apr 2024 05:45:01 +0000
ROA not before:           Thu 25 Apr 2024 05:40:01 +0000
ROA not after:            Thu 24 Apr 2025 05:45:01 +0000
asID:                     28481
IP address blocks:        200.94.230.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c0:8c:6f:9c:64:f5:a0:19:c4:3f:fa:77:c1:4d:8c:b2:ca:d4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: Apr 25 05:40:01 2024 GMT
            Not After : Apr 24 05:45:01 2025 GMT
        Subject: CN=31266558C0A583DA59FF724A5A556E71BF76D5AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:da:07:f8:41:83:d9:fd:61:8c:d5:5b:bd:
                    65:0b:16:8f:bf:e9:41:38:87:40:a3:29:31:6a:9d:
                    a4:6d:bd:6a:db:55:c4:24:21:df:3a:aa:65:84:73:
                    d0:dd:36:20:07:ff:59:d9:10:42:15:82:ee:71:cd:
                    68:41:58:0f:eb:b2:10:f9:d6:24:12:fe:9a:c2:d3:
                    a7:fe:e3:4a:af:35:2d:e4:f8:27:99:69:a3:5d:9a:
                    d4:0c:d0:ab:8e:2c:f3:2a:03:30:17:cd:3f:c8:8c:
                    72:59:cf:93:8f:28:75:19:97:4a:f6:a0:c9:56:7b:
                    13:54:09:4f:88:ab:9a:22:8e:50:40:bc:3a:62:63:
                    c3:55:5b:be:87:a5:ba:34:e2:06:12:07:13:03:2b:
                    0c:7d:ef:77:4e:ef:05:a7:ea:4f:dd:76:5a:20:8d:
                    a1:85:43:1c:14:cc:a8:f4:7d:68:18:62:6d:27:61:
                    cd:0d:35:73:1e:a6:ea:ca:0a:d9:29:eb:47:10:f5:
                    09:6a:8e:0f:20:bd:49:a5:a2:88:52:1c:94:85:2d:
                    3f:0b:20:33:84:b0:a2:51:2a:a7:6d:62:59:7f:72:
                    98:7a:c9:6e:a1:17:7c:e6:14:16:dd:11:e5:cd:75:
                    ab:e1:13:61:86:f8:cc:95:85:c3:ad:a8:cb:3d:07:
                    bb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:26:65:58:C0:A5:83:DA:59:FF:72:4A:5A:55:6E:71:BF:76:D5:AB
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3233302e302f32332d3233203d3e203238343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:26:b6:83:aa:8b:67:8a:c8:a9:af:51:df:5f:d5:d7:83:88:
         04:4c:25:f3:4d:2a:60:02:9c:7a:d0:60:53:df:af:1c:19:a4:
         bc:d4:3c:c4:b5:98:ba:59:ca:b5:80:f5:3b:c7:c4:6c:1c:91:
         1b:27:37:32:84:aa:c9:51:80:34:9a:0a:cf:49:72:56:7f:af:
         20:a1:a4:a7:3a:b2:ac:fe:7a:07:40:82:e7:1b:7c:af:8d:3a:
         63:98:33:d7:cd:63:9f:ae:d1:2e:c4:ae:af:ae:72:b7:a4:25:
         04:3d:20:49:3d:8f:8e:7b:ba:4f:fd:f4:a4:d7:ef:c2:8f:b0:
         f3:14:e7:e6:43:e6:06:89:a9:69:f2:25:05:32:05:08:df:32:
         23:88:67:c9:47:55:e9:6f:f5:62:87:4b:a7:e3:6b:83:61:db:
         81:fd:69:92:ba:a5:5c:92:85:0d:02:c2:ad:41:56:fe:d3:d0:
         a1:23:c4:8b:8d:0c:80:6d:55:e1:1d:85:7f:8a:41:39:99:ac:
         5b:f3:5a:35:3f:19:a9:37:f8:bf:8b:87:f1:37:15:de:6b:a4:
         98:90:8e:43:9b:ff:3d:8d:77:62:33:56:d7:a9:27:a7:9b:dd:
         65:e3:e8:d4:37:f6:69:ed:16:b8:5b:b4:b3:b2:80:ad:2e:f5:
         d9:82:b9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----