Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3233342e302f32332d3233203d3e203238343831.roa
File:                     3230302e39342e3233342e302f32332d3233203d3e203238343831.roa (raw, json)
Hash identifier:          w/HpqLbMZzi914mifNapyKwRpyryYesohfWLr4bh9Yk=
Subject key identifier:   43:8D:3D:25:A5:65:60:04:D4:56:37:B7:78:64:FF:13:7B:C7:80:74
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       3975557B4D390736EBCA0A6AB667CD3891184E4E
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3233342e302f32332d3233203d3e203238343831.roa
Signing time:             Thu 25 Apr 2024 05:45:00 +0000
ROA not before:           Thu 25 Apr 2024 05:40:00 +0000
ROA not after:            Thu 24 Apr 2025 05:45:00 +0000
asID:                     28481
IP address blocks:        200.94.234.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:75:55:7b:4d:39:07:36:eb:ca:0a:6a:b6:67:cd:38:91:18:4e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: Apr 25 05:40:00 2024 GMT
            Not After : Apr 24 05:45:00 2025 GMT
        Subject: CN=438D3D25A5656004D45637B77864FF137BC78074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ec:8a:c4:31:a6:c5:cb:10:4b:54:a7:6b:a9:
                    45:7b:78:24:f5:f3:05:87:a0:f8:c2:45:71:94:3b:
                    af:0c:3f:35:8b:de:6f:74:d2:2e:68:6d:fe:ed:3c:
                    b7:77:f6:31:90:28:b2:93:e6:68:85:9c:0f:9c:42:
                    a0:8d:73:41:cd:dc:81:ae:7d:32:3a:c5:f2:a4:a3:
                    73:ae:92:b4:79:f9:e4:e9:4e:76:e0:4d:6e:a4:6c:
                    ed:ea:c1:be:a6:ff:42:aa:13:0b:c3:b3:31:f8:43:
                    03:5f:24:74:53:e9:c1:98:f2:ca:3a:e0:86:79:72:
                    31:b5:d4:fd:ae:d7:37:6a:10:e9:fe:bb:d6:3b:92:
                    c1:09:e4:03:6e:d5:90:5f:1e:0c:18:d2:8c:ef:4b:
                    e5:5d:05:11:5d:95:6c:2b:d8:3b:84:d8:b7:57:3b:
                    98:e6:a7:dc:ed:bf:dd:79:bf:8c:33:ef:5f:cd:48:
                    de:49:ad:09:2c:15:8b:c4:f3:6e:9f:38:27:90:4b:
                    60:a7:eb:4e:7e:d7:da:08:3f:60:16:0c:cc:0a:71:
                    a0:2a:05:9d:3a:96:65:a6:e7:9a:79:ce:e5:40:ae:
                    78:71:b9:30:75:cd:59:5b:01:2f:cb:83:1e:a5:48:
                    5f:68:e8:9b:4b:23:57:f1:28:75:0a:6d:4a:a7:fe:
                    3d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8D:3D:25:A5:65:60:04:D4:56:37:B7:78:64:FF:13:7B:C7:80:74
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3233342e302f32332d3233203d3e203238343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:f5:4e:80:21:52:3b:4d:f3:ae:5d:b9:63:97:3c:ce:f1:ca:
         31:3d:3b:17:10:6f:34:19:62:7c:14:28:b6:12:5e:b0:b1:f7:
         45:7f:d7:33:19:8a:1e:59:10:b5:60:6c:80:7b:7a:52:63:ca:
         96:63:6a:a9:50:e3:9e:db:9e:74:b2:40:f3:2d:7f:05:6b:db:
         92:31:a9:9b:9b:6e:a4:21:f4:61:1c:b9:2e:df:0d:f9:d0:ff:
         d5:71:8d:d4:2a:e8:95:08:3f:bb:e7:37:34:12:56:e4:c2:e6:
         cb:70:95:7d:bf:82:e1:ee:d8:70:44:8d:fc:d6:f0:64:df:f7:
         73:f3:0b:b9:d7:de:45:f1:41:ff:fb:35:de:75:9c:17:4a:ec:
         c0:6e:b0:35:88:46:6c:81:bf:95:b3:dc:e8:c4:f2:1a:90:5f:
         2e:b0:85:f1:d2:00:49:cc:3a:0d:08:96:04:8e:63:88:74:ff:
         b5:1d:33:5b:01:64:80:cd:5d:a7:b9:78:8d:cc:13:80:9b:c5:
         1d:f7:d2:75:bb:40:9a:d2:16:ed:16:e9:90:af:02:16:bd:bc:
         2a:8a:64:7f:6e:a9:44:d9:fb:28:cf:4d:b9:1e:2c:3c:10:6b:
         8d:10:0f:e8:88:a6:64:86:7c:9c:57:cc:2c:8e:d0:19:7a:a5:
         bc:1d:44:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----