Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3233382e302f32332d3233203d3e203133393939.roa
File:                     3230302e39342e3233382e302f32332d3233203d3e203133393939.roa (raw, json)
Hash identifier:          Iov53IZ6lNTixMyrPUFczk6MxiwWFqe0FOPlAp0FMWc=
Subject key identifier:   7F:A6:BB:1A:6E:4B:C2:CC:6D:34:4D:2F:3E:70:F8:08:25:C1:5C:06
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       58F77979112F02D45F6F2DE37ED7820C818059A3
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3233382e302f32332d3233203d3e203133393939.roa
Signing time:             Thu 25 Apr 2024 05:45:01 +0000
ROA not before:           Thu 25 Apr 2024 05:40:01 +0000
ROA not after:            Thu 24 Apr 2025 05:45:01 +0000
asID:                     13999
IP address blocks:        200.94.238.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f7:79:79:11:2f:02:d4:5f:6f:2d:e3:7e:d7:82:0c:81:80:59:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: Apr 25 05:40:01 2024 GMT
            Not After : Apr 24 05:45:01 2025 GMT
        Subject: CN=7FA6BB1A6E4BC2CC6D344D2F3E70F80825C15C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a4:f0:8f:21:a6:c1:6f:a7:d2:0a:6b:31:6d:
                    55:c3:78:e7:41:76:9c:8d:c7:07:e8:67:ec:0f:ad:
                    86:86:7e:28:ae:fd:3f:ad:4e:70:a8:0c:1e:46:1b:
                    50:23:b3:69:73:d1:75:0d:d0:76:75:b5:7b:c5:f2:
                    b9:1c:17:49:0f:1e:82:a2:dd:95:95:2a:a8:53:c0:
                    32:b7:40:5a:05:3a:9f:61:15:73:70:89:1a:62:08:
                    fa:95:96:7c:a5:f6:f8:0c:67:60:f9:40:5f:0e:66:
                    b5:89:62:bd:a2:54:a8:6e:6a:34:3f:b5:d2:13:f9:
                    9c:b3:46:a6:65:41:b5:fd:63:b3:22:3b:fb:1c:51:
                    fc:c4:39:ae:36:74:a9:3a:8b:ac:40:1b:d6:ba:38:
                    fb:34:01:d2:e9:b3:1a:33:15:36:73:d1:00:b7:cf:
                    c3:76:3a:4a:d4:05:27:f5:2c:77:dd:be:70:75:4a:
                    45:89:9a:bd:7b:df:f2:6c:5b:99:04:85:04:cf:0a:
                    1c:29:c4:b5:dc:30:00:00:19:ce:bb:fe:eb:72:e1:
                    21:71:6b:aa:34:3c:d9:be:2c:f9:f7:cc:18:e1:b6:
                    dd:ab:6a:f0:cb:f2:5f:45:1c:ce:f8:d8:c6:70:1a:
                    8a:40:8e:66:df:30:6e:e2:5d:25:34:3d:cd:40:3e:
                    c1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A6:BB:1A:6E:4B:C2:CC:6D:34:4D:2F:3E:70:F8:08:25:C1:5C:06
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39342e3233382e302f32332d3233203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.94.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:2c:bc:a6:3b:26:58:11:e9:d9:75:bb:29:06:bc:a9:ac:fd:
         54:4a:42:31:f2:02:b9:0b:e5:b2:25:8e:c5:ed:7c:68:7b:7f:
         1e:93:46:06:d7:27:77:f1:d3:04:48:5a:b8:71:aa:40:8c:e1:
         65:50:23:94:f1:e8:15:c8:38:07:4a:2a:9a:75:3c:78:08:de:
         0e:34:9f:26:94:d9:0f:16:0b:b8:56:ee:6e:ff:58:ec:99:c2:
         5d:20:07:1a:cb:74:bc:b4:e5:4a:4b:ff:c7:77:a4:b7:e2:d9:
         f2:2c:9e:55:f1:82:80:b0:55:1a:ac:2d:29:f7:49:cc:8c:c0:
         ec:50:71:22:c2:52:58:e2:86:16:eb:f9:7f:5e:85:12:a1:dc:
         ed:76:d7:10:a4:af:20:cd:45:bd:07:00:be:b8:61:d9:81:6a:
         69:1f:a9:41:1b:6c:0e:fb:cb:d0:bf:c6:8c:52:21:68:3f:d0:
         b7:10:cc:cd:45:c0:84:16:da:e5:19:36:7f:4a:a2:1c:cb:5f:
         33:e5:f2:9c:98:05:f0:02:88:3b:2a:b0:59:51:50:29:30:07:
         73:1e:6d:a9:24:e2:ef:06:f6:31:10:cf:d2:4f:00:40:0c:e1:
         38:5b:6e:ad:fa:e0:0a:9e:63:a8:b9:1b:3b:9c:71:3c:68:bc:
         37:6e:d1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----