Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3234382e302f32312d3234203d3e20323730303439.roa
File:                     3230302e35352e3234382e302f32312d3234203d3e20323730303439.roa (raw, json)
Hash identifier:          bX1H42HrboLlDHJSxPJBSkbHJU/LfA0n9jl6HMGaAbU=
Subject key identifier:   5B:FC:CE:64:58:AB:2B:B3:A8:E1:41:3F:8D:1B:19:45:82:2B:FE:78
Certificate issuer:       /CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
Certificate serial:       132EA1138B54F5B42449975541E6CA356097F305
Authority key identifier: 5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3234382e302f32312d3234203d3e20323730303439.roa
Signing time:             Wed 22 May 2024 18:10:00 +0000
ROA not before:           Wed 22 May 2024 18:05:00 +0000
ROA not after:            Wed 21 May 2025 18:10:00 +0000
asID:                     270049
IP address blocks:        200.55.248.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Wed 22 May 2024 20:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2e:a1:13:8b:54:f5:b4:24:49:97:55:41:e6:ca:35:60:97:f3:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
        Validity
            Not Before: May 22 18:05:00 2024 GMT
            Not After : May 21 18:10:00 2025 GMT
        Subject: CN=5BFCCE6458AB2BB3A8E1413F8D1B1945822BFE78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:a8:7c:62:35:24:b0:0f:3a:e1:fd:4b:24:
                    b6:4c:ac:28:bb:11:6d:41:71:e9:df:5f:28:58:ae:
                    41:e7:ca:a0:2f:d9:e2:69:a1:87:39:8a:fb:e1:e5:
                    e8:b0:18:b2:ae:51:9d:24:5f:58:10:38:84:ff:b4:
                    d1:92:b7:3d:ff:74:c4:da:9d:fc:53:56:17:4b:47:
                    d0:07:6d:6f:78:59:9c:d5:2d:ee:ab:4e:dd:d8:b6:
                    d2:dd:d0:f1:fc:c5:c4:b5:3a:1c:b9:69:a8:09:b9:
                    81:21:ac:c7:07:cb:22:68:cd:fd:3f:33:e8:10:c1:
                    c7:33:92:e4:15:05:7a:7f:1c:9f:be:a0:b2:42:e7:
                    d2:30:5a:95:be:8d:9c:87:2c:fd:2f:38:14:a1:38:
                    8b:b7:1c:44:46:17:f8:57:84:39:e7:39:2b:7f:e8:
                    24:ed:d4:b8:95:d8:28:b7:48:05:62:ce:32:de:b0:
                    2c:4a:4c:ab:72:35:4d:8c:f3:b8:c1:5f:6e:96:3f:
                    1b:e1:18:a4:51:0f:33:6f:60:53:8b:b0:19:a5:40:
                    c0:e0:dd:c2:aa:7a:a8:51:15:e4:2c:5e:8e:a0:f7:
                    c2:fd:7d:6f:32:2d:d0:15:d5:9e:72:86:0f:3f:90:
                    c7:0e:27:48:68:e5:d3:57:70:61:af:71:65:9a:fd:
                    ac:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FC:CE:64:58:AB:2B:B3:A8:E1:41:3F:8D:1B:19:45:82:2B:FE:78
            X509v3 Authority Key Identifier:
                keyid:5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3234382e302f32312d3234203d3e20323730303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:b6:98:c8:33:ac:37:50:22:0d:43:65:06:d8:96:40:8e:6b:
         2e:06:f6:15:f4:66:8b:99:63:1d:d9:03:e8:8a:2b:ca:e0:58:
         23:73:a0:49:36:62:b4:59:20:25:43:ed:77:be:b6:4a:0f:3c:
         d4:84:83:cc:96:73:98:a8:3e:73:fb:df:eb:a4:c8:90:75:c9:
         b0:e9:a0:04:65:36:e2:77:fd:63:0e:d2:7a:ca:71:8c:60:ae:
         ae:7c:d3:dc:0b:61:91:52:f9:f6:5c:ef:f4:0d:7f:55:a5:de:
         48:38:7b:68:e1:ee:5d:6c:49:36:e3:09:99:cf:37:b9:3b:a0:
         4b:38:2e:88:b9:8a:7d:c1:42:37:20:f2:e0:a6:47:81:09:f0:
         1a:a5:9c:ff:b0:32:e7:55:47:60:1c:20:03:08:d3:7d:fe:89:
         de:03:e0:85:39:2e:9d:a7:8d:48:56:20:58:28:ba:8c:d5:ce:
         bc:7a:0f:49:a8:de:68:2f:e1:3c:06:cf:53:fd:c4:39:8b:95:
         06:71:ed:3d:ef:45:c8:ac:0d:05:f1:a4:49:ed:23:b3:ff:3b:
         98:c4:73:ef:e7:e7:0f:e8:94:8d:ba:3d:b2:c3:59:e0:83:96:
         9a:10:1d:2c:db:5d:3e:20:bd:b8:bc:16:d4:0b:70:fb:57:d1:
         e6:50:eb:91
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEy6hE4tU9bQkSZdVQebKNWCX8wUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM1MEIxOTM1Q0REOTUxRThGQjU3MkE1QUYzQzQxOUFD
NEQ0ODdFNDAeFw0yNDA1MjIxODA1MDBaFw0yNTA1MjExODEwMDBaMDMxMTAvBgNV
BAMTKDVCRkNDRTY0NThBQjJCQjNBOEUxNDEzRjhEMUIxOTQ1ODIyQkZFNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8rKh8YjUksA864f1LJLZMrCi7
EW1BcenfXyhYrkHnyqAv2eJpoYc5ivvh5eiwGLKuUZ0kX1gQOIT/tNGStz3/dMTa
nfxTVhdLR9AHbW94WZzVLe6rTt3YttLd0PH8xcS1Ohy5aagJuYEhrMcHyyJozf0/
M+gQwcczkuQVBXp/HJ++oLJC59IwWpW+jZyHLP0vOBShOIu3HERGF/hXhDnnOSt/
6CTt1LiV2Ci3SAVizjLesCxKTKtyNU2M87jBX26WPxvhGKRRDzNvYFOLsBmlQMDg
3cKqeqhRFeQsXo6g98L9fW8yLdAV1Z5yhg8/kMcOJ0ho5dNXcGGvcWWa/awpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUW/zOZFirK7Oo4UE/jRsZRYIr/ngwHwYDVR0j
BBgwFoAUXFCxk1zdlR6PtXKlrzxBmsTUh+QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODlEOTI3RUI5MDkxOTE3RjgxRDY3OEE0MUVBNDc2OTM1
ODg0MUQ5Nzc4REYyREExMDlDMzEzQjNFNzhBNkU4LzAvNUM1MEIxOTM1Q0REOTUx
RThGQjU3MkE1QUYzQzQxOUFDNEQ0ODdFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QzUwQjE5MzVDREQ5NTFFOEZC
NTcyQTVBRjNDNDE5QUM0RDQ4N0U0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg5RDkyN0VCOTA5MTkxN0Y4MUQ2NzhBNDFFQTQ3NjkzNTg4NDFEOTc3
OERGMkRBMTA5QzMxM0IzRTc4QTZFOC8wLzMyMzAzMDJlMzUzNTJlMzIzNDM4MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNzMwMzAzNDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyDf4
MA0GCSqGSIb3DQEBCwUAA4IBAQCbtpjIM6w3UCINQ2UG2JZAjmsuBvYV9GaLmWMd
2QPoiivK4Fgjc6BJNmK0WSAlQ+13vrZKDzzUhIPMlnOYqD5z+9/rpMiQdcmw6aAE
ZTbid/1jDtJ6ynGMYK6ufNPcC2GRUvn2XO/0DX9Vpd5IOHto4e5dbEk24wmZzze5
O6BLOC6IuYp9wUI3IPLgpkeBCfAapZz/sDLnVUdgHCADCNN9/oneA+CFOS6dp41I
ViBYKLqM1c68eg9JqN5oL+E8Bs9T/cQ5i5UGce0970XIrA0F8aRJ7SOz/zuYxHPv
5+cP6JSNuj2yw1ngg5aaEB0s210+IL24vBbUC3D7V9HmUOuR
-----END CERTIFICATE-----