Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e3132322e302f32342d3234203d3e20323636373235.roa
File:                     3138312e3131392e3132322e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          DLpNQgXW0kjwXFJpaN8WemFZj+Jd2gcUjDmApbgXINM=
Subject key identifier:   DC:E5:7D:86:A7:FF:C3:B5:E9:1C:84:D6:20:E7:35:85:E0:3F:88:30
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       3D65485F27CACE2872BAD076691B5AC5702D90A9
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e3132322e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 05 Mar 2024 18:04:41 +0000
ROA not before:           Tue 05 Mar 2024 17:59:41 +0000
ROA not after:            Tue 04 Mar 2025 18:04:41 +0000
asID:                     266725
IP address blocks:        181.119.122.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:65:48:5f:27:ca:ce:28:72:ba:d0:76:69:1b:5a:c5:70:2d:90:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:41 2024 GMT
            Not After : Mar  4 18:04:41 2025 GMT
        Subject: CN=DCE57D86A7FFC3B5E91C84D620E73585E03F8830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:63:df:b1:12:20:f4:2c:9f:ad:d0:5b:14:
                    18:0a:a0:31:45:a1:49:98:a8:f1:4a:5d:bd:27:70:
                    b7:dd:5e:87:fd:28:f7:8e:45:ba:90:91:b1:85:c5:
                    76:0b:bc:e0:98:61:37:8e:5a:ce:17:b4:dc:d9:ee:
                    35:a7:07:8a:3c:bd:d2:c1:b1:eb:58:91:56:5d:dd:
                    88:54:5a:b0:d8:34:5e:8e:1a:c8:4f:0e:ba:7d:2d:
                    26:f7:54:7e:55:44:09:68:43:f8:28:62:bf:82:8c:
                    87:26:47:c9:78:01:28:b7:5a:3e:68:2d:f4:15:70:
                    22:ca:2e:bf:46:b5:27:00:a9:dd:7a:d1:f2:e5:e4:
                    20:fa:87:66:5f:b2:9d:bd:c9:6d:ce:1c:77:1f:0b:
                    b8:54:83:c3:7b:05:4a:c0:12:e7:38:2a:d0:8c:61:
                    02:1e:ec:34:05:05:aa:09:ef:4f:5a:71:f5:d6:f3:
                    b7:c2:52:10:65:bc:ce:7d:b2:8a:8b:22:40:4a:62:
                    a4:c4:18:18:57:94:48:f7:8a:51:b6:d1:34:10:7a:
                    41:1d:9d:dc:03:69:62:3f:da:7f:2c:88:40:70:f9:
                    55:4c:88:5c:b0:99:1b:2d:16:6b:d0:28:26:cc:c3:
                    a0:78:6e:c0:01:33:d3:d7:cb:1c:8f:36:9b:f3:f9:
                    2e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E5:7D:86:A7:FF:C3:B5:E9:1C:84:D6:20:E7:35:85:E0:3F:88:30
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e3132322e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:0e:e2:af:a0:e3:28:fc:4f:76:11:6c:96:4f:5d:2c:8c:8c:
         fc:48:b1:2c:2d:1c:51:03:ea:da:4b:a7:88:f2:1a:bf:1e:c6:
         53:17:25:23:40:33:5a:b1:c9:4a:cc:54:25:a5:fe:8c:85:5d:
         4e:55:fa:a6:51:c5:8d:0a:12:86:ae:6d:30:21:45:f8:f7:bd:
         50:42:f2:78:b4:4c:0f:59:53:37:5f:55:a8:2a:d5:8a:5a:ab:
         7e:f1:dc:24:c0:f2:cf:c0:34:97:b0:1a:21:fd:1f:39:d9:67:
         0b:af:ed:89:9f:53:7b:10:f2:bc:76:98:08:e3:bb:64:af:08:
         fa:f2:e8:c2:66:69:92:bb:16:ea:44:8a:ba:d2:54:7d:d4:fb:
         1c:91:00:6f:d9:ed:83:8c:ec:65:77:e3:b6:59:5c:46:f0:91:
         aa:e2:c3:4f:11:0f:2d:d3:ec:74:a0:8c:2d:0f:7c:1b:8b:51:
         74:22:4d:da:4a:04:ba:45:e3:28:81:bb:c4:40:34:ba:b0:86:
         5a:b6:a8:75:67:af:95:84:ba:08:84:88:0a:66:9e:3d:71:65:
         5d:9e:d5:2d:7a:df:0a:40:4f:27:31:3c:3d:82:c7:a8:3d:24:
         17:c9:21:4f:79:e1:e2:98:92:ef:75:36:46:70:5a:c7:0a:69:
         88:61:e1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----