Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e34312e302f32342d3234203d3e20323636373235.roa
File:                     3138312e3131392e34312e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          ZZhC8nTlp7nlewBiV9MZuIwccG25v0NzRXqUEpmW8AE=
Subject key identifier:   94:2B:1B:F9:3B:35:E6:A2:FE:D2:63:33:3D:61:C4:14:64:82:08:71
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       3A00E10E3E82994F848035253985DE3E50D3E024
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e34312e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 05 Mar 2024 18:04:31 +0000
ROA not before:           Tue 05 Mar 2024 17:59:31 +0000
ROA not after:            Tue 04 Mar 2025 18:04:31 +0000
asID:                     266725
IP address blocks:        181.119.41.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:00:e1:0e:3e:82:99:4f:84:80:35:25:39:85:de:3e:50:d3:e0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:31 2024 GMT
            Not After : Mar  4 18:04:31 2025 GMT
        Subject: CN=942B1BF93B35E6A2FED263333D61C41464820871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d8:fd:b7:41:66:bd:68:a0:fc:9d:2f:5e:a7:
                    b3:d0:4a:ef:a4:36:15:1e:ca:16:d8:12:82:7a:a4:
                    f9:34:e4:63:10:60:2d:a0:79:22:b3:ed:7b:ba:43:
                    8a:c7:a0:6e:b4:fd:aa:24:44:77:a4:f1:82:f2:91:
                    ad:d6:d5:ad:25:82:19:15:27:02:75:20:0d:63:21:
                    27:2e:e0:1e:62:00:4e:a5:6a:28:2d:9f:94:41:b4:
                    72:25:76:f4:a4:8a:5a:8d:d4:9c:8c:5d:ce:47:fa:
                    64:97:10:e8:a3:6b:7f:f0:b2:11:8f:d0:02:56:92:
                    54:7a:cd:2f:d2:11:2c:ad:85:18:fc:2b:0a:14:49:
                    37:00:3e:70:45:68:7f:01:a0:98:f1:95:0e:ed:f1:
                    4a:1d:30:fc:98:88:12:7c:88:1a:12:60:c2:e5:65:
                    ad:90:62:d7:60:1b:dc:22:74:5d:26:36:92:2a:76:
                    25:9e:44:b8:bc:e2:f8:33:47:65:40:7d:f5:ec:a4:
                    ce:08:14:2e:f0:45:1b:78:4d:27:04:2b:33:17:3d:
                    28:09:5d:e5:c7:dd:ad:d3:c8:60:f9:99:bc:0f:a0:
                    c3:20:08:f4:e2:2b:cb:fb:4e:36:ff:6a:82:11:f8:
                    57:25:6a:e2:8d:1f:9f:9b:fb:3f:bb:12:bd:91:5b:
                    84:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2B:1B:F9:3B:35:E6:A2:FE:D2:63:33:3D:61:C4:14:64:82:08:71
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e34312e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:fe:73:e7:3a:9b:7a:77:b1:4b:cc:ee:dc:41:44:eb:f4:a8:
         78:49:24:f9:e2:0b:1b:82:b6:2b:e2:ec:4a:c0:01:f3:0f:ff:
         a8:ef:f0:40:7e:7b:7a:d4:ea:4e:b7:cd:b7:cd:ee:a4:9c:1d:
         ba:2f:66:41:7c:d4:92:57:f1:a5:d4:c7:dc:5a:9f:aa:17:0d:
         31:ad:92:36:c6:1e:30:67:df:b7:4c:44:92:1e:15:14:c4:bc:
         3a:d4:db:05:9e:9f:21:15:8f:4e:d7:ac:c5:62:bd:f3:89:66:
         26:e0:6c:f6:e3:48:d6:35:28:7e:92:bf:d2:2c:41:ec:42:30:
         d7:b0:31:df:d5:44:9f:18:87:25:35:cb:29:86:8e:ce:64:6f:
         29:4a:b2:32:b0:0b:16:53:a2:73:95:a4:b5:83:b3:9d:69:c8:
         f3:d8:8c:6e:f7:41:fa:f8:56:0d:19:bd:16:d7:7b:5c:ee:6a:
         18:df:c7:58:92:96:99:48:ae:03:bd:fc:0e:6e:39:b4:0e:d0:
         d1:35:1c:99:05:72:ae:cf:81:2e:a7:ff:3e:0c:a5:d6:48:9a:
         84:a2:6e:3e:e7:f1:e6:f2:07:80:fd:a6:bc:a0:8d:29:e7:1c:
         7d:62:20:0b:b9:84:35:0c:7a:6c:20:6a:e6:b3:ec:e5:9b:99:
         93:c6:05:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----