Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e36342e302f32342d3234203d3e203532343638.roa
File:                     3138312e3131392e36342e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          4tJzQQ2NcP6gxg4wd7nlKlTLRyNStmPnAyvhb7nZSoU=
Subject key identifier:   FF:43:AA:B3:24:36:6C:58:1F:12:65:4B:02:14:25:7F:17:B6:C1:BF
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       17A4A78B6696ED65F12E0DB965912DD8148306BF
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e36342e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:52 +0000
ROA not before:           Tue 05 Mar 2024 17:59:52 +0000
ROA not after:            Tue 04 Mar 2025 18:04:52 +0000
asID:                     52468
IP address blocks:        181.119.64.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a4:a7:8b:66:96:ed:65:f1:2e:0d:b9:65:91:2d:d8:14:83:06:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:52 2024 GMT
            Not After : Mar  4 18:04:52 2025 GMT
        Subject: CN=FF43AAB324366C581F12654B0214257F17B6C1BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a4:01:02:59:d0:10:bc:37:84:f7:1d:96:88:
                    52:e9:c2:c6:92:27:44:44:6f:95:9b:53:30:e0:21:
                    de:15:6b:b4:17:67:10:b7:33:95:fd:11:f2:11:0c:
                    6f:ba:55:60:13:2a:b3:81:a0:66:f3:82:a3:53:37:
                    b5:1c:6f:e0:16:61:8e:cf:9c:f3:42:bc:60:f2:bf:
                    93:69:46:6c:f6:a6:2f:cd:96:be:06:71:eb:9c:e0:
                    16:d4:53:88:8e:33:4f:87:90:7d:29:ec:77:e7:7c:
                    8b:e1:2d:7c:60:3f:47:12:e1:32:8b:4f:23:18:b3:
                    2c:24:c4:55:7f:78:46:91:53:90:24:bc:5d:e6:0e:
                    7e:01:ba:9e:c5:68:c8:72:e7:48:96:f9:1e:27:70:
                    e3:48:c1:74:5a:3d:b3:d3:95:95:59:bc:c0:b0:cc:
                    68:d5:10:6a:0f:51:d4:9f:82:54:41:71:7f:e6:4c:
                    8d:5e:be:2b:2f:ec:bf:e0:19:20:4d:a7:d3:b3:b4:
                    ed:93:4a:a0:f5:f2:be:5b:89:72:36:04:85:70:bf:
                    47:7e:44:05:0c:62:82:91:38:ae:e4:80:0d:64:e5:
                    c0:34:ea:62:7d:78:af:8b:79:38:1c:de:df:b3:f4:
                    bf:c4:b1:64:18:8b:da:4a:2c:19:03:9c:76:d4:59:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:43:AA:B3:24:36:6C:58:1F:12:65:4B:02:14:25:7F:17:B6:C1:BF
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e36342e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:cf:96:f4:2f:d5:39:79:dc:db:18:d1:d5:11:bf:54:c0:b4:
         8e:be:73:76:cc:e4:b0:c8:b2:1f:34:97:27:aa:84:1e:c0:10:
         f9:ff:09:26:46:12:27:d5:3f:78:1d:65:ef:f4:78:92:cd:53:
         b6:5b:d9:98:02:09:cf:79:14:f0:8f:97:dc:db:69:d8:17:be:
         8a:5e:26:55:b0:d2:7f:8e:a5:68:be:5f:f1:44:b5:97:08:62:
         42:4a:f5:fc:76:60:57:d2:72:20:0c:50:ab:ae:6d:00:f1:a5:
         31:21:b5:b6:3c:b5:30:7e:23:e2:e2:c8:0f:74:f3:7e:9c:02:
         d0:4f:37:41:02:5b:30:99:50:24:c7:3d:76:b7:64:26:41:57:
         dc:7f:57:c1:f7:e8:64:c4:9c:27:35:6f:63:8a:4d:60:3e:46:
         79:ae:14:2f:0b:6f:1c:96:45:e9:7e:c6:c7:5f:0c:da:0a:a5:
         b2:a1:a3:13:bc:90:7f:c7:a1:92:9f:72:d4:51:03:e7:f4:de:
         01:7d:42:14:bb:74:ec:fc:4c:4a:53:49:16:c0:4c:90:9a:b7:
         ec:6f:0e:a7:bf:37:0a:79:c2:b8:cc:c2:d9:33:8e:2b:97:f8:
         b1:80:cd:5b:5b:19:69:8b:ca:a3:ab:e5:a8:ac:cf:f5:ab:7d:
         86:51:dd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----