Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37302e302f32342d3234203d3e203532343638.roa
File:                     3138312e3131392e37302e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          vaPSBkfK+xV6vzD0J3s5fw05R0bV1Iq5b2R/10YVAN8=
Subject key identifier:   74:36:67:BD:09:FE:1D:49:AC:46:09:65:ED:17:B0:A2:22:28:CB:B3
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       0904BFE97935C216ABE70C7303F5D38978DF3D6D
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37302e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:43 +0000
ROA not before:           Tue 05 Mar 2024 17:59:43 +0000
ROA not after:            Tue 04 Mar 2025 18:04:43 +0000
asID:                     52468
IP address blocks:        181.119.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:04:bf:e9:79:35:c2:16:ab:e7:0c:73:03:f5:d3:89:78:df:3d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:43 2024 GMT
            Not After : Mar  4 18:04:43 2025 GMT
        Subject: CN=743667BD09FE1D49AC460965ED17B0A22228CBB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:8f:76:d4:fa:aa:52:93:89:98:13:e4:13:
                    e7:1e:88:e5:af:ab:d8:83:2e:29:e0:fa:83:05:1d:
                    c4:ec:5f:db:a0:63:5c:93:b8:da:d5:cf:8f:2c:ac:
                    2d:2f:1d:e4:27:42:95:fa:5e:07:28:e7:44:01:39:
                    22:f4:69:e6:3a:67:d0:c4:ce:1e:be:2e:d9:28:10:
                    3e:d8:65:8d:5b:73:02:1f:94:2b:11:cd:2b:31:01:
                    39:0b:1c:31:38:60:3b:40:89:58:63:b7:67:ad:4a:
                    7c:e7:fa:3d:5b:6a:3c:8f:8c:c4:7b:eb:87:d1:43:
                    40:21:fe:dd:75:d8:49:29:b7:7a:db:81:4b:4e:fc:
                    d2:ed:7a:f5:7a:2f:ac:a3:10:0c:f2:b2:f6:88:6d:
                    0b:59:5a:6f:1a:c2:0d:16:67:4c:cb:9e:35:43:61:
                    8b:eb:0a:7f:46:37:ff:96:ed:96:6f:50:e7:c9:71:
                    47:ac:47:a5:88:66:79:4c:b3:24:93:58:be:2f:f8:
                    c5:df:a4:a5:8e:05:af:08:61:e7:9d:d7:26:77:87:
                    b6:54:ef:87:18:e7:7d:53:8d:8b:7d:ca:b8:10:3e:
                    78:1a:90:2b:50:2d:84:d4:b7:5d:81:32:f5:6b:20:
                    b6:92:e7:13:e6:5d:be:56:94:30:3f:d6:db:7e:bf:
                    ba:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:36:67:BD:09:FE:1D:49:AC:46:09:65:ED:17:B0:A2:22:28:CB:B3
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37302e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:1e:ad:75:e1:b0:60:bb:e3:0b:25:2e:ae:fa:a7:0f:fc:3c:
         3d:d2:b1:d8:17:25:fe:45:24:c8:88:a8:23:db:fe:fc:a3:35:
         df:be:6c:22:ba:1f:5a:f0:af:a8:92:d4:28:ba:e0:43:cf:a6:
         e9:05:8c:54:49:33:91:31:ed:25:83:6b:4f:86:89:fa:38:58:
         0c:18:24:90:54:a0:e7:e7:e0:c7:b8:c6:d4:b5:54:a8:25:99:
         33:f0:9d:28:d7:c3:17:63:b6:9c:89:8b:c5:a4:d4:3d:52:4c:
         1e:52:c0:f9:bb:16:e7:e3:ff:f6:a4:6f:91:da:58:04:92:56:
         3f:da:92:5d:a5:c1:a8:f3:6e:63:85:2e:a3:32:15:de:99:4e:
         f2:97:77:44:72:2f:25:a4:ec:d8:9b:71:40:03:20:9c:98:09:
         e5:5b:5c:35:a2:90:0f:23:cd:6d:3b:6d:8b:1d:5e:56:cf:41:
         85:6e:3b:8f:26:3e:06:2f:05:8a:fb:3d:42:20:f9:c4:57:85:
         bb:c2:5e:4a:87:a6:d0:e5:bc:90:23:ec:51:09:62:73:f2:ad:
         34:59:1e:ca:42:ee:c4:94:59:6d:9b:f8:8b:a7:51:d5:b2:52:
         09:a0:8a:8c:10:63:38:7e:5b:e8:f7:ae:0d:79:aa:9b:e7:08:
         34:c3:d3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----