Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37312e302f32342d3234203d3e20323636373235.roa
File:                     3138312e3131392e37312e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          DYfFBo/9qg2Q7Y3LIWkyQ8imr/tMR7eC/W4Y6ua9vr4=
Subject key identifier:   ED:63:A8:E6:8C:44:BF:38:FF:97:02:B2:29:C4:C8:13:02:F2:1A:67
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       7ACE96A474140800DD382AAAF7527FC83F1C8F7D
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37312e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 05 Mar 2024 18:04:48 +0000
ROA not before:           Tue 05 Mar 2024 17:59:48 +0000
ROA not after:            Tue 04 Mar 2025 18:04:48 +0000
asID:                     266725
IP address blocks:        181.119.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ce:96:a4:74:14:08:00:dd:38:2a:aa:f7:52:7f:c8:3f:1c:8f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:48 2024 GMT
            Not After : Mar  4 18:04:48 2025 GMT
        Subject: CN=ED63A8E68C44BF38FF9702B229C4C81302F21A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:58:06:c2:91:82:0f:d2:d8:8a:45:81:f7:
                    38:13:83:f6:a7:7d:08:4f:e7:ff:74:72:65:7c:4f:
                    17:7f:dd:8c:d2:5a:d9:30:e7:12:8f:8a:ca:40:0d:
                    2b:6f:bb:46:24:4b:a9:dc:84:a4:ee:fa:1c:dc:9e:
                    43:94:b3:c2:17:62:c0:db:50:a9:2f:8f:bb:63:66:
                    e6:f0:be:e4:c4:0f:aa:af:ca:27:c8:db:8e:40:9b:
                    b9:bc:4c:e2:c5:a0:6f:dc:8f:c6:7a:85:da:9b:cc:
                    d5:b7:e1:1a:3b:72:04:94:68:b1:db:36:97:af:d0:
                    ae:88:5e:43:e7:c8:ff:f1:03:ea:22:ee:4d:5e:ad:
                    cb:d1:73:64:1b:5b:fa:0c:97:78:97:cf:0c:4a:ed:
                    cf:65:6c:81:56:57:77:83:8e:c8:b0:9d:57:d6:87:
                    92:41:d7:f1:0d:4f:d9:14:bc:b2:40:e0:e2:16:82:
                    5a:b3:52:30:da:90:df:0b:ef:b6:17:5a:f3:ee:dd:
                    94:74:67:78:6b:79:45:9a:b1:88:d9:9b:d9:2c:96:
                    96:65:ed:45:a4:97:88:45:9b:ee:50:ae:63:e1:69:
                    57:d4:6b:ba:ee:fc:cd:5f:9f:15:73:be:e1:3f:55:
                    39:a0:e5:21:6f:06:23:a0:fe:35:35:66:58:b5:60:
                    2a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:63:A8:E6:8C:44:BF:38:FF:97:02:B2:29:C4:C8:13:02:F2:1A:67
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37312e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:cd:1d:ab:4c:d3:42:f0:3a:36:79:23:cd:ce:87:8e:0a:ee:
         2b:ec:5e:7a:71:c9:7b:9e:0c:ea:0a:80:af:ff:c8:23:01:6a:
         ac:66:e8:e1:14:a8:a7:50:a4:e2:9d:40:f6:d1:a5:01:e9:07:
         b7:7c:f4:29:9e:ec:b5:2a:67:26:f7:52:43:25:ef:4e:6e:10:
         a4:d5:e5:fc:61:df:e2:0f:f4:0e:70:af:7c:4d:98:e6:5d:09:
         13:37:d3:b6:c5:32:66:12:2b:f7:e2:62:a7:b4:f3:52:f1:92:
         06:ae:13:2a:30:8e:12:73:f6:9d:7b:77:5f:9f:91:92:d6:a5:
         00:f2:ba:19:f4:a2:98:19:0e:4d:bc:f7:78:1f:89:ef:81:59:
         1c:e8:c4:34:d9:6d:fc:d5:db:34:a3:83:ae:c4:cd:e3:25:77:
         7e:64:56:71:16:a1:14:16:4a:cc:04:bc:ea:75:44:f9:bb:52:
         04:67:97:84:2c:c2:41:c4:00:ea:ba:d8:48:6f:6d:37:cd:f2:
         3e:76:d7:e8:01:a6:1b:ac:2a:e7:2a:21:85:d5:de:1d:76:83:
         8c:dc:f5:6a:a5:fd:ed:0e:5e:8d:f4:b3:81:ff:fe:fe:78:57:
         c6:ea:01:fd:e0:88:3a:42:1f:a3:26:7b:26:8b:06:8b:ae:25:
         04:dc:8d:6f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUes6WpHQUCADdOCqq91J/yD8cj30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlEOTIzQTI1MjdENzhDQkNBMUJDMkI2QjE1REFDMEYx
RjZDN0U1MDAeFw0yNDAzMDUxNzU5NDhaFw0yNTAzMDQxODA0NDhaMDMxMTAvBgNV
BAMTKEVENjNBOEU2OEM0NEJGMzhGRjk3MDJCMjI5QzRDODEzMDJGMjFBNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzVgGwpGCD9LYikWB9zgTg/an
fQhP5/90cmV8Txd/3YzSWtkw5xKPispADStvu0YkS6nchKTu+hzcnkOUs8IXYsDb
UKkvj7tjZubwvuTED6qvyifI245Am7m8TOLFoG/cj8Z6hdqbzNW34Ro7cgSUaLHb
Npev0K6IXkPnyP/xA+oi7k1ercvRc2QbW/oMl3iXzwxK7c9lbIFWV3eDjsiwnVfW
h5JB1/ENT9kUvLJA4OIWglqzUjDakN8L77YXWvPu3ZR0Z3hreUWasYjZm9kslpZl
7UWkl4hFm+5QrmPhaVfUa7ru/M1fnxVzvuE/VTmg5SFvBiOg/jU1Zli1YCpvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU7WOo5oxEvzj/lwKyKcTIEwLyGmcwHwYDVR0j
BBgwFoAUmdkjolJ9eMvKG8K2sV2sDx9sflAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQUJERjQwOTVGRThCMjI4ODJEMjBCMTZEQjdEMkJGRDM4
MUMwRjlFNjJDNkVCNjU5NDQ3RDQ0QkU3RTFDQkMyLzAvOTlEOTIzQTI1MjdENzhD
QkNBMUJDMkI2QjE1REFDMEYxRjZDN0U1MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUQ5MjNBMjUyN0Q3OENCQ0Ex
QkMyQjZCMTVEQUMwRjFGNkM3RTUwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUFCREY0MDk1RkU4QjIyODgyRDIwQjE2REI3RDJCRkQzODFDMEY5RTYy
QzZFQjY1OTQ0N0Q0NEJFN0UxQ0JDMi8wLzMxMzgzMTJlMzEzMTM5MmUzNzMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzczMjM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtXdH
MA0GCSqGSIb3DQEBCwUAA4IBAQBczR2rTNNC8Do2eSPNzoeOCu4r7F56ccl7ngzq
CoCv/8gjAWqsZujhFKinUKTinUD20aUB6Qe3fPQpnuy1Kmcm91JDJe9ObhCk1eX8
Yd/iD/QOcK98TZjmXQkTN9O2xTJmEiv34mKntPNS8ZIGrhMqMI4Sc/ade3dfn5GS
1qUA8roZ9KKYGQ5NvPd4H4nvgVkc6MQ02W381ds0o4OuxM3jJXd+ZFZxFqEUFkrM
BLzqdUT5u1IEZ5eELMJBxADquthIb203zfI+dtfoAaYbrCrnKiGF1d4ddoOM3PVq
pf3tDl6N9LOB//7+eFfG6gH94Ig6Qh+jJnsmiwaLriUE3I1v
-----END CERTIFICATE-----