Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37322e302f32312d3231203d3e20323636373235.roa
File:                     3138312e3131392e37322e302f32312d3231203d3e20323636373235.roa (raw, json)
Hash identifier:          Jj1DbNgYQMTa8iiQHR3ioy0RjeJU4J1PffNoNZ8gntw=
Subject key identifier:   3C:45:AD:FF:26:37:34:1E:79:78:A9:BF:A8:83:39:3C:1C:96:F2:D6
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       4D545387266A29E11C277F6EAC2F098A53A6A7C2
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37322e302f32312d3231203d3e20323636373235.roa
Signing time:             Tue 05 Mar 2024 18:04:32 +0000
ROA not before:           Tue 05 Mar 2024 17:59:32 +0000
ROA not after:            Tue 04 Mar 2025 18:04:32 +0000
asID:                     266725
IP address blocks:        181.119.72.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:54:53:87:26:6a:29:e1:1c:27:7f:6e:ac:2f:09:8a:53:a6:a7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:32 2024 GMT
            Not After : Mar  4 18:04:32 2025 GMT
        Subject: CN=3C45ADFF2637341E7978A9BFA883393C1C96F2D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7f:d2:b2:0f:24:23:27:cc:12:61:66:e4:19:
                    8d:88:18:82:55:2a:a6:22:7c:0a:11:38:e5:71:50:
                    3c:4a:78:80:cc:47:6e:f1:64:72:71:9e:24:b7:86:
                    9c:4d:1b:d1:df:48:50:e9:02:46:4f:f1:a1:46:d1:
                    8a:ac:65:e9:8c:bf:20:94:ab:9b:b5:7c:24:33:0f:
                    a7:0f:14:6f:22:55:a8:fd:e7:8c:6b:f1:70:ac:25:
                    8e:ee:11:11:6e:8f:e8:b4:39:48:36:cc:e8:2e:18:
                    64:c6:15:62:3b:36:bb:97:b7:39:db:d3:aa:54:f6:
                    48:71:69:e0:f5:87:0c:eb:bc:db:69:85:a5:44:1f:
                    17:d5:df:4c:ba:3d:45:54:0e:c5:e4:2e:e3:da:3f:
                    c4:09:cd:1e:05:9e:54:19:e6:13:d6:4e:a4:bb:a2:
                    46:68:c4:fc:fd:f4:89:bf:94:75:88:02:8b:4b:57:
                    9e:60:c7:49:09:cc:ed:fa:bb:1f:74:98:30:cd:fb:
                    78:31:88:eb:31:60:4a:6c:56:d6:6a:ee:17:fb:2f:
                    14:b0:96:54:ad:5d:e8:bd:27:81:8a:76:b8:0a:a9:
                    8a:73:dc:0d:21:bf:1d:ee:2d:bc:bd:2c:f6:e3:1c:
                    80:55:e2:45:33:f4:bf:96:d2:3e:d6:3a:4f:17:a5:
                    f3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:45:AD:FF:26:37:34:1E:79:78:A9:BF:A8:83:39:3C:1C:96:F2:D6
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37322e302f32312d3231203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:bf:cd:a8:e2:8e:47:2e:fa:a9:17:84:1e:04:2f:18:51:45:
         9b:25:21:0c:28:a8:f7:de:0a:bf:f8:70:91:41:4b:9e:72:eb:
         0d:f4:4f:36:44:9d:1a:69:8a:47:9a:ed:37:9c:74:86:f1:ac:
         df:53:dc:12:1d:6f:60:9e:8d:e9:92:63:58:f0:e2:87:a9:9c:
         d9:57:c1:c5:44:aa:20:5a:ee:64:d4:f0:5d:de:05:9d:75:dc:
         0e:d7:cd:fe:6f:5f:7b:91:d0:5d:02:fe:67:5f:72:e3:e9:ca:
         1f:24:c2:2a:c9:f5:f5:12:40:51:c5:7d:2e:63:bc:e0:b0:71:
         50:41:9b:50:50:1d:1a:0c:e8:01:ac:19:9f:a1:33:3c:c3:18:
         36:49:99:c3:25:df:9c:9c:69:7e:42:b0:0f:c8:a4:51:33:91:
         be:03:c8:c7:83:65:46:b3:b3:52:83:f0:d4:e2:a2:f1:4f:18:
         b6:a7:d5:19:ea:83:62:fb:f5:2c:ca:9e:ae:28:be:b1:4c:8a:
         3c:41:64:46:cc:7f:fb:14:85:6f:08:98:2d:59:0e:86:85:3d:
         77:30:95:83:18:d2:ef:50:0a:8d:ed:74:5b:3b:ee:76:99:a4:
         8b:06:37:6e:21:2c:91:f1:b6:be:08:65:0d:8e:ef:25:f1:88:
         19:2d:b4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----