Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37322e302f32342d3234203d3e20323636373235.roa
File:                     3138312e3131392e37322e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          xM09iRKnjaq0CKHTs3fZvqnm6xBuaAKgq6nSmJDqn9k=
Subject key identifier:   1D:EC:A2:5E:48:59:A0:B7:6B:2E:87:9B:F1:4C:67:0A:EB:71:19:ED
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       2DDAB16DC08E69CC11B8CB3A32A12AC1B6EB89B8
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37322e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 05 Mar 2024 18:04:32 +0000
ROA not before:           Tue 05 Mar 2024 17:59:32 +0000
ROA not after:            Tue 04 Mar 2025 18:04:32 +0000
asID:                     266725
IP address blocks:        181.119.72.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:da:b1:6d:c0:8e:69:cc:11:b8:cb:3a:32:a1:2a:c1:b6:eb:89:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:32 2024 GMT
            Not After : Mar  4 18:04:32 2025 GMT
        Subject: CN=1DECA25E4859A0B76B2E879BF14C670AEB7119ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:94:98:6c:45:08:62:1b:32:f5:aa:bd:e2:f8:
                    f6:cf:3b:05:38:72:4b:a0:53:b0:51:9b:42:71:85:
                    4c:e0:4a:ca:db:2f:2e:c5:60:56:3c:f5:a3:90:df:
                    ec:90:ad:35:b3:a5:51:5e:5d:05:4d:e8:7c:6b:5e:
                    a2:4e:c0:2a:18:2f:5d:2c:9c:45:79:b0:78:2f:6e:
                    13:aa:b0:25:b7:0b:78:14:3e:ec:83:4c:05:f9:e4:
                    e4:7e:e8:40:c1:b9:0c:a7:a2:cb:95:f5:f7:f1:43:
                    4a:f4:36:02:ac:72:1f:6a:91:16:48:4c:0a:0c:b4:
                    2d:44:33:2a:5a:60:53:f1:2a:40:14:76:41:53:0f:
                    c7:09:b0:04:35:b4:18:54:b3:fb:f9:a2:b9:d0:3d:
                    7e:19:14:18:11:62:8f:b2:c2:7d:5c:b9:a4:da:e2:
                    3e:3e:86:de:14:59:50:7d:a8:81:13:6a:97:e8:e1:
                    96:43:57:e4:d4:fa:72:e1:7f:53:b1:ce:3d:f0:2a:
                    bd:f1:f7:d8:a5:b9:7a:a4:0a:50:bd:67:58:f8:15:
                    4c:46:a1:32:8c:09:37:bf:34:14:80:ec:dd:2c:7f:
                    8d:66:08:22:20:a7:79:c1:d0:48:17:70:98:85:ee:
                    ab:e3:1b:5f:2d:be:a9:29:7b:76:ae:5b:0d:9d:5e:
                    f8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EC:A2:5E:48:59:A0:B7:6B:2E:87:9B:F1:4C:67:0A:EB:71:19:ED
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37322e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:e9:0e:b0:83:39:ff:11:25:e3:58:91:3e:f9:3b:e1:08:10:
         e1:21:61:f8:9b:3d:a0:97:8e:d9:6e:a1:22:44:c9:5f:f1:64:
         d0:9c:86:ed:c6:d2:6a:54:46:37:21:3d:72:c4:2a:a8:ce:d3:
         54:fd:5c:c6:2b:7b:5b:e3:ca:3b:5c:53:c0:0c:6f:e9:9b:94:
         4e:b5:8e:b3:1b:1d:05:90:b5:fc:b8:2d:99:2e:12:e9:1b:e7:
         f8:65:f8:6e:da:eb:5d:50:04:82:dd:ce:2d:a5:5b:bb:04:61:
         95:33:2b:ad:1b:ab:bc:63:6d:79:5a:2d:9c:f5:06:4e:62:c4:
         9c:4f:81:77:c3:fb:05:77:ec:64:e8:2e:aa:ba:42:46:fe:7d:
         fb:06:74:30:24:3f:f7:81:eb:59:6d:a3:f4:bd:3f:16:cb:61:
         ee:75:4c:39:c6:7f:bb:71:5d:9d:b8:de:01:28:18:41:ed:2f:
         d4:2b:c7:b9:0f:71:36:8b:07:cf:95:9d:47:89:fe:9f:fa:ab:
         7a:4f:67:86:18:47:46:95:b9:83:42:3e:f1:d3:0f:f3:7d:1b:
         77:a9:d0:9f:1b:6a:2b:2a:02:33:ed:06:1c:1e:57:dd:b3:de:
         e3:fb:4f:53:08:e0:55:e3:41:c7:d4:02:f5:a2:6f:5f:75:92:
         aa:5a:2d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----