Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37352e302f32342d3234203d3e20323636373235.roa
File:                     3138312e3131392e37352e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          bvdTeuvhgG+Q2VHH8+qfWy4z0ODWPLLPibI5wj2VT5I=
Subject key identifier:   DA:54:5F:3F:DF:46:1D:0A:46:8A:25:36:CC:66:DE:37:5A:AB:E2:85
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       74DF8B2238C76789F9B5328BE11358E2D30967A3
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37352e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 05 Mar 2024 18:04:48 +0000
ROA not before:           Tue 05 Mar 2024 17:59:48 +0000
ROA not after:            Tue 04 Mar 2025 18:04:48 +0000
asID:                     266725
IP address blocks:        181.119.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:df:8b:22:38:c7:67:89:f9:b5:32:8b:e1:13:58:e2:d3:09:67:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:48 2024 GMT
            Not After : Mar  4 18:04:48 2025 GMT
        Subject: CN=DA545F3FDF461D0A468A2536CC66DE375AABE285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:7d:22:ee:3d:bf:d1:3c:8d:0d:fc:b3:80:
                    7a:06:48:62:34:bf:c8:70:8e:e1:49:42:2e:86:96:
                    1e:8e:ec:61:63:aa:96:6c:df:f0:f2:eb:47:5e:f1:
                    d0:8a:0c:81:97:bf:2e:9c:b5:ea:85:64:3e:05:fa:
                    f5:77:e5:cd:21:f6:c6:b8:ea:67:48:85:ac:b1:d6:
                    c0:d9:e8:23:52:6d:0e:fe:20:c4:c6:01:33:8a:da:
                    8b:50:44:b1:a0:4d:c3:5b:62:54:99:9a:04:e2:cd:
                    f9:1b:85:9e:db:2b:08:8f:fb:da:cb:5a:e0:98:7f:
                    c5:57:cf:21:d3:3d:fa:f9:2e:e8:14:34:79:18:45:
                    67:90:4d:ba:1f:51:b9:8d:a3:95:68:8e:07:81:fb:
                    b5:5e:d1:30:56:25:5e:08:a4:9a:53:46:8e:6f:19:
                    36:de:9a:5a:c5:96:f5:f5:3b:9d:db:3d:1f:e5:4f:
                    79:5b:6a:cd:93:fd:aa:a3:8a:ad:fe:2c:7f:86:32:
                    70:e9:a9:f4:bc:7a:cc:57:d3:82:02:77:6e:03:cd:
                    d3:ad:cd:f5:1d:e7:f5:2f:42:49:70:68:ce:e8:5b:
                    f6:81:b1:38:87:23:40:a3:18:b2:6c:00:8e:27:5f:
                    15:40:fc:84:44:26:2d:05:d1:61:53:c9:63:0d:37:
                    69:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:54:5F:3F:DF:46:1D:0A:46:8A:25:36:CC:66:DE:37:5A:AB:E2:85
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37352e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:6e:15:22:4e:0f:7d:a2:90:a5:b4:05:e8:d1:f1:b3:cd:4b:
         6b:8e:d9:12:3b:68:87:ce:86:5c:63:5d:7a:76:7b:b5:d7:09:
         71:9e:d6:c5:93:3a:0e:9a:c5:3b:93:71:4d:27:a5:fc:12:e1:
         a2:fd:6f:e4:9c:2f:26:6a:89:f2:7d:af:12:c1:1e:a6:6e:8a:
         f1:87:9f:a3:58:a7:fd:36:14:ca:f8:fc:04:4b:8c:27:39:90:
         8d:50:04:f0:d2:1a:97:b0:db:63:0d:0b:a8:5e:b3:37:bc:b2:
         6f:98:51:95:d7:72:12:1c:55:6f:75:0d:df:02:f5:08:0e:fc:
         77:24:2a:2b:8a:2a:b5:25:71:d6:4b:39:e9:d9:7f:03:05:90:
         77:cc:cf:3b:27:37:6e:db:c6:0d:3e:2c:4a:43:c4:87:32:71:
         8c:91:ee:7e:c4:5a:cd:60:c8:e9:67:64:7f:78:d2:7a:48:24:
         09:3d:8f:ef:b2:71:23:4a:7d:96:07:5a:26:d0:ad:14:be:6d:
         1e:1c:37:96:43:f9:ac:78:52:59:16:34:ab:76:3e:87:ec:5a:
         2b:46:77:eb:23:5e:32:7f:36:09:fe:93:49:6f:6a:14:82:93:
         ec:fc:47:dc:8c:d8:58:1d:e5:10:98:09:43:cf:7e:c9:d0:93:
         61:98:59:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----