Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37382e302f32342d3234203d3e20323636373235.roa
File:                     3138312e3131392e37382e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          S5Q18Z9jqXOE8ivZ6zmYXoehweMPW5z1rCgDbqrlAgM=
Subject key identifier:   FF:86:9B:81:C9:B5:A2:14:FF:97:A6:7B:C2:54:FA:2E:6D:A8:AD:94
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       43A938A940F246BD6C6A60AD1AEC5E4183B9BCAB
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37382e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 05 Mar 2024 18:04:56 +0000
ROA not before:           Tue 05 Mar 2024 17:59:56 +0000
ROA not after:            Tue 04 Mar 2025 18:04:56 +0000
asID:                     266725
IP address blocks:        181.119.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a9:38:a9:40:f2:46:bd:6c:6a:60:ad:1a:ec:5e:41:83:b9:bc:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:56 2024 GMT
            Not After : Mar  4 18:04:56 2025 GMT
        Subject: CN=FF869B81C9B5A214FF97A67BC254FA2E6DA8AD94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c0:5a:e7:9a:dc:ca:ab:7c:0e:cc:2f:6f:c0:
                    f7:4b:a0:36:33:c6:66:28:7b:b8:12:28:04:6f:54:
                    dd:60:fb:ef:eb:51:95:58:8b:a6:5d:db:8a:9e:2c:
                    fa:10:4f:58:80:6a:59:e2:89:51:be:cc:8f:41:56:
                    ae:97:16:0a:fb:fc:25:3e:22:12:da:ba:f0:4a:87:
                    9e:dd:52:65:9c:dd:1d:53:d8:99:eb:4e:07:c1:3b:
                    f9:4f:10:1e:29:36:df:57:b0:8d:61:0f:b0:f0:86:
                    5b:d7:26:2f:5e:f3:0c:84:60:26:b0:96:59:c4:a2:
                    82:ee:a0:47:be:a3:10:a7:f6:aa:9f:97:9b:b6:04:
                    c1:03:12:31:77:b6:b8:26:ff:3e:af:95:67:5e:19:
                    5d:dd:05:7d:b8:20:97:2f:49:d6:6f:16:70:51:38:
                    e3:2d:db:2f:14:29:0c:7a:fc:03:f6:ba:69:d5:f5:
                    f8:c9:8b:7f:8f:2f:cb:1d:2c:16:64:63:96:ed:02:
                    b7:6f:74:c4:dd:4f:06:05:ae:a1:5b:10:75:90:77:
                    a7:37:12:ea:20:06:f6:9e:a2:83:c0:f5:85:51:c5:
                    8e:99:b5:d7:98:13:08:5e:54:0c:15:14:e2:47:0e:
                    69:4a:38:ba:46:43:38:00:ad:3f:02:d0:b9:96:1a:
                    03:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:86:9B:81:C9:B5:A2:14:FF:97:A6:7B:C2:54:FA:2E:6D:A8:AD:94
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e37382e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:f8:4b:8d:77:0f:63:e4:ca:20:f8:93:28:fb:36:1b:23:c7:
         4d:b3:52:0d:75:3b:9a:ef:7e:1e:03:46:9d:e7:3b:fc:2f:95:
         2e:3c:00:47:e1:91:3c:7a:e4:91:47:b3:30:a7:e6:92:82:62:
         6b:04:15:da:21:2b:01:e9:0e:34:e6:09:8f:8d:3e:80:ab:09:
         d4:27:84:e6:90:a7:dd:93:5d:af:84:40:c3:8b:26:a3:75:34:
         01:1a:14:e2:a5:d4:44:ee:21:00:68:7e:77:ca:85:d2:b7:de:
         bc:6c:bf:bb:9d:c4:a1:53:60:80:f5:08:30:aa:8c:85:56:03:
         9e:6a:ee:84:27:1d:37:36:8c:d5:ee:bd:79:51:be:8f:d7:1c:
         84:ab:29:86:0e:88:12:15:91:ed:5d:1b:df:fc:5c:56:b2:ac:
         b1:60:ff:d3:49:2f:fe:1f:59:f9:7e:f5:ff:e4:87:5e:6c:df:
         0f:a8:8f:1c:53:d6:ae:2d:f3:f9:8c:30:d1:40:55:93:2e:c3:
         04:31:20:eb:da:ca:1c:a3:e4:cc:83:da:01:fc:7b:c0:cd:c8:
         09:2d:44:6b:40:5f:92:9d:e7:cd:23:30:d9:13:10:2b:fd:89:
         7b:80:c4:70:57:fe:d3:cb:5d:43:92:42:e2:78:0a:3d:1b:71:
         72:67:3b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 00:59:06 2024 by rpki-client on console-ams.rpki-client.org