Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e38312e302f32342d3234203d3e20323636373235.roa
File:                     3138312e3131392e38312e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          3uKSL4QrbEI2jSuEk0WVjJuQYP/4KtaXHLhtXbI5/rM=
Subject key identifier:   8B:1B:A0:E2:67:14:E8:6C:06:56:9B:C3:FB:AB:3F:9D:91:21:80:8C
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       4228BEBCA1B2D7EC79618FDA02631265190F26F2
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e38312e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 05 Mar 2024 18:04:55 +0000
ROA not before:           Tue 05 Mar 2024 17:59:55 +0000
ROA not after:            Tue 04 Mar 2025 18:04:55 +0000
asID:                     266725
IP address blocks:        181.119.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:28:be:bc:a1:b2:d7:ec:79:61:8f:da:02:63:12:65:19:0f:26:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:55 2024 GMT
            Not After : Mar  4 18:04:55 2025 GMT
        Subject: CN=8B1BA0E26714E86C06569BC3FBAB3F9D9121808C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1f:55:27:cc:d4:e1:07:1a:0f:9f:c3:5b:7d:
                    9b:a6:3a:1e:a6:3e:cd:4b:e7:77:0c:c8:8e:e4:0c:
                    83:5b:d7:76:7f:41:9f:09:70:e7:82:c6:a4:6b:61:
                    2c:2b:bf:a3:b2:91:64:d2:bf:e3:22:a0:32:82:ee:
                    49:d6:06:2a:61:b7:e6:67:8c:da:55:d7:d0:24:06:
                    c2:fa:1d:b6:53:29:98:ec:a1:9a:81:f0:9f:22:a4:
                    24:bf:de:bf:15:1e:40:31:c8:22:21:e8:b6:39:4a:
                    bb:a1:12:6a:8c:06:9a:02:e2:97:5a:e6:2a:55:d7:
                    dd:fb:ff:16:f7:bf:c3:72:9c:94:d0:b8:74:5d:bf:
                    c3:88:c2:5e:7e:31:e3:8f:a5:5e:6e:d9:b9:a0:bc:
                    a4:3c:1b:ce:fd:e8:6e:1f:28:13:e3:7b:85:04:ee:
                    9c:2e:7e:f8:97:f2:3f:42:14:1e:de:6c:dc:86:d7:
                    0e:4c:da:33:e1:21:fa:e8:b9:cb:dd:2f:ff:cf:50:
                    57:c0:4f:f2:15:1a:35:c0:27:f1:07:89:ec:12:fa:
                    98:c4:f8:a5:88:04:3a:d5:cf:eb:7f:f9:2d:91:c5:
                    3d:32:f9:fd:fd:9d:b5:6b:65:b5:db:3f:d8:75:2d:
                    ab:bd:49:8d:59:58:4f:35:73:1a:1b:c4:7a:a8:a9:
                    62:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1B:A0:E2:67:14:E8:6C:06:56:9B:C3:FB:AB:3F:9D:91:21:80:8C
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e38312e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:80:0e:ae:8e:dc:4f:74:ed:a9:49:db:05:7a:c4:5d:b9:3c:
         84:1c:e1:11:f2:06:cd:11:fb:5c:fc:cc:f0:b5:df:1e:3d:98:
         5e:4c:11:d9:36:36:97:59:68:71:23:91:90:09:5b:6f:eb:ce:
         97:3d:94:ff:6c:10:ae:78:90:f3:16:88:24:b9:a4:27:a5:a7:
         12:f7:c4:59:b5:0b:ce:cd:70:3b:a6:9d:0a:b9:e9:80:e3:12:
         b6:d0:76:76:b4:fc:e7:d9:c1:b7:0d:f4:de:9e:60:e5:c2:2b:
         6e:93:71:3e:6a:af:92:f0:28:ff:c1:65:61:96:4e:a9:31:6d:
         69:98:28:a3:fd:62:05:4e:db:ec:15:ab:31:7e:2d:7e:bd:42:
         71:b8:23:d1:0d:83:ee:30:26:46:80:4c:b9:43:47:3e:19:9a:
         2e:3c:eb:58:c9:56:f3:21:ed:77:9f:d4:a8:cd:92:cb:78:a2:
         52:42:e9:2a:bc:e9:57:c8:fe:be:44:bb:78:45:9b:ad:4e:91:
         15:dd:45:b6:bd:57:ee:9b:db:7d:27:15:60:25:9f:f2:3c:25:
         ab:78:93:96:67:9f:3e:62:eb:94:2b:36:03:89:b6:26:7d:71:
         d1:fb:98:21:14:2a:a2:74:af:f4:56:a9:12:25:c2:9b:8e:f3:
         57:b9:17:2e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQii+vKGy1+x5YY/aAmMSZRkPJvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlEOTIzQTI1MjdENzhDQkNBMUJDMkI2QjE1REFDMEYx
RjZDN0U1MDAeFw0yNDAzMDUxNzU5NTVaFw0yNTAzMDQxODA0NTVaMDMxMTAvBgNV
BAMTKDhCMUJBMEUyNjcxNEU4NkMwNjU2OUJDM0ZCQUIzRjlEOTEyMTgwOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQH1UnzNThBxoPn8NbfZumOh6m
Ps1L53cMyI7kDINb13Z/QZ8JcOeCxqRrYSwrv6OykWTSv+MioDKC7knWBipht+Zn
jNpV19AkBsL6HbZTKZjsoZqB8J8ipCS/3r8VHkAxyCIh6LY5SruhEmqMBpoC4pda
5ipV1937/xb3v8NynJTQuHRdv8OIwl5+MeOPpV5u2bmgvKQ8G8796G4fKBPje4UE
7pwufviX8j9CFB7ebNyG1w5M2jPhIfroucvdL//PUFfAT/IVGjXAJ/EHiewS+pjE
+KWIBDrVz+t/+S2RxT0y+f39nbVrZbXbP9h1Lau9SY1ZWE81cxobxHqoqWJXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUixug4mcU6GwGVpvD+6s/nZEhgIwwHwYDVR0j
BBgwFoAUmdkjolJ9eMvKG8K2sV2sDx9sflAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQUJERjQwOTVGRThCMjI4ODJEMjBCMTZEQjdEMkJGRDM4
MUMwRjlFNjJDNkVCNjU5NDQ3RDQ0QkU3RTFDQkMyLzAvOTlEOTIzQTI1MjdENzhD
QkNBMUJDMkI2QjE1REFDMEYxRjZDN0U1MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUQ5MjNBMjUyN0Q3OENCQ0Ex
QkMyQjZCMTVEQUMwRjFGNkM3RTUwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUFCREY0MDk1RkU4QjIyODgyRDIwQjE2REI3RDJCRkQzODFDMEY5RTYy
QzZFQjY1OTQ0N0Q0NEJFN0UxQ0JDMi8wLzMxMzgzMTJlMzEzMTM5MmUzODMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzczMjM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtXdR
MA0GCSqGSIb3DQEBCwUAA4IBAQAWgA6ujtxPdO2pSdsFesRduTyEHOER8gbNEftc
/Mzwtd8ePZheTBHZNjaXWWhxI5GQCVtv686XPZT/bBCueJDzFogkuaQnpacS98RZ
tQvOzXA7pp0KuemA4xK20HZ2tPzn2cG3DfTenmDlwituk3E+aq+S8Cj/wWVhlk6p
MW1pmCij/WIFTtvsFasxfi1+vUJxuCPRDYPuMCZGgEy5Q0c+GZouPOtYyVbzIe13
n9SozZLLeKJSQukqvOlXyP6+RLt4RZutTpEV3UW2vVfum9t9JxVgJZ/yPCWreJOW
Z58+YuuUKzYDibYmfXHR+5ghFCqidK/0VqkSJcKbjvNXuRcu
-----END CERTIFICATE-----