Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e38322e302f32342d3234203d3e20323636373235.roa
File:                     3138312e3131392e38322e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          I9mYLcc0sKvKzb/l81hFC49ytppVIaPojF5FGXMOiL0=
Subject key identifier:   5D:35:88:88:2C:C3:98:FC:BB:04:87:D6:39:7A:5C:F9:1E:93:00:DC
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       2949085738C7BAED101D8CAF7CC772473F6E83FC
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e38322e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 05 Mar 2024 18:04:44 +0000
ROA not before:           Tue 05 Mar 2024 17:59:44 +0000
ROA not after:            Tue 04 Mar 2025 18:04:44 +0000
asID:                     266725
IP address blocks:        181.119.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:49:08:57:38:c7:ba:ed:10:1d:8c:af:7c:c7:72:47:3f:6e:83:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:44 2024 GMT
            Not After : Mar  4 18:04:44 2025 GMT
        Subject: CN=5D3588882CC398FCBB0487D6397A5CF91E9300DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:b8:70:a0:ab:e6:d3:aa:ec:88:24:2f:04:
                    f6:e8:0b:96:dc:d6:76:89:f3:da:16:77:77:3e:a7:
                    54:31:22:67:d7:06:39:83:c1:66:8c:4d:32:ed:10:
                    4f:29:5b:13:78:b5:2d:07:cf:8c:87:db:74:91:70:
                    82:9e:a4:0a:49:c5:43:db:52:8e:41:cb:6e:18:f8:
                    7d:26:01:40:9b:b4:a8:db:02:c4:13:fd:15:fb:4e:
                    a2:2f:22:b4:c1:ae:e0:06:07:70:98:1f:20:5a:1f:
                    5f:e2:ab:eb:ef:1d:b5:9c:23:98:4f:95:87:7e:a5:
                    95:a2:95:d8:53:36:a1:68:9a:ca:69:49:0e:45:b1:
                    d7:08:d0:ae:d7:87:40:03:79:73:a7:ca:b3:34:68:
                    d3:96:9a:07:7d:b5:4b:42:f1:07:de:04:2f:46:a7:
                    47:9d:e7:95:d5:96:ca:ea:1e:42:aa:38:d9:9b:69:
                    d6:57:6c:8d:20:96:3a:b8:fd:d5:eb:2a:81:a5:cf:
                    2c:42:36:66:f5:a4:1b:6b:f6:82:d5:ed:97:36:c0:
                    a3:d7:8f:4a:9c:1e:0f:75:8a:7c:d8:69:28:35:f2:
                    13:d1:fb:a6:e5:12:b2:db:70:18:61:f2:22:7d:be:
                    a1:c6:94:08:c5:a1:50:2c:72:0f:9f:22:bd:ba:ff:
                    ca:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:35:88:88:2C:C3:98:FC:BB:04:87:D6:39:7A:5C:F9:1E:93:00:DC
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e38322e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:5f:0e:1d:d4:80:b9:46:96:63:d3:be:c6:17:ae:75:46:4f:
         40:27:bd:29:c6:7d:dd:fe:dc:32:28:6e:e7:21:93:2c:47:1d:
         66:ca:c5:04:42:5f:2f:7e:ae:55:55:71:70:40:fc:0f:32:67:
         9c:a5:26:d2:27:ab:af:f3:80:da:f2:ac:48:da:5d:c5:f4:65:
         db:91:9f:c2:4b:89:be:ed:4f:04:15:3a:38:1c:07:7a:c0:42:
         f4:af:7c:c7:1f:97:b0:31:9b:3b:82:fb:49:9f:09:51:60:3b:
         e8:f1:ca:f3:4c:fb:d8:76:37:e1:41:bc:d0:85:3d:ed:f0:f9:
         2a:99:c7:01:eb:37:24:58:e7:e2:ef:1b:28:4b:07:9c:f1:1f:
         1a:89:17:83:df:a0:13:02:98:00:a2:a2:38:ed:f0:30:d1:ed:
         ad:41:4c:02:86:1c:d3:dc:cf:bb:71:08:79:a2:11:23:f9:95:
         ad:2c:23:c0:97:02:88:a8:ff:65:cf:65:92:21:1b:a1:08:a3:
         57:d0:f2:63:dd:a8:97:5a:b5:76:2d:3f:35:21:45:67:e8:2c:
         9f:56:43:1b:3e:c4:0f:86:8f:bf:35:9e:78:47:20:34:2a:4b:
         07:26:1b:96:76:d3:ef:7c:e8:d2:ad:c2:81:b4:06:ee:6f:f7:
         a7:c8:01:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----