Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e39362e302f32302d3234203d3e203532343638.roa
File:                     3138312e3131392e39362e302f32302d3234203d3e203532343638.roa (raw, json)
Hash identifier:          xFtKLUkSG2UyuZ6OP+vp/WniOfsWCw0rnwUCRswOfms=
Subject key identifier:   3E:93:85:5B:E7:FE:07:D6:60:37:1C:C3:02:EE:6B:3D:FC:7D:92:7D
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       69D937AF1A1E64526F304465A03B3A22BFA6A288
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e39362e302f32302d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:42 +0000
ROA not before:           Tue 05 Mar 2024 17:59:42 +0000
ROA not after:            Tue 04 Mar 2025 18:04:42 +0000
asID:                     52468
IP address blocks:        181.119.96.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d9:37:af:1a:1e:64:52:6f:30:44:65:a0:3b:3a:22:bf:a6:a2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:42 2024 GMT
            Not After : Mar  4 18:04:42 2025 GMT
        Subject: CN=3E93855BE7FE07D660371CC302EE6B3DFC7D927D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:00:d4:49:69:6e:9e:a3:a4:17:6d:f4:ba:f9:
                    89:fd:0f:70:66:68:26:92:12:f4:00:04:71:a8:9b:
                    5e:7f:3d:36:f4:c4:0e:2e:3e:b8:06:a2:00:99:a0:
                    cc:c3:4a:a8:9b:e3:22:88:42:7a:17:28:a7:7f:14:
                    52:33:a7:43:bc:ab:5d:6c:bb:12:45:56:42:85:ff:
                    7b:1f:bc:b1:60:ec:16:1b:ef:39:42:ff:ec:07:6a:
                    10:5d:ae:52:d8:de:6f:e4:80:6f:f2:9e:bb:15:b5:
                    8e:32:2d:61:a8:1b:6b:af:88:db:09:6b:15:34:89:
                    e0:4b:47:65:b7:b7:8f:13:03:e5:b9:ec:1a:3d:03:
                    4c:8c:77:b5:ba:68:0f:aa:90:ee:3f:c8:15:d5:48:
                    ae:2d:26:be:a9:ac:85:83:ae:e8:f3:49:b8:ea:c2:
                    33:d3:a8:7a:bf:ca:16:fa:5e:8a:1b:6d:34:85:95:
                    d2:ef:7f:15:fe:7c:cb:04:08:24:50:66:36:94:d7:
                    3e:f7:18:8e:83:7b:9b:18:14:e4:ab:6e:63:35:18:
                    b2:0f:7b:65:41:eb:2d:7f:ad:0a:d9:36:14:66:f4:
                    7f:5a:5a:5a:d9:d1:40:c2:08:96:2d:d6:d0:74:2c:
                    0b:0f:7b:f6:19:6e:e4:ac:9c:0b:b0:c5:7e:c5:75:
                    74:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:93:85:5B:E7:FE:07:D6:60:37:1C:C3:02:EE:6B:3D:FC:7D:92:7D
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e3131392e39362e302f32302d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.119.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:d9:05:b4:c2:3a:af:9c:66:df:88:df:c1:10:2e:e0:d8:3c:
         1e:91:e1:be:f5:98:d5:e2:b6:1d:8d:97:7d:8a:13:41:38:af:
         cf:7d:ac:f6:38:f3:04:30:1a:35:d1:d9:41:cf:4d:d1:5e:d2:
         2d:74:40:e5:cb:75:b0:9b:4d:ca:f1:3f:6e:88:20:fc:55:e4:
         39:93:96:82:ae:c0:21:e8:b8:dc:14:3c:a8:d3:d2:b4:4b:d9:
         ef:d3:1c:6e:d6:69:c0:f3:4c:82:d5:6a:d9:32:1d:ab:dd:cd:
         2b:64:bc:fe:a7:ed:52:74:2e:4f:f5:91:e3:77:ed:69:43:c2:
         7a:36:b0:df:b3:73:16:f3:5e:4b:a8:2e:cd:45:55:8b:6d:ee:
         4b:68:0f:20:0b:a2:44:97:08:a0:39:a4:6c:32:b7:03:39:5a:
         fb:8f:1a:52:95:63:3a:0d:e9:65:76:80:f1:b2:2e:0c:3a:2a:
         ca:bc:8f:66:3f:6a:b0:ee:23:85:de:44:ce:94:05:c4:63:cc:
         85:98:02:d0:90:15:28:e3:69:e1:91:1a:84:10:cb:08:19:22:
         0d:92:6d:a2:75:c4:42:33:0d:ab:2a:9d:8c:77:54:a6:bb:5f:
         46:4b:14:13:15:e4:2a:3b:93:dd:96:b5:65:43:5f:e0:e2:b8:
         b0:77:69:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----