Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132302e302f32312d3234203d3e203532343638.roa
File:                     3138312e37382e3132302e302f32312d3234203d3e203532343638.roa (raw, json)
Hash identifier:          F1QTMNFp4jtzEd7Xk0ntgrsVKOanOMNcEHYjQShUMvk=
Subject key identifier:   23:1F:72:48:6B:02:D0:6F:A7:EA:9F:0E:C9:4C:2B:74:2C:4C:18:BD
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       0999D7AC6C66285449CB1EC2BCF3F338E82C0079
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132302e302f32312d3234203d3e203532343638.roa
Signing time:             Mon 25 Mar 2024 22:00:00 +0000
ROA not before:           Mon 25 Mar 2024 21:55:00 +0000
ROA not after:            Mon 24 Mar 2025 22:00:00 +0000
asID:                     52468
IP address blocks:        181.78.120.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:99:d7:ac:6c:66:28:54:49:cb:1e:c2:bc:f3:f3:38:e8:2c:00:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar 25 21:55:00 2024 GMT
            Not After : Mar 24 22:00:00 2025 GMT
        Subject: CN=231F72486B02D06FA7EA9F0EC94C2B742C4C18BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:f0:47:1f:a2:0e:69:eb:fa:34:65:91:9f:
                    73:28:1f:c6:34:16:fe:fa:b6:2e:a9:27:cc:31:cf:
                    35:92:02:b2:b1:53:70:9d:97:77:25:42:1e:ac:4b:
                    fe:0a:18:1d:4e:38:fb:05:6c:79:ac:45:c8:c2:71:
                    ec:1f:a6:00:16:56:67:74:74:70:cd:e3:86:ff:60:
                    60:e0:72:43:22:f7:66:23:3e:b8:ef:39:b6:96:38:
                    ae:ee:7d:2b:54:7f:2b:73:61:e6:90:3a:40:62:50:
                    47:db:6e:65:60:ff:01:55:19:98:66:87:aa:50:b6:
                    dd:4c:92:7d:20:14:48:22:f7:93:65:63:24:e7:6c:
                    ed:fb:1d:c8:4b:64:79:f1:90:53:6f:23:83:53:18:
                    4f:de:54:cb:4a:0d:e8:57:78:2c:95:3d:ee:ab:2c:
                    dc:59:32:11:b8:e0:71:73:91:e1:a5:53:8f:74:9d:
                    c3:ed:ca:11:34:89:90:89:4e:32:cc:ea:59:40:9d:
                    7c:2e:e2:5d:70:f3:3c:74:42:8e:f7:96:88:f0:0a:
                    2d:ca:19:d6:86:ab:68:53:69:5e:94:55:ac:77:0a:
                    74:fe:33:c5:e6:5e:29:bb:15:70:54:73:d7:c4:d9:
                    8c:e2:07:7c:ce:7e:b3:7f:7c:ea:b3:e1:19:ff:56:
                    16:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1F:72:48:6B:02:D0:6F:A7:EA:9F:0E:C9:4C:2B:74:2C:4C:18:BD
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132302e302f32312d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:6e:97:aa:62:61:5f:f5:6f:2f:11:af:5f:17:d8:2c:a0:5b:
         7f:5d:10:60:30:f3:38:f0:ce:d8:a6:9a:ff:a7:21:62:3a:57:
         1d:65:4c:fb:ff:e4:a5:03:53:3d:76:85:46:e3:e6:17:68:cf:
         e4:3a:fa:2f:15:49:b8:26:67:8a:4d:f2:93:83:6f:3a:21:fd:
         51:e5:ef:f8:40:94:99:98:fb:c5:c5:cc:df:12:f3:9e:df:56:
         b5:ce:94:05:95:49:8d:c9:fa:80:4d:b8:76:24:34:82:07:d3:
         4e:ed:63:2d:44:22:d5:a5:d8:76:86:08:4a:5f:b8:9e:e2:cb:
         e6:49:46:8b:f5:15:9e:d1:35:aa:c9:3d:71:d1:c4:2a:36:06:
         b6:2c:65:fa:df:a6:30:49:12:c4:bf:f2:7a:9a:30:3a:f7:72:
         b9:0c:9a:b6:69:15:49:c0:a2:1f:d9:ff:30:b8:a5:5d:ec:ef:
         45:44:d8:b7:77:8d:3a:9e:85:00:1d:92:69:31:f0:d7:69:21:
         c7:a9:e2:f9:8b:e0:03:ba:f5:fd:32:f5:71:20:7b:71:9e:87:
         22:57:9f:4f:8f:97:51:c9:94:f8:04:c2:85:f9:b9:7c:dc:e0:
         c3:79:98:a8:ae:c9:b9:2d:8e:db:26:9f:f2:5d:77:0a:ea:bf:
         4e:35:72:a6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUCZnXrGxmKFRJyx7CvPPzOOgsAHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlEOTIzQTI1MjdENzhDQkNBMUJDMkI2QjE1REFDMEYx
RjZDN0U1MDAeFw0yNDAzMjUyMTU1MDBaFw0yNTAzMjQyMjAwMDBaMDMxMTAvBgNV
BAMTKDIzMUY3MjQ4NkIwMkQwNkZBN0VBOUYwRUM5NEMyQjc0MkM0QzE4QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpKvBHH6IOaev6NGWRn3MoH8Y0
Fv76ti6pJ8wxzzWSArKxU3Cdl3clQh6sS/4KGB1OOPsFbHmsRcjCcewfpgAWVmd0
dHDN44b/YGDgckMi92YjPrjvObaWOK7ufStUfytzYeaQOkBiUEfbbmVg/wFVGZhm
h6pQtt1Mkn0gFEgi95NlYyTnbO37HchLZHnxkFNvI4NTGE/eVMtKDehXeCyVPe6r
LNxZMhG44HFzkeGlU490ncPtyhE0iZCJTjLM6llAnXwu4l1w8zx0Qo73lojwCi3K
GdaGq2hTaV6UVax3CnT+M8XmXim7FXBUc9fE2YziB3zOfrN/fOqz4Rn/VhZnAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUIx9ySGsC0G+n6p8OyUwrdCxMGL0wHwYDVR0j
BBgwFoAUmdkjolJ9eMvKG8K2sV2sDx9sflAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQUJERjQwOTVGRThCMjI4ODJEMjBCMTZEQjdEMkJGRDM4
MUMwRjlFNjJDNkVCNjU5NDQ3RDQ0QkU3RTFDQkMyLzAvOTlEOTIzQTI1MjdENzhD
QkNBMUJDMkI2QjE1REFDMEYxRjZDN0U1MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUQ5MjNBMjUyN0Q3OENCQ0Ex
QkMyQjZCMTVEQUMwRjFGNkM3RTUwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUFCREY0MDk1RkU4QjIyODgyRDIwQjE2REI3RDJCRkQzODFDMEY5RTYy
QzZFQjY1OTQ0N0Q0NEJFN0UxQ0JDMi8wLzMxMzgzMTJlMzczODJlMzEzMjMwMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7VOeDAN
BgkqhkiG9w0BAQsFAAOCAQEAGG6XqmJhX/VvLxGvXxfYLKBbf10QYDDzOPDO2Kaa
/6chYjpXHWVM+//kpQNTPXaFRuPmF2jP5Dr6LxVJuCZnik3yk4NvOiH9UeXv+ECU
mZj7xcXM3xLznt9Wtc6UBZVJjcn6gE24diQ0ggfTTu1jLUQi1aXYdoYISl+4nuLL
5klGi/UVntE1qsk9cdHEKjYGtixl+t+mMEkSxL/yepowOvdyuQyatmkVScCiH9n/
MLilXezvRUTYt3eNOp6FAB2SaTHw12khx6ni+YvgA7r1/TL1cSB7cZ6HIlefT4+X
UcmU+ATChfm5fNzgw3mYqK7JuS2O2yaf8l13Cuq/TjVypg==
-----END CERTIFICATE-----