Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132302e302f32342d3234203d3e203532343638.roa
File:                     3138312e37382e3132302e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          MqYXfDZbc6oPgFKC1cEV/1Ub9RKuSYp39y1XE/9TOTM=
Subject key identifier:   04:B2:65:D8:47:B1:C9:3E:CC:94:1F:C9:78:B4:6C:2A:EB:C8:DC:C4
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       30C47CFCCCB443989418244BE9DC2AB9B2F41737
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132302e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:56 +0000
ROA not before:           Tue 05 Mar 2024 17:59:56 +0000
ROA not after:            Tue 04 Mar 2025 18:04:56 +0000
asID:                     52468
IP address blocks:        181.78.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c4:7c:fc:cc:b4:43:98:94:18:24:4b:e9:dc:2a:b9:b2:f4:17:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:56 2024 GMT
            Not After : Mar  4 18:04:56 2025 GMT
        Subject: CN=04B265D847B1C93ECC941FC978B46C2AEBC8DCC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:2e:df:95:cd:e0:d2:e2:03:a5:a4:7e:56:
                    c2:fa:4b:bf:be:aa:2b:c2:43:5f:78:30:09:08:0e:
                    20:f3:35:ad:15:8b:9d:2b:8c:09:39:33:ad:99:dd:
                    ef:6e:cc:ac:06:9e:4e:53:bf:b4:c1:55:57:b5:f1:
                    d2:be:80:13:9d:9b:67:70:c0:91:a2:b1:dc:94:9a:
                    47:51:51:df:a7:80:95:a2:75:83:87:73:85:30:73:
                    ff:ac:fd:09:ee:77:3d:f1:40:58:80:b7:6c:50:56:
                    11:7d:3d:64:39:c1:43:68:3f:b0:f1:98:0a:9e:a2:
                    2c:42:39:4a:a2:8e:5e:41:18:a2:e5:ca:ee:47:08:
                    db:da:9a:21:2f:26:f1:05:36:ff:18:d6:56:e7:25:
                    cd:37:03:52:15:51:9d:e5:10:c7:a0:d1:8c:5d:da:
                    bc:d6:83:6e:08:60:16:71:f7:b3:d1:10:dd:e3:cd:
                    2c:a7:32:f9:78:2b:52:a8:b9:75:4c:bc:44:30:7b:
                    15:fd:4b:7d:5d:25:11:2f:8f:46:1b:ad:44:e0:12:
                    02:f0:b3:9e:64:c4:d8:1b:1e:ca:14:3a:cf:ef:ee:
                    99:17:46:65:21:e3:8c:c7:d3:22:b6:9d:ba:9d:e6:
                    29:84:b6:c2:12:5b:91:3b:cc:ba:69:bd:e6:09:dc:
                    a3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B2:65:D8:47:B1:C9:3E:CC:94:1F:C9:78:B4:6C:2A:EB:C8:DC:C4
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132302e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:49:f5:18:cb:21:b1:55:7b:bd:4b:31:a8:10:35:cb:ce:50:
         93:e5:ce:45:93:92:a5:41:b5:b8:d1:19:fe:33:25:5d:38:e6:
         f9:42:c5:cd:6a:fd:f2:17:2d:c5:8c:8a:29:cf:9c:9a:f4:28:
         21:59:d1:93:ae:ba:20:be:9f:88:d3:0c:a1:d9:69:8a:42:04:
         9c:0c:34:94:cf:69:ce:e4:4f:a3:ef:89:05:e1:09:0b:42:d6:
         49:8a:ca:1d:34:8e:9b:73:44:da:bd:48:b1:ff:e7:2f:50:28:
         be:1c:84:7a:f2:53:26:cd:99:60:c3:75:ea:17:0f:e2:74:0b:
         2f:58:5b:93:4b:8d:74:bc:62:8a:5d:7b:0a:30:a8:40:05:39:
         20:b0:b8:c1:ef:36:a3:a0:13:64:c2:15:b3:c3:85:be:46:27:
         30:b0:76:70:d2:9f:7f:08:b8:16:91:35:79:cc:ff:81:bf:ce:
         8d:93:6d:10:bc:db:08:22:19:e9:d7:79:80:ec:9e:54:7e:24:
         f5:67:f2:91:d2:d1:3d:54:79:ed:72:f3:48:9b:f0:f4:51:82:
         0d:ba:c6:48:80:2a:20:28:f9:6d:48:e8:a0:cb:95:cd:98:28:
         50:c8:5e:61:46:5f:4d:b8:0a:77:38:e4:95:22:d6:21:a9:d6:
         bc:ff:83:1c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMMR8/My0Q5iUGCRL6dwqubL0FzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlEOTIzQTI1MjdENzhDQkNBMUJDMkI2QjE1REFDMEYx
RjZDN0U1MDAeFw0yNDAzMDUxNzU5NTZaFw0yNTAzMDQxODA0NTZaMDMxMTAvBgNV
BAMTKDA0QjI2NUQ4NDdCMUM5M0VDQzk0MUZDOTc4QjQ2QzJBRUJDOERDQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZS7flc3g0uIDpaR+VsL6S7++
qivCQ194MAkIDiDzNa0Vi50rjAk5M62Z3e9uzKwGnk5Tv7TBVVe18dK+gBOdm2dw
wJGisdyUmkdRUd+ngJWidYOHc4Uwc/+s/Qnudz3xQFiAt2xQVhF9PWQ5wUNoP7Dx
mAqeoixCOUqijl5BGKLlyu5HCNvamiEvJvEFNv8Y1lbnJc03A1IVUZ3lEMeg0Yxd
2rzWg24IYBZx97PREN3jzSynMvl4K1KouXVMvEQwexX9S31dJREvj0YbrUTgEgLw
s55kxNgbHsoUOs/v7pkXRmUh44zH0yK2nbqd5imEtsISW5E7zLppveYJ3KNbAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUBLJl2EexyT7MlB/JeLRsKuvI3MQwHwYDVR0j
BBgwFoAUmdkjolJ9eMvKG8K2sV2sDx9sflAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQUJERjQwOTVGRThCMjI4ODJEMjBCMTZEQjdEMkJGRDM4
MUMwRjlFNjJDNkVCNjU5NDQ3RDQ0QkU3RTFDQkMyLzAvOTlEOTIzQTI1MjdENzhD
QkNBMUJDMkI2QjE1REFDMEYxRjZDN0U1MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUQ5MjNBMjUyN0Q3OENCQ0Ex
QkMyQjZCMTVEQUMwRjFGNkM3RTUwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUFCREY0MDk1RkU4QjIyODgyRDIwQjE2REI3RDJCRkQzODFDMEY5RTYy
QzZFQjY1OTQ0N0Q0NEJFN0UxQ0JDMi8wLzMxMzgzMTJlMzczODJlMzEzMjMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALVOeDAN
BgkqhkiG9w0BAQsFAAOCAQEAgEn1GMshsVV7vUsxqBA1y85Qk+XORZOSpUG1uNEZ
/jMlXTjm+ULFzWr98hctxYyKKc+cmvQoIVnRk666IL6fiNMModlpikIEnAw0lM9p
zuRPo++JBeEJC0LWSYrKHTSOm3NE2r1Isf/nL1AovhyEevJTJs2ZYMN16hcP4nQL
L1hbk0uNdLxiil17CjCoQAU5ILC4we82o6ATZMIVs8OFvkYnMLB2cNKffwi4FpE1
ecz/gb/OjZNtELzbCCIZ6dd5gOyeVH4k9WfykdLRPVR57XLzSJvw9FGCDbrGSIAq
ICj5bUjooMuVzZgoUMheYUZfTbgKdzjklSLWIanWvP+DHA==
-----END CERTIFICATE-----
Generated at Tue Sep 24 23:11:54 2024 by rpki-client on console-fra.rpki-client.org