Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132322e302f32342d3234203d3e203532343638.roa
File:                     3138312e37382e3132322e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          K3JgNx4m1TscCh3wyc7NSJjQys3T3d85HRPztkQghkk=
Subject key identifier:   D1:BC:79:E0:2A:06:4A:C9:2C:6D:8F:1B:48:79:19:E3:39:AC:3E:A1
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       676B3523328D0F54C9EC0A75C28C7EC5D9B6865A
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132322e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:38 +0000
ROA not before:           Tue 05 Mar 2024 17:59:38 +0000
ROA not after:            Tue 04 Mar 2025 18:04:38 +0000
asID:                     52468
IP address blocks:        181.78.122.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6b:35:23:32:8d:0f:54:c9:ec:0a:75:c2:8c:7e:c5:d9:b6:86:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:38 2024 GMT
            Not After : Mar  4 18:04:38 2025 GMT
        Subject: CN=D1BC79E02A064AC92C6D8F1B487919E339AC3EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:06:c6:05:b1:e2:36:6d:f6:ea:15:c7:47:79:
                    ab:b1:cb:07:fd:7b:46:fc:4c:80:69:7c:c1:55:33:
                    85:08:34:67:d1:79:8c:34:72:45:7f:1d:19:f1:e7:
                    e6:82:5d:29:ba:65:62:cf:74:04:5c:e7:8d:21:3c:
                    94:9a:ef:ea:3b:f1:79:b5:63:b9:76:14:54:d7:39:
                    5f:3f:5c:df:4b:01:ae:4e:82:66:ce:11:d3:ba:82:
                    b9:30:07:9d:a0:3c:92:35:62:f9:70:a7:da:7a:28:
                    f9:6a:ba:22:9a:1b:5b:e9:d1:c9:24:9e:75:34:f1:
                    06:40:ec:60:ee:59:42:68:b3:95:21:5a:d5:dd:4e:
                    db:18:d2:1a:e0:d2:b1:49:b4:2d:56:be:a9:35:0d:
                    da:b1:bd:ac:2e:48:da:c6:76:0c:02:d5:6e:1a:a9:
                    6e:81:bd:f1:75:69:12:da:91:c6:0f:cd:7c:8e:0e:
                    1a:f6:f4:f2:5d:23:ce:f4:9c:93:87:ff:5d:64:22:
                    3e:27:2e:5d:6e:3d:48:10:d7:6e:af:99:4d:0e:d1:
                    97:28:77:f2:76:04:0e:81:42:2e:4e:c7:18:59:ea:
                    47:50:c7:1d:21:72:da:51:d0:f2:78:31:8d:46:37:
                    8e:57:91:e5:18:8f:cf:43:27:30:98:c4:ee:9f:59:
                    2a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BC:79:E0:2A:06:4A:C9:2C:6D:8F:1B:48:79:19:E3:39:AC:3E:A1
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132322e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:9c:f0:65:d4:cc:98:00:ed:70:a4:1e:89:ec:4d:d8:18:1a:
         97:78:e9:00:a3:62:94:98:1a:53:73:f2:16:37:7c:46:0b:33:
         7c:2a:85:4c:fd:58:b4:ba:cb:31:75:74:0d:62:85:4c:77:57:
         45:71:50:15:57:aa:54:48:ed:ca:56:a1:54:be:93:14:f5:46:
         be:e3:fe:3a:43:c0:1d:d4:64:0c:8b:cc:02:af:46:a7:10:0c:
         61:e6:a8:44:60:01:fa:93:a5:89:96:7d:9b:48:56:f4:42:95:
         be:9e:3c:11:6f:dd:31:c1:9f:58:16:0c:06:c1:54:f5:9f:aa:
         64:0d:e1:47:95:b9:43:17:38:61:b1:3f:47:50:9f:3e:52:28:
         53:83:08:ce:29:c8:55:0b:35:7a:94:20:54:fc:d7:48:cd:ba:
         6d:16:44:f3:a2:7d:8a:af:06:9c:d4:a6:90:d8:c4:ff:d6:f3:
         7b:5c:1b:e9:b9:c6:c8:6a:6f:26:0a:fc:c0:60:19:27:21:2a:
         bf:87:c5:6f:ef:0b:2d:cf:6d:78:8c:99:fb:38:04:18:8f:26:
         ce:5c:25:61:b8:af:ed:44:a1:0a:e2:83:4c:11:31:64:3d:2c:
         91:98:6c:10:fa:0c:be:c4:27:c0:2d:b5:18:9f:82:00:ea:af:
         e9:7e:f6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----