Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132332e302f32342d3234203d3e203532343638.roa
File:                     3138312e37382e3132332e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          RleCU7cZtSYRwMgv78eW96xAZy+yq2oKKHMevLTdt2w=
Subject key identifier:   4B:82:4C:EC:AA:07:5A:EC:7D:B6:E5:2E:8C:BE:5C:53:CD:C6:4F:AD
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       574EFAD4475D447A25B4C35D39D1B6357547C8A4
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132332e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:33 +0000
ROA not before:           Tue 05 Mar 2024 17:59:33 +0000
ROA not after:            Tue 04 Mar 2025 18:04:33 +0000
asID:                     52468
IP address blocks:        181.78.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4e:fa:d4:47:5d:44:7a:25:b4:c3:5d:39:d1:b6:35:75:47:c8:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:33 2024 GMT
            Not After : Mar  4 18:04:33 2025 GMT
        Subject: CN=4B824CECAA075AEC7DB6E52E8CBE5C53CDC64FAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:2f:e0:77:fe:70:42:0a:c2:74:1f:f4:f6:
                    15:0c:21:e7:2a:94:df:79:bf:82:2f:4d:17:6e:16:
                    70:9f:0c:d4:98:18:a8:03:2e:61:e3:d3:08:17:6e:
                    1d:f6:71:f6:58:19:97:2f:81:cc:9c:fc:34:c7:9e:
                    20:65:c0:fd:6c:43:2a:2f:32:73:9e:ad:0a:39:49:
                    1b:d0:63:dd:3c:40:f9:8b:42:d7:b6:33:75:66:e6:
                    c2:f6:7e:90:95:67:49:9d:de:91:03:d7:c9:77:0b:
                    cc:eb:3d:b4:df:e4:a9:39:1b:b2:2b:05:98:d1:d3:
                    2c:bc:c3:8a:0a:02:b2:d1:cc:d8:ab:93:dc:7b:b9:
                    46:6b:c5:92:90:8f:26:e1:36:2c:8d:9c:83:a0:6e:
                    ca:9d:9f:30:41:07:ab:8c:09:da:14:48:07:b9:42:
                    19:bf:01:01:32:83:af:85:11:53:86:15:e8:e5:ff:
                    01:a1:ee:ca:6a:2e:f1:4c:8e:de:e1:2b:1b:21:5b:
                    8f:55:cb:d1:99:26:ba:75:58:f9:a0:70:10:7e:32:
                    1e:bc:d1:23:5b:45:1e:fa:5a:ca:cb:f1:04:03:f3:
                    8e:9c:ec:22:95:ce:d1:a7:84:70:1e:ca:c3:03:45:
                    b7:5f:d7:66:be:c7:11:ab:49:b0:5a:14:0e:91:fb:
                    0c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:82:4C:EC:AA:07:5A:EC:7D:B6:E5:2E:8C:BE:5C:53:CD:C6:4F:AD
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132332e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:e9:ff:f9:8f:a2:b4:fe:52:01:c9:09:2b:8f:00:39:e5:6d:
         79:ba:96:4e:98:ca:cb:ee:73:d1:b8:81:58:68:32:95:25:12:
         82:9e:1f:b5:0c:e4:f1:3e:12:5a:fc:e8:47:2b:69:69:cb:c7:
         42:15:cf:d4:2c:4b:ca:72:63:78:1f:5e:87:63:df:e3:14:74:
         9c:7c:d8:df:5d:ff:48:51:37:c5:f1:08:46:e9:c4:30:b8:96:
         bb:d2:c5:30:64:1c:33:51:70:3b:c6:1f:13:50:7c:0c:e2:34:
         53:70:5d:b2:f6:28:33:c2:98:c6:37:1a:f4:24:66:35:15:d5:
         66:e4:9e:88:64:1f:a8:42:1e:4c:67:cd:f8:5d:d3:d5:5a:38:
         e5:b1:48:ab:ca:d0:a8:8c:06:b0:52:94:be:7a:bb:1b:7d:c9:
         70:57:a5:1d:7f:1a:e5:cd:b3:bd:05:55:d0:d5:ec:87:a2:2d:
         5d:16:51:ed:79:06:84:6f:12:0c:55:06:dc:b3:a4:b1:e7:92:
         f0:24:fd:d8:d2:21:f5:7f:57:06:df:09:7c:0b:79:32:ed:ff:
         42:d9:fc:84:80:38:b1:d0:04:ef:36:ad:b3:c1:79:4a:a7:83:
         d9:d3:02:82:98:11:8d:97:2b:eb:8c:10:f7:2c:94:0b:05:32:
         e0:ea:8b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----