Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132342e302f32342d3234203d3e203532343638.roa
File:                     3138312e37382e3132342e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          GcRRzunSCT3JtbkOWwBmZIV8HsJ+oM3E5LbdhbV1iNk=
Subject key identifier:   D0:E0:51:52:81:8D:A8:61:8A:65:E9:59:A3:39:B5:C6:8F:9E:9E:AE
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       24C52D6B38B651B5282029CC18F790802C3186F4
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132342e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:55 +0000
ROA not before:           Tue 05 Mar 2024 17:59:55 +0000
ROA not after:            Tue 04 Mar 2025 18:04:55 +0000
asID:                     52468
IP address blocks:        181.78.124.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c5:2d:6b:38:b6:51:b5:28:20:29:cc:18:f7:90:80:2c:31:86:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:55 2024 GMT
            Not After : Mar  4 18:04:55 2025 GMT
        Subject: CN=D0E05152818DA8618A65E959A339B5C68F9E9EAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:70:bf:a7:3f:01:9f:dc:3e:d7:b7:36:f5:92:
                    37:19:48:cb:40:da:37:fc:82:4e:81:6c:c8:89:51:
                    3f:35:c4:ce:cc:bf:44:ac:58:96:75:60:a4:13:74:
                    02:41:07:de:c0:48:0f:62:c9:85:24:a6:49:ce:92:
                    81:d6:7b:95:31:80:b4:1c:fd:dd:70:13:24:1d:f4:
                    6d:1b:72:96:2c:b9:f1:19:98:8a:89:a0:cb:c9:c7:
                    8e:2f:9b:6d:20:9f:d6:e4:4e:f7:2b:71:24:09:35:
                    f9:b7:b6:04:68:9d:24:cb:3b:ae:81:af:85:19:0d:
                    5d:b5:94:76:2d:a5:7a:ae:1a:86:8c:d9:58:c9:3f:
                    ab:0f:29:eb:8f:c1:2b:d5:9d:83:39:2d:c2:af:f3:
                    84:e5:b8:c6:a5:f7:dc:18:ea:78:bb:eb:c4:bc:ff:
                    c5:6c:dd:ab:fb:2d:be:35:52:9e:9c:46:45:2c:81:
                    09:07:1f:af:0c:b2:85:67:7d:2c:d8:3d:18:b6:15:
                    d0:8d:c9:f5:db:7e:2f:1a:5e:c2:8a:9b:2f:4b:18:
                    a5:7b:7a:27:58:95:db:31:88:b4:2d:d0:2c:38:54:
                    25:00:fc:83:1b:b3:9c:05:2c:28:3d:d4:da:89:be:
                    a9:4d:a8:7c:ef:a2:98:7e:5c:2c:f7:7a:db:a6:28:
                    01:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E0:51:52:81:8D:A8:61:8A:65:E9:59:A3:39:B5:C6:8F:9E:9E:AE
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132342e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:8a:24:fa:bb:31:b1:77:5e:53:2d:93:af:5a:ff:25:2a:c3:
         73:d0:ec:d0:31:75:3c:83:cb:db:3d:a2:ca:86:e0:42:f8:92:
         72:bd:df:ce:6f:96:23:6e:90:d0:8a:3d:1d:cd:fb:14:4d:61:
         93:07:55:7c:40:4d:6a:b2:74:38:67:96:e8:95:bb:9a:6b:02:
         8e:70:36:35:2a:ec:bb:db:60:b0:c6:24:57:41:5b:84:ad:9f:
         c6:d4:31:94:73:28:b5:78:6f:fb:65:70:db:3e:51:a6:13:36:
         c2:b2:6d:13:ef:ad:0d:90:36:cc:1f:d1:72:a2:c3:cc:ef:56:
         12:8c:c5:2d:48:4f:84:81:2a:49:09:af:55:8b:63:dd:f2:a5:
         c9:3f:84:f7:5e:58:7a:4c:31:71:5e:90:66:a7:7a:2a:b0:41:
         5c:14:30:7a:50:ed:bd:29:a2:93:f9:61:ec:97:8f:36:9c:f7:
         36:0d:da:e0:ad:2a:9f:09:b1:be:33:c9:01:a1:c4:6c:d9:ad:
         d3:1f:b3:e9:f8:de:6d:87:4f:c6:82:c9:ee:0b:dd:21:65:68:
         ee:ca:eb:0d:b5:36:47:d3:f5:c0:20:0d:46:3a:c0:eb:44:75:
         3f:88:5a:e5:15:c8:a3:d6:1a:d3:25:2c:92:f0:27:ef:2b:12:
         8e:47:4c:bc
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJMUtazi2UbUoICnMGPeQgCwxhvQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlEOTIzQTI1MjdENzhDQkNBMUJDMkI2QjE1REFDMEYx
RjZDN0U1MDAeFw0yNDAzMDUxNzU5NTVaFw0yNTAzMDQxODA0NTVaMDMxMTAvBgNV
BAMTKEQwRTA1MTUyODE4REE4NjE4QTY1RTk1OUEzMzlCNUM2OEY5RTlFQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVcL+nPwGf3D7Xtzb1kjcZSMtA
2jf8gk6BbMiJUT81xM7Mv0SsWJZ1YKQTdAJBB97ASA9iyYUkpknOkoHWe5UxgLQc
/d1wEyQd9G0bcpYsufEZmIqJoMvJx44vm20gn9bkTvcrcSQJNfm3tgRonSTLO66B
r4UZDV21lHYtpXquGoaM2VjJP6sPKeuPwSvVnYM5LcKv84TluMal99wY6ni768S8
/8Vs3av7Lb41Up6cRkUsgQkHH68MsoVnfSzYPRi2FdCNyfXbfi8aXsKKmy9LGKV7
eidYldsxiLQt0Cw4VCUA/IMbs5wFLCg91NqJvqlNqHzvoph+XCz3etumKAEnAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU0OBRUoGNqGGKZelZozm1xo+enq4wHwYDVR0j
BBgwFoAUmdkjolJ9eMvKG8K2sV2sDx9sflAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQUJERjQwOTVGRThCMjI4ODJEMjBCMTZEQjdEMkJGRDM4
MUMwRjlFNjJDNkVCNjU5NDQ3RDQ0QkU3RTFDQkMyLzAvOTlEOTIzQTI1MjdENzhD
QkNBMUJDMkI2QjE1REFDMEYxRjZDN0U1MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUQ5MjNBMjUyN0Q3OENCQ0Ex
QkMyQjZCMTVEQUMwRjFGNkM3RTUwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUFCREY0MDk1RkU4QjIyODgyRDIwQjE2REI3RDJCRkQzODFDMEY5RTYy
QzZFQjY1OTQ0N0Q0NEJFN0UxQ0JDMi8wLzMxMzgzMTJlMzczODJlMzEzMjM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALVOfDAN
BgkqhkiG9w0BAQsFAAOCAQEAh4ok+rsxsXdeUy2Tr1r/JSrDc9Ds0DF1PIPL2z2i
yobgQviScr3fzm+WI26Q0Io9Hc37FE1hkwdVfEBNarJ0OGeW6JW7mmsCjnA2NSrs
u9tgsMYkV0FbhK2fxtQxlHMotXhv+2Vw2z5RphM2wrJtE++tDZA2zB/RcqLDzO9W
EozFLUhPhIEqSQmvVYtj3fKlyT+E915YekwxcV6QZqd6KrBBXBQwelDtvSmik/lh
7JePNpz3Ng3a4K0qnwmxvjPJAaHEbNmt0x+z6fjebYdPxoLJ7gvdIWVo7srrDbU2
R9P1wCANRjrA60R1P4ha5RXIo9Ya0yUskvAn7ysSjkdMvA==
-----END CERTIFICATE-----