Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132382e302f31392d3139203d3e203138373437.roa
File:                     3138312e37382e3132382e302f31392d3139203d3e203138373437.roa (raw, json)
Hash identifier:          hwqXI2vQPrbnNNVvWcuWk+IZ0v4lAm8zG79Om7RlxC4=
Subject key identifier:   B6:A8:A8:0F:EE:52:99:9B:A6:DF:71:9B:08:64:7F:18:F8:F0:16:31
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       3D101B3C5EEC2971F0857EAD38ABF598B321F51D
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132382e302f31392d3139203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 18:04:51 +0000
ROA not before:           Tue 05 Mar 2024 17:59:51 +0000
ROA not after:            Tue 04 Mar 2025 18:04:51 +0000
asID:                     18747
IP address blocks:        181.78.128.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:10:1b:3c:5e:ec:29:71:f0:85:7e:ad:38:ab:f5:98:b3:21:f5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:51 2024 GMT
            Not After : Mar  4 18:04:51 2025 GMT
        Subject: CN=B6A8A80FEE52999BA6DF719B08647F18F8F01631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6d:b9:55:68:dc:b5:13:59:a7:08:8f:92:91:
                    1e:00:82:23:c3:04:95:ee:e5:17:30:c5:e9:97:55:
                    c6:2c:7e:2c:82:5c:ab:d5:40:d3:e9:e0:35:24:9a:
                    a8:77:bf:f5:e1:27:70:45:35:42:c4:d4:f3:fd:a1:
                    6f:45:76:a5:d0:ef:3d:6c:e5:0b:0c:c1:28:5f:53:
                    27:3e:7f:86:81:da:87:e7:83:58:56:f3:34:84:5f:
                    1e:73:ea:91:3d:19:07:b7:89:74:4f:0d:e1:0a:79:
                    e2:e2:ee:9d:10:54:13:27:8d:a7:96:dd:54:6c:0f:
                    68:a6:7b:48:9c:be:aa:40:58:a5:73:f9:00:64:4a:
                    22:c9:c0:3d:4e:9d:78:c6:a8:d3:20:1c:72:56:1a:
                    e6:53:f8:17:60:78:16:3d:a3:7d:a2:8a:de:60:ac:
                    4d:f2:50:72:97:48:1a:4f:54:29:59:5d:fc:9a:92:
                    9e:bc:32:25:8c:82:4d:e9:f5:82:4d:2d:ec:2b:dd:
                    97:18:da:ad:29:64:91:c7:3f:eb:c7:c8:63:7e:ba:
                    8c:78:62:94:2a:dc:27:16:3d:bd:7a:de:ad:e0:1c:
                    54:f0:9a:d5:3f:6f:bd:78:d5:09:3b:44:4a:a3:33:
                    c6:7a:02:ba:b6:d7:47:3e:d5:22:76:d2:9e:ca:40:
                    4f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A8:A8:0F:EE:52:99:9B:A6:DF:71:9B:08:64:7F:18:F8:F0:16:31
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132382e302f31392d3139203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7d:72:c3:2c:1c:a7:bc:a0:e7:f9:ac:3a:fd:75:99:7c:8f:1a:
         2a:f5:ba:62:f0:27:1f:d5:34:34:73:24:1d:b5:0a:13:0d:c4:
         d7:d5:86:4f:14:c7:1a:10:77:0d:1b:ed:16:2d:6f:a2:bd:02:
         21:5d:b6:62:9b:2f:c1:ae:aa:8e:5d:94:14:29:29:8a:00:94:
         6d:ed:ec:c4:3f:e7:56:38:85:58:03:90:af:7f:8a:4f:a1:4c:
         5f:25:5f:f7:97:1e:cd:53:eb:87:0b:81:51:44:19:b9:67:40:
         a9:36:cf:ee:90:26:56:88:de:83:a3:a3:8c:35:ab:69:b0:cc:
         69:e4:10:44:43:e6:2a:f9:ca:bc:b1:6a:85:17:26:17:d0:fc:
         30:e0:b0:cf:7a:e0:2e:04:e9:57:50:cd:d5:59:e1:6a:80:fa:
         3b:fd:95:f2:ed:9d:4a:b6:43:08:8b:fc:ad:85:a1:39:9f:59:
         36:2b:b7:dc:ca:0a:b1:75:f0:f9:25:b3:71:17:25:76:19:15:
         a5:61:1e:ee:34:23:a1:42:57:ba:76:b7:25:32:ca:2f:e9:ee:
         05:da:be:99:09:cd:31:88:17:db:4d:85:a1:0a:ea:2c:e2:19:
         0e:81:ed:1d:eb:21:83:62:49:50:cf:79:35:7f:00:c5:ab:17:
         d0:2d:d4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 23:11:54 2024 by rpki-client on console-fra.rpki-client.org