Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3136302e302f31392d3234203d3e203138373437.roa
File:                     3138312e37382e3136302e302f31392d3234203d3e203138373437.roa (raw, json)
Hash identifier:          sAe/p9vKWB7aqpnM5SccExP9MpuuGuT8siSKA8mbNo4=
Subject key identifier:   63:1A:91:AF:A6:37:06:90:3D:27:AE:31:80:BF:E7:04:E3:FD:D7:ED
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       6BB701658EEC484151BACFFC7AA2A2B22B807058
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3136302e302f31392d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 18:04:56 +0000
ROA not before:           Tue 05 Mar 2024 17:59:56 +0000
ROA not after:            Tue 04 Mar 2025 18:04:56 +0000
asID:                     18747
IP address blocks:        181.78.160.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b7:01:65:8e:ec:48:41:51:ba:cf:fc:7a:a2:a2:b2:2b:80:70:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:56 2024 GMT
            Not After : Mar  4 18:04:56 2025 GMT
        Subject: CN=631A91AFA63706903D27AE3180BFE704E3FDD7ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:ee:13:3b:a6:b8:1e:67:c5:fb:c4:c2:3c:
                    c1:99:73:1c:0c:40:29:1d:62:d6:bb:aa:83:56:9a:
                    f0:fe:4d:f0:aa:78:b9:c5:e9:24:df:01:23:42:40:
                    3f:64:09:44:fe:38:b9:09:fa:a1:1c:a4:5f:da:56:
                    44:33:80:1f:fe:52:dd:25:a6:92:50:5a:87:22:00:
                    f2:62:c0:03:58:b9:f3:0e:8d:cc:e2:47:f5:93:27:
                    f7:c2:ba:49:8b:0f:c8:86:58:51:98:76:29:6d:5e:
                    7b:70:f6:66:c9:6a:51:ec:8e:f4:1f:ed:fd:bc:1b:
                    20:0c:2a:25:e4:21:c8:1d:c1:89:4f:22:2e:c3:b4:
                    27:da:50:eb:a8:c6:d7:63:9f:22:c6:6f:ed:7c:9a:
                    4e:f6:aa:d7:f5:22:f2:f4:02:48:26:93:32:f4:ef:
                    95:18:14:eb:32:6a:07:1c:54:97:94:4e:45:d5:09:
                    8d:06:92:6b:33:58:fc:ed:b3:42:be:22:88:32:9f:
                    7a:87:3e:68:84:b1:cd:80:ff:fc:93:04:6b:90:a6:
                    23:a3:fc:5a:e3:f7:a6:22:f8:a8:ed:c5:5b:19:dc:
                    b8:9d:68:7d:a2:53:1d:73:01:01:f6:8d:f2:90:5a:
                    b8:84:75:86:48:bf:c3:6d:e4:fa:7b:d6:4a:59:c7:
                    b0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1A:91:AF:A6:37:06:90:3D:27:AE:31:80:BF:E7:04:E3:FD:D7:ED
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3136302e302f31392d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         07:d7:56:d4:f7:dd:2b:ea:65:d2:20:56:a6:de:99:2d:c7:48:
         f6:c3:43:1a:57:8d:14:9f:c0:4b:da:c7:58:43:aa:94:c2:71:
         fb:36:86:57:5b:0c:b8:c4:78:cd:7c:89:d6:18:87:30:cb:88:
         c4:27:0d:19:fb:19:aa:4a:cb:04:b4:f5:01:15:ab:2e:98:bf:
         9f:ab:ed:ed:e4:b1:64:a0:30:76:93:42:1d:26:ae:ee:fd:df:
         6d:82:4b:f5:ac:cd:57:d1:1c:4a:74:31:67:77:21:f9:a2:ea:
         07:59:62:f0:f5:0f:67:8a:c6:be:c4:08:d3:f8:3f:a8:50:77:
         a7:75:f6:2c:4c:e4:1e:11:a1:d8:65:9e:a2:13:0b:e6:d7:7f:
         c8:c6:6c:95:08:7a:55:e1:5e:80:78:20:e1:b4:1a:2b:cb:f8:
         37:b4:e9:00:c2:04:f6:1b:25:80:a2:c1:19:ec:ba:2e:a1:a6:
         08:95:73:99:18:6c:e8:ce:12:ef:ac:a0:4c:df:7e:49:ad:91:
         41:7b:89:9b:50:c9:98:c5:d1:14:7f:c9:0d:6e:a0:2b:00:6b:
         ec:d1:8c:dd:29:4a:d4:da:50:b3:d8:ce:1d:11:75:7c:c2:e5:
         0e:ac:32:5d:06:91:fe:ca:ca:0e:9a:5b:cf:7d:96:74:59:39:
         c5:3d:61:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 23:11:54 2024 by rpki-client on console-fra.rpki-client.org