Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3139332e302f32342d3234203d3e20323732393534.roa
File:                     3138312e37382e3139332e302f32342d3234203d3e20323732393534.roa (raw, json)
Hash identifier:          1lwGzNZAhxyWONv8tja7fipZGy58gNLGGSrmpJzh7to=
Subject key identifier:   B6:72:AE:B8:11:81:FF:CA:41:2E:93:9F:3D:98:C3:9E:EA:9F:5A:09
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       0AFA3A75B595D3438C9534A9A20179EFDA8B294E
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3139332e302f32342d3234203d3e20323732393534.roa
Signing time:             Tue 05 Mar 2024 18:04:46 +0000
ROA not before:           Tue 05 Mar 2024 17:59:46 +0000
ROA not after:            Tue 04 Mar 2025 18:04:46 +0000
asID:                     272954
IP address blocks:        181.78.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:fa:3a:75:b5:95:d3:43:8c:95:34:a9:a2:01:79:ef:da:8b:29:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:46 2024 GMT
            Not After : Mar  4 18:04:46 2025 GMT
        Subject: CN=B672AEB81181FFCA412E939F3D98C39EEA9F5A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c1:13:72:30:86:b5:29:dc:0e:b9:3c:ea:87:
                    d7:73:a3:49:df:b5:66:c5:70:83:9f:bb:b7:0c:5a:
                    0b:f6:bd:c0:bf:1c:e7:34:41:09:bb:fc:5c:3c:cd:
                    05:56:ed:8b:52:9a:c2:49:1c:ea:cc:80:fe:4f:ea:
                    c7:d9:d4:6e:4f:ab:50:cd:d2:4c:54:a4:ba:3d:2c:
                    17:28:62:7e:16:bf:04:f4:47:4d:9a:d8:88:30:5e:
                    92:4b:ea:93:a3:71:f9:c1:dc:e2:dd:b6:3c:bb:55:
                    41:5b:26:2c:16:3f:43:b7:8c:f9:b0:58:9d:5d:74:
                    72:f0:e8:8e:50:ae:6a:31:df:13:a9:99:f1:e8:44:
                    d8:ee:cf:4c:f7:1d:6c:bd:7e:fa:6f:27:14:65:e7:
                    c2:b2:65:6e:9b:41:c4:26:f8:1d:ed:18:1d:fa:cf:
                    0f:5d:8c:a7:c8:cc:e8:43:f4:58:7b:e6:3c:12:aa:
                    7b:7f:45:f7:8f:9e:de:7c:92:e1:e6:db:80:08:6c:
                    46:e8:b2:2b:82:e4:d6:7c:10:36:60:45:d6:d3:c6:
                    56:78:6d:5c:a8:e0:1c:65:04:0b:10:c9:6a:82:fa:
                    0b:2b:3e:ca:f2:60:06:d0:93:36:29:09:59:b2:17:
                    2c:57:06:37:02:0d:ba:20:04:4b:d5:b2:7e:05:0f:
                    07:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:72:AE:B8:11:81:FF:CA:41:2E:93:9F:3D:98:C3:9E:EA:9F:5A:09
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3139332e302f32342d3234203d3e20323732393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:0c:49:80:59:5a:74:2f:09:90:64:c9:ea:c0:1d:c2:c9:37:
         b0:2c:5b:2c:55:4b:9c:f1:61:2e:c5:12:73:af:e6:9d:14:ea:
         7a:eb:2f:ff:c7:6c:b1:63:a6:99:03:c3:de:d4:47:7c:f2:78:
         20:59:aa:36:c9:71:2e:a7:49:a1:76:c0:aa:f9:55:66:9e:c0:
         be:5b:c0:d3:11:4a:bf:cd:68:f9:dd:18:b8:77:e8:2c:8a:79:
         83:ed:27:2c:10:a4:25:4d:cc:a4:3c:9c:4f:eb:27:32:85:d1:
         b3:f1:5e:1c:b3:f2:f7:2e:ed:96:69:38:a8:00:85:a1:6f:6b:
         d6:f5:82:a7:8a:df:7f:d2:e8:cb:ea:ba:7c:d6:a0:53:53:53:
         80:70:d0:20:d3:b9:48:8f:f0:f9:ba:e0:0e:fa:6c:a4:d4:b3:
         6e:e2:be:2b:d7:5a:c1:90:a6:b1:3d:af:75:c7:1a:01:62:56:
         08:08:af:76:b7:0a:b7:b7:10:4b:57:ed:f0:15:a7:79:80:53:
         02:79:d6:f0:05:2c:80:d5:c1:2b:7d:38:d9:d2:15:42:53:81:
         98:72:c2:e6:d0:47:fa:9d:9c:7b:12:4b:95:5d:4a:2c:80:10:
         29:b2:85:5a:eb:48:c6:e1:f5:d7:03:b1:a8:eb:75:6d:d0:cc:
         0e:b5:af:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 23:11:54 2024 by rpki-client on console-fra.rpki-client.org