Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3231392e302f32342d3234203d3e203532343638.roa
File:                     3138312e37382e3231392e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          7icmvp0Wj1IDUZrMQgoIDZWgDv2DfM+ynrdGOlk9Mhk=
Subject key identifier:   5C:22:50:95:57:69:44:5B:74:43:F7:4F:03:B0:64:12:0F:A3:E3:5A
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       7CBB21B9E9954C57BB2982DDC2932E852AC3E7AF
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3231392e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:49 +0000
ROA not before:           Tue 05 Mar 2024 17:59:49 +0000
ROA not after:            Tue 04 Mar 2025 18:04:49 +0000
asID:                     52468
IP address blocks:        181.78.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bb:21:b9:e9:95:4c:57:bb:29:82:dd:c2:93:2e:85:2a:c3:e7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:49 2024 GMT
            Not After : Mar  4 18:04:49 2025 GMT
        Subject: CN=5C2250955769445B7443F74F03B064120FA3E35A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ea:12:83:7d:ce:b1:17:ed:06:12:cd:80:d2:
                    83:45:68:53:eb:d0:df:ae:93:b4:ac:fe:9b:0c:d5:
                    79:82:27:ee:8b:92:52:20:fe:05:25:ab:f0:c8:b2:
                    82:26:2b:d2:51:3e:35:c4:fe:94:ea:bb:79:91:4b:
                    7e:86:cc:fc:08:9d:4c:5e:36:9b:94:43:42:30:93:
                    55:c1:a9:1d:c0:f1:a9:c0:81:9e:16:30:e3:73:87:
                    c6:1b:90:0e:d2:3b:23:e4:ed:99:fc:7c:ff:d7:3d:
                    3e:82:a8:23:d4:ad:7c:66:fb:3d:40:4a:97:2e:db:
                    7e:28:47:af:c1:80:10:cc:57:4c:4a:a3:c9:d0:81:
                    90:7f:57:6b:b9:e8:1e:cd:66:ec:71:cc:62:45:81:
                    80:ef:93:62:21:b8:96:d2:4a:c1:96:d7:44:f1:f7:
                    23:49:c4:de:27:0c:47:f3:3b:ba:98:88:1a:33:ed:
                    9d:26:52:59:9c:23:48:a8:63:89:47:26:cb:89:a8:
                    97:27:c4:20:eb:a8:17:e5:cd:8f:4a:2b:bf:b6:40:
                    15:b6:90:f7:db:a0:67:5d:0d:cf:35:0f:e8:8c:dc:
                    e2:2f:d7:dc:56:9c:cb:36:12:c5:0c:d7:4d:92:c9:
                    8c:8f:e4:78:61:53:00:9f:96:47:74:0c:69:80:21:
                    db:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:22:50:95:57:69:44:5B:74:43:F7:4F:03:B0:64:12:0F:A3:E3:5A
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3231392e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:90:2f:fa:77:96:9e:d1:e7:d3:1a:90:11:b6:4c:b4:3c:49:
         9b:19:f3:3e:1f:eb:02:0a:e2:88:05:75:ce:d8:62:e9:6d:ce:
         5d:5c:38:70:97:cd:99:65:c3:75:45:cb:06:1d:63:fa:3d:ae:
         6e:35:e0:36:bf:16:26:75:93:8a:3b:35:f2:f2:6b:19:dc:50:
         87:74:0d:5a:9f:7f:a8:0e:bf:d8:50:91:00:b1:db:af:8a:39:
         1e:48:60:c3:1f:c5:36:a6:12:b1:c8:58:cf:59:fe:59:04:7a:
         aa:ed:1d:7a:e2:a8:6e:19:af:9b:9d:85:9c:91:20:96:d8:a4:
         7c:c4:cb:56:da:3d:d0:2a:2c:aa:2a:b9:ae:dc:07:ff:27:36:
         3b:2d:7e:6c:3a:7f:d0:c6:20:93:94:39:fa:55:6d:d7:04:e0:
         f7:8a:e5:0c:19:4d:af:18:7b:52:40:ea:d0:20:90:ff:87:0d:
         17:0f:46:91:43:46:27:c7:6b:d9:02:7e:29:e9:91:31:92:e6:
         ca:29:e8:3e:d8:66:c0:d5:48:a1:66:ab:0d:32:5d:30:ff:ad:
         67:9f:6f:2f:3b:5c:29:4d:8f:7b:27:0f:94:23:d3:c0:62:1e:
         9d:9c:3b:8f:4c:00:53:7b:4e:5b:ce:0a:67:f4:bf:d0:62:ad:
         d7:ba:6c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----