Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3232302e302f32322d3234203d3e20323635363230.roa
File:                     3138312e37382e3232302e302f32322d3234203d3e20323635363230.roa (raw, json)
Hash identifier:          /7LzkhdyhORuGtrFh2HmR3wCoyiwM/1Vvz02b6aRB5o=
Subject key identifier:   FD:3F:F4:6E:9F:F8:66:92:8F:43:93:D5:8B:A9:76:FD:3B:EC:B1:19
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       2E2BDFA6303C4E16D88263D580775D8B07F31235
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3232302e302f32322d3234203d3e20323635363230.roa
Signing time:             Tue 05 Mar 2024 18:04:44 +0000
ROA not before:           Tue 05 Mar 2024 17:59:44 +0000
ROA not after:            Tue 04 Mar 2025 18:04:44 +0000
asID:                     265620
IP address blocks:        181.78.220.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2b:df:a6:30:3c:4e:16:d8:82:63:d5:80:77:5d:8b:07:f3:12:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:44 2024 GMT
            Not After : Mar  4 18:04:44 2025 GMT
        Subject: CN=FD3FF46E9FF866928F4393D58BA976FD3BECB119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4d:89:d9:64:13:9f:7c:a1:24:77:11:42:e7:
                    1a:3f:7b:17:c8:10:26:31:0b:4a:34:09:7e:5e:c6:
                    db:be:be:8a:92:e8:87:12:7c:11:e1:95:7d:ac:ad:
                    aa:45:5c:e0:67:f8:ac:fd:22:8c:af:d7:14:2c:f7:
                    ba:d5:a6:1e:98:f7:94:ee:e6:e2:26:c7:0d:a7:c8:
                    1f:4a:81:0c:76:27:ee:fa:a8:55:b8:10:a7:d9:2d:
                    62:1c:0d:a8:a1:7e:81:ca:ca:24:8b:d8:5d:b9:77:
                    00:b7:2c:30:c3:0c:4c:f9:04:d3:fb:b3:06:c2:ad:
                    43:d6:d8:97:1f:1f:b3:a4:7e:b7:e4:58:50:33:c8:
                    9d:6d:29:fd:66:47:e3:d0:67:d9:41:36:ba:1e:be:
                    5a:43:29:5e:ea:01:c9:e7:e0:ed:9e:f6:0a:44:22:
                    5c:92:52:3e:8d:05:8e:eb:91:13:2f:fe:d3:ba:d5:
                    e9:2b:d7:21:4e:1c:60:c8:9a:19:60:ff:32:e4:31:
                    14:07:b0:0d:7b:f2:cf:e3:83:33:f5:03:c8:1e:cd:
                    73:27:b5:d8:9f:a9:c8:f2:06:a4:69:e2:64:b0:81:
                    2f:22:62:71:f3:3a:92:db:b5:a8:7e:6c:f8:1e:b3:
                    6f:1d:f4:1c:94:50:ce:cb:fb:22:8f:e8:41:1d:09:
                    a2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3F:F4:6E:9F:F8:66:92:8F:43:93:D5:8B:A9:76:FD:3B:EC:B1:19
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3232302e302f32322d3234203d3e20323635363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:c0:59:62:04:4d:f1:c7:a0:88:61:f9:98:85:0e:0a:bc:30:
         26:fd:ee:f9:5f:b6:04:e3:91:3f:9f:12:ef:0d:c0:e7:ce:3e:
         09:2d:b8:59:c3:80:88:57:cb:49:ef:d8:26:25:0f:4e:f7:f2:
         34:c6:a5:8e:a5:4c:69:d8:54:59:50:34:a2:8b:ee:33:75:73:
         41:ac:f5:28:d4:c8:4e:cb:43:66:6f:62:bf:a7:94:ae:70:52:
         43:c1:e9:68:83:37:b9:e5:86:84:54:1a:2b:44:f1:a3:a5:16:
         b4:0b:31:e0:22:58:a7:8e:e5:d2:19:fd:67:09:5e:d1:ec:58:
         fd:66:44:48:07:e1:3d:6d:e8:0c:8f:0d:95:d7:fc:13:5f:fd:
         97:01:7d:9d:ec:64:5e:3c:ea:cb:ac:8b:e2:26:a7:4f:61:bd:
         ec:42:29:77:e8:e8:d2:a4:0e:cf:95:ac:41:9f:ec:07:2a:60:
         91:9f:69:b2:01:f0:5e:b1:1f:f5:b8:8e:d4:18:da:44:8d:9c:
         83:f1:54:ac:a6:3f:da:4a:bc:62:12:93:fa:4f:fc:3e:47:0f:
         7f:6c:bd:66:63:ca:94:e2:10:90:57:e4:38:26:4c:f0:b1:fa:
         fc:bd:93:e1:58:a0:c3:8d:1f:75:c4:99:25:79:e4:71:e3:8d:
         fe:f4:83:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 23:11:54 2024 by rpki-client on console-fra.rpki-client.org