Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3232302e302f32342d3234203d3e20323635363230.roa
File:                     3138312e37382e3232302e302f32342d3234203d3e20323635363230.roa (raw, json)
Hash identifier:          nwED/sC86x4wJ4usW/m112j2ldRdtFgM5/Xq5bAKEos=
Subject key identifier:   2D:E7:DB:59:2C:5F:3D:A8:48:C4:D2:3D:F7:14:C7:4E:C1:4E:91:2C
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       AFF020C1943E61C20788388B0086E0E4A49650
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3232302e302f32342d3234203d3e20323635363230.roa
Signing time:             Tue 05 Mar 2024 18:04:57 +0000
ROA not before:           Tue 05 Mar 2024 17:59:57 +0000
ROA not after:            Tue 04 Mar 2025 18:04:57 +0000
asID:                     265620
IP address blocks:        181.78.220.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            af:f0:20:c1:94:3e:61:c2:07:88:38:8b:00:86:e0:e4:a4:96:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:57 2024 GMT
            Not After : Mar  4 18:04:57 2025 GMT
        Subject: CN=2DE7DB592C5F3DA848C4D23DF714C74EC14E912C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:a1:86:74:8d:5a:15:81:80:e4:42:c9:42:
                    3f:d2:96:72:78:47:2b:4a:83:b0:ac:7d:06:a0:d9:
                    07:06:df:58:be:14:16:37:b9:ac:a7:6a:6d:e3:65:
                    ef:b7:64:77:7b:83:bb:81:35:65:27:5d:eb:9e:91:
                    50:b0:3d:7e:b2:25:b7:54:9d:06:ee:60:63:28:be:
                    bc:6e:c5:a2:db:3d:e0:5f:c3:a7:bb:9f:53:20:94:
                    83:f5:93:c6:5c:50:67:e9:7d:33:cc:29:26:13:b2:
                    c5:3d:dd:26:3a:ef:7b:67:9b:26:36:61:2b:ce:37:
                    2c:1d:14:c0:4f:14:13:81:46:ae:19:c5:fd:06:3d:
                    cd:04:c1:ce:4d:a9:5e:ad:46:ee:39:69:af:cd:1e:
                    40:83:8b:ce:bb:e9:d0:bc:4a:53:21:98:96:c5:1d:
                    27:f1:8d:01:0e:a8:37:ba:59:2c:44:2f:f4:4b:fe:
                    b7:7c:bc:e9:00:fa:b4:05:26:ae:6d:63:48:62:4b:
                    af:3e:ea:74:a1:f5:ba:8d:32:97:bc:7f:c4:2d:e8:
                    fd:94:23:4a:d9:48:73:8a:d2:25:a6:bf:8a:1b:d9:
                    84:fc:7b:fa:71:8c:f8:e8:91:e2:af:8e:55:cc:94:
                    cc:3e:fd:ac:19:97:b3:2b:d9:fa:91:37:d7:f7:90:
                    65:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E7:DB:59:2C:5F:3D:A8:48:C4:D2:3D:F7:14:C7:4E:C1:4E:91:2C
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3232302e302f32342d3234203d3e20323635363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:10:36:ee:db:81:7f:27:74:b6:af:52:ee:84:3e:9a:4a:64:
         b3:78:23:21:6a:34:2a:72:e9:43:18:03:63:d2:20:8d:20:ac:
         12:1d:f3:7e:18:46:80:0b:f0:55:87:38:17:81:d0:92:b4:df:
         19:72:33:cb:78:18:a3:a5:c1:a3:d3:c3:1f:82:b8:9a:8d:5d:
         df:43:67:36:06:f6:8d:8d:2d:31:83:df:1c:1e:4b:0a:cd:1d:
         41:a7:da:bf:13:92:fe:d3:c8:71:71:61:b9:32:a9:e6:3b:e6:
         ee:28:0c:02:38:fa:ed:a6:7c:51:76:e5:c8:93:0d:cd:ea:19:
         1e:b8:0d:1e:12:ca:c8:ef:87:2f:65:b2:61:d1:04:39:d2:58:
         25:53:26:fd:92:a7:3c:46:82:82:4f:99:cc:4e:0c:16:86:ee:
         5e:32:eb:14:da:b5:2a:97:e7:04:a3:b5:bd:10:23:9e:5d:11:
         8a:7c:b9:71:2a:0a:d7:32:8e:c8:09:4b:3d:a9:8a:ab:83:36:
         b7:b5:36:04:50:46:fe:eb:fd:64:de:ac:d0:b0:7c:c6:2e:11:
         2d:14:f3:3d:89:f8:c6:9c:06:e6:6c:8d:01:3c:03:69:b6:00:
         ab:40:78:44:48:7e:e6:b1:ce:7a:06:9d:47:21:a5:32:22:8e:
         d8:9f:97:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 23:11:54 2024 by rpki-client on console-fra.rpki-client.org