Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3232322e302f32342d3234203d3e20323635363230.roa
File:                     3138312e37382e3232322e302f32342d3234203d3e20323635363230.roa (raw, json)
Hash identifier:          XYxVO7Hm/IhZpBNoiSOOPj6kYK4E0D9SX6HvzgLLuHY=
Subject key identifier:   01:8E:58:46:54:3D:E1:B5:95:9C:E1:63:1B:29:DD:F3:11:F8:EC:12
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       26F72F98A6998E6D624782228707FB57CC42794A
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3232322e302f32342d3234203d3e20323635363230.roa
Signing time:             Tue 05 Mar 2024 18:04:38 +0000
ROA not before:           Tue 05 Mar 2024 17:59:38 +0000
ROA not after:            Tue 04 Mar 2025 18:04:38 +0000
asID:                     265620
IP address blocks:        181.78.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f7:2f:98:a6:99:8e:6d:62:47:82:22:87:07:fb:57:cc:42:79:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:38 2024 GMT
            Not After : Mar  4 18:04:38 2025 GMT
        Subject: CN=018E5846543DE1B5959CE1631B29DDF311F8EC12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1b:fa:c2:98:a9:e1:81:0c:04:d2:87:2c:21:
                    07:54:e1:0a:96:da:18:86:23:f1:aa:3b:5e:4a:1d:
                    7c:b9:04:aa:9d:5b:7c:a5:f4:54:28:e2:e3:ef:a5:
                    3e:8c:0e:67:99:3c:ba:d1:9e:9f:fd:b2:1f:3c:9c:
                    e2:71:8e:88:be:59:0d:11:00:f1:cf:f4:64:d1:8f:
                    b1:84:ae:5b:17:cc:82:b7:ad:77:51:e3:dc:5e:07:
                    26:54:79:14:cd:eb:ed:41:80:71:39:fb:f9:a3:b3:
                    49:f3:0a:fc:f4:c1:05:be:e3:66:82:5d:aa:15:dc:
                    c8:b7:e1:b3:91:ec:0f:ad:11:f1:6a:b7:8a:f7:44:
                    7f:0c:df:77:63:af:3a:5b:a8:a3:e8:95:4c:5d:6a:
                    b8:17:69:6c:ee:7e:2e:0c:30:fe:e2:4b:85:c3:fe:
                    2e:00:c8:8a:a9:1a:57:fd:8d:62:a7:c2:98:61:c8:
                    4f:85:9a:0b:d7:d3:bc:3d:72:8f:8c:b4:55:db:2f:
                    bd:3d:69:65:f4:82:a0:cc:8b:62:b3:99:47:8f:4b:
                    01:30:dd:db:94:c2:33:29:ed:5b:c4:84:d7:f5:69:
                    4a:1d:65:d3:37:e2:b8:6f:03:13:55:67:ed:76:4b:
                    5a:75:d4:1d:32:67:cb:f7:4f:b8:d0:f2:16:61:16:
                    8f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8E:58:46:54:3D:E1:B5:95:9C:E1:63:1B:29:DD:F3:11:F8:EC:12
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3232322e302f32342d3234203d3e20323635363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:0b:93:a3:52:c5:a1:85:75:dd:fd:08:e2:5e:e4:22:aa:da:
         db:27:a3:1b:77:00:cc:d6:50:60:11:14:e0:1c:7e:ed:0f:e8:
         f1:48:8a:e0:76:69:d1:cf:fb:9c:93:0c:ad:3e:d9:6d:42:1b:
         ff:d4:f0:1c:84:7a:d9:8f:d0:ed:fd:59:63:f8:af:3c:1f:a4:
         47:7e:54:75:df:21:01:5d:6d:6b:93:ea:a2:e1:54:11:66:48:
         64:42:d4:b7:50:ac:ac:84:6a:f5:db:01:d8:91:a7:72:c9:6e:
         c4:44:89:a0:89:31:14:fc:19:25:3c:b0:2a:7e:90:a7:cb:8b:
         da:ec:f7:5e:e9:8e:50:45:e4:33:33:d0:12:4e:87:dc:56:c1:
         8b:04:b1:1c:23:5e:a8:8d:1c:92:bf:06:b7:a8:8c:3e:72:d0:
         fa:fe:74:4e:d2:b1:86:96:72:ba:43:62:38:10:e6:56:c2:19:
         46:cd:09:ba:c9:31:63:4b:ee:b5:0d:f7:e5:74:ea:0b:2a:0a:
         36:94:58:93:92:f5:6d:a7:7f:04:e5:b4:f1:f0:c4:ef:37:c0:
         9b:42:01:ad:cd:d8:0f:3b:97:ce:79:1d:1a:cf:9b:df:bc:8d:
         ee:fa:29:db:11:cb:78:d8:92:ef:fa:b2:f5:08:6d:ef:42:08:
         8c:f7:62:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----