Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e36342e302f31382d3234203d3e203138373437.roa
File:                     3138312e37382e36342e302f31382d3234203d3e203138373437.roa (raw, json)
Hash identifier:          iJxf5868Z8u3iIAKBPgGovIIuSXGD33452achw8URAE=
Subject key identifier:   07:D4:95:5A:DC:A0:AA:E3:DB:21:04:5F:57:0C:D7:E6:D9:C8:63:63
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       1EBD4ED07D39BA631358DE947AB61D41EF4E2F02
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e36342e302f31382d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 18:04:53 +0000
ROA not before:           Tue 05 Mar 2024 17:59:53 +0000
ROA not after:            Tue 04 Mar 2025 18:04:53 +0000
asID:                     18747
IP address blocks:        181.78.64.0/18 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bd:4e:d0:7d:39:ba:63:13:58:de:94:7a:b6:1d:41:ef:4e:2f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:53 2024 GMT
            Not After : Mar  4 18:04:53 2025 GMT
        Subject: CN=07D4955ADCA0AAE3DB21045F570CD7E6D9C86363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:ff:cf:46:e0:ac:a2:95:f3:4f:17:d6:c8:
                    3b:fe:53:43:8d:6f:b2:e2:88:73:1c:4e:17:e5:3c:
                    91:d6:07:3d:83:9f:ba:57:33:3e:7d:55:92:31:ca:
                    73:5e:58:7a:5a:44:78:24:cc:10:8f:1d:c1:bb:a8:
                    2a:1d:34:82:82:93:e7:96:86:fe:29:5e:fb:99:3d:
                    52:6b:49:af:d8:bf:5a:2e:6a:22:9a:97:69:f8:4f:
                    01:c7:65:19:1c:11:9a:79:1e:14:76:a7:a9:3e:0c:
                    01:d8:9d:1a:87:92:fd:57:ac:97:62:c3:40:f1:51:
                    16:12:8c:49:b8:bd:4f:09:ef:a5:88:e5:5c:cc:db:
                    0d:75:e9:42:4f:b6:38:ae:04:e2:fe:58:35:1c:f2:
                    66:76:b3:b0:86:e2:5e:23:74:3b:c0:96:fb:ab:8e:
                    75:e8:53:02:9c:c3:18:dd:1d:c1:1e:88:84:36:d8:
                    76:11:e9:b3:b9:07:da:07:1a:6f:55:91:cd:b4:2b:
                    84:8b:98:db:5b:4d:fb:c0:0a:bc:20:d1:8f:a9:e1:
                    c0:de:3d:88:b4:ee:04:de:8b:f5:4f:91:de:fe:84:
                    45:60:06:55:6d:96:d4:2b:95:21:5e:74:9d:2e:46:
                    9a:fc:59:ff:5c:92:4d:e5:b6:b4:9b:47:44:7f:1e:
                    2c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D4:95:5A:DC:A0:AA:E3:DB:21:04:5F:57:0C:D7:E6:D9:C8:63:63
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e36342e302f31382d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4f:ef:40:aa:9a:e1:3d:9d:f2:3b:3f:41:26:ba:b4:3b:df:51:
         87:27:f3:b3:4b:37:53:e3:fc:72:33:22:43:e5:73:d4:99:2d:
         fd:84:4e:eb:90:f0:80:95:44:ee:5d:69:68:50:6d:cb:4e:ee:
         5e:c3:7a:44:35:56:3d:46:a5:0f:8a:5a:79:38:03:1f:7e:90:
         b6:19:f4:9b:e2:c3:3e:c3:9e:17:27:80:c5:49:7d:db:ea:5b:
         eb:ff:5c:07:15:5a:14:54:f0:23:be:05:26:36:b5:b0:15:a3:
         76:99:18:57:58:62:9c:09:d5:df:c2:d4:69:0f:87:c5:18:96:
         a6:ca:25:c4:0a:05:29:4d:40:f2:5f:9f:80:9b:4f:91:32:fa:
         3f:39:a0:4d:7a:09:c3:23:e9:69:07:3a:ac:a3:a7:d9:dc:f8:
         13:6e:df:04:f5:6e:13:97:24:af:f3:5e:12:8b:4a:9a:ba:9d:
         58:f3:94:50:38:fb:6e:25:60:91:2e:22:7a:34:c3:54:0e:0c:
         2b:13:6e:00:f9:d6:7f:f6:41:8a:6b:94:73:7d:3e:37:13:69:
         56:b6:98:17:2c:63:e3:18:4c:53:d8:7f:00:28:1b:97:ad:0f:
         74:44:34:10:e8:ff:96:2d:1e:c8:28:a4:14:f6:d2:6e:e9:05:
         9d:32:b3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----