Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e36342e302f31392d3139203d3e203138373437.roa
File:                     3138312e37382e36342e302f31392d3139203d3e203138373437.roa (raw, json)
Hash identifier:          evA61RDZ9bgDYYd2HSZXJvgFZauIo8ughXwG1JEfSLY=
Subject key identifier:   B0:88:52:F5:2B:FB:DE:09:EF:DF:DD:B7:DE:10:21:70:44:40:B5:8C
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       5E64F5076DB387F5EEAA9DB4AF34764DAF50AB5A
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e36342e302f31392d3139203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 18:04:56 +0000
ROA not before:           Tue 05 Mar 2024 17:59:56 +0000
ROA not after:            Tue 04 Mar 2025 18:04:56 +0000
asID:                     18747
IP address blocks:        181.78.64.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:64:f5:07:6d:b3:87:f5:ee:aa:9d:b4:af:34:76:4d:af:50:ab:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:56 2024 GMT
            Not After : Mar  4 18:04:56 2025 GMT
        Subject: CN=B08852F52BFBDE09EFDFDDB7DE1021704440B58C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:e8:67:22:eb:ea:2b:2b:04:6d:d3:3a:97:
                    df:86:bb:6a:ae:12:e1:95:b1:3f:49:66:53:6c:3a:
                    30:fe:2a:f3:7a:ae:7f:c1:f9:d6:57:df:60:e6:90:
                    0a:d4:1e:85:60:5c:6c:5c:64:60:6a:f9:af:52:5e:
                    ec:80:aa:a3:22:fa:8c:69:fb:42:c7:5d:44:c9:92:
                    a7:c2:4c:9d:75:03:2c:b4:73:52:31:a3:19:58:ac:
                    f4:3a:2e:9b:5a:3b:16:42:07:3a:a2:3f:de:16:76:
                    54:bf:e0:d0:9c:1b:e5:29:a5:77:ba:7c:ce:6c:f5:
                    96:31:b1:51:e7:9e:93:74:7a:cd:b5:0f:2a:c0:17:
                    8b:cf:72:5b:45:92:8a:76:78:84:26:29:b6:74:d7:
                    c3:33:97:1d:e5:58:9b:b3:e9:a9:54:91:86:a8:dd:
                    5d:aa:d3:82:71:e7:bc:ba:c9:57:08:19:8b:f6:ad:
                    65:f9:76:65:89:c8:c4:e6:91:3f:9e:c0:63:a5:dd:
                    43:c3:7b:83:cc:9c:f6:28:0c:c8:63:4e:8f:2e:5e:
                    bd:67:10:0a:c8:da:16:05:56:2b:2b:dc:66:00:9e:
                    f4:37:c7:50:9d:e1:15:36:47:75:4f:79:0e:47:94:
                    90:e8:e6:9e:db:3a:5f:f5:5e:3a:b9:6b:92:a3:0a:
                    f7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:88:52:F5:2B:FB:DE:09:EF:DF:DD:B7:DE:10:21:70:44:40:B5:8C
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e36342e302f31392d3139203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         50:c1:72:02:f5:4e:ea:00:19:9d:06:cd:5c:24:a2:fd:3a:6a:
         2f:b6:25:47:37:e9:27:3e:88:e3:76:81:01:22:00:fe:04:e7:
         8c:c4:13:05:e0:94:51:62:e3:49:79:a2:6a:30:10:57:60:91:
         b9:e1:07:f1:25:b9:87:4f:59:b6:60:13:bf:83:51:99:5a:9a:
         b2:b5:9c:ab:73:b7:ed:6b:8c:59:7c:9f:92:98:2b:f0:62:fe:
         4e:aa:e9:e4:4f:3d:da:ca:4a:fa:47:dc:bb:7e:3b:01:21:19:
         eb:59:d5:fa:c6:bb:69:53:1e:97:c7:96:5d:99:1b:d8:d2:a5:
         7b:db:13:6a:a8:4d:ea:25:bb:38:0c:83:22:b1:15:fb:76:cf:
         c8:32:c4:cd:87:ca:6d:32:82:07:60:b6:1a:07:85:11:db:a1:
         bc:8a:8f:d6:fb:37:db:a6:85:9d:50:e4:a9:01:93:b7:89:da:
         b4:5a:d5:ae:e6:f2:1a:b5:b9:44:76:4f:dc:cd:c2:00:e5:1e:
         37:98:f9:53:c5:86:62:ab:c6:50:ac:5a:f5:e8:53:ea:b1:25:
         12:c3:dc:ee:b9:ae:06:60:57:80:11:fd:04:c5:67:5a:61:53:
         2b:c5:2e:04:cb:ef:f0:65:fe:8c:55:e8:86:26:3b:7e:4a:1f:
         02:27:34:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----