Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e37352e3136302f32392d3239203d3e203532343638.roa
File:                     3138312e37382e37352e3136302f32392d3239203d3e203532343638.roa (raw, json)
Hash identifier:          UoJpGL55xNjBSkteavk8P7j0/FVTypbBN5O9MiVIVVE=
Subject key identifier:   C9:5B:79:9B:DD:27:30:5C:0E:7E:CC:26:35:EC:D1:42:1F:E6:70:23
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       779E38557066487E560D0D98DBAF6A49D8289C37
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e37352e3136302f32392d3239203d3e203532343638.roa
Signing time:             Tue 04 Jun 2024 17:10:00 +0000
ROA not before:           Tue 04 Jun 2024 17:05:00 +0000
ROA not after:            Tue 03 Jun 2025 17:10:00 +0000
asID:                     52468
IP address blocks:        181.78.75.160/29 maxlen: 29

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9e:38:55:70:66:48:7e:56:0d:0d:98:db:af:6a:49:d8:28:9c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Jun  4 17:05:00 2024 GMT
            Not After : Jun  3 17:10:00 2025 GMT
        Subject: CN=C95B799BDD27305C0E7ECC2635ECD1421FE67023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:65:b5:63:e8:ca:aa:39:c9:a8:67:8f:95:d1:
                    ad:9c:d8:8b:e1:06:81:19:90:6b:e9:56:89:bf:8c:
                    e2:2c:d0:b4:06:8f:3e:a7:69:3a:da:ce:8f:9a:52:
                    93:a4:8c:1c:7e:0f:c6:ec:83:6d:ed:14:73:b3:cd:
                    87:21:44:72:37:25:e3:70:42:19:f2:58:fb:26:f6:
                    50:99:a0:29:df:92:16:e0:52:91:de:5a:87:e4:9e:
                    54:44:33:0f:e3:f5:cd:26:ac:f2:47:6f:52:ea:e2:
                    71:37:58:b1:d6:7f:12:0b:36:d5:0d:11:c6:aa:a2:
                    98:78:fc:34:b9:5d:24:1c:b8:14:af:72:56:9b:60:
                    9d:f4:c4:59:c0:b9:fb:67:5e:18:40:1c:e9:b7:74:
                    d1:bc:50:bb:a5:18:5f:11:af:eb:df:1e:57:ad:98:
                    26:0e:1e:19:f7:88:8f:3f:68:24:cf:96:7f:d8:d4:
                    09:9b:e0:58:74:10:d8:d5:b7:ca:75:69:24:b9:e7:
                    85:98:68:ad:88:bf:82:2e:a4:0b:fa:a6:cd:96:31:
                    56:ba:43:90:a8:62:66:64:d0:2e:8a:ed:e8:2d:d3:
                    92:66:ca:10:2e:1b:46:0e:2c:0d:68:51:d8:df:88:
                    66:30:d1:07:10:9c:bf:4e:c4:12:a5:6e:64:33:6e:
                    41:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5B:79:9B:DD:27:30:5C:0E:7E:CC:26:35:EC:D1:42:1F:E6:70:23
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e37352e3136302f32392d3239203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.75.160/29

    Signature Algorithm: sha256WithRSAEncryption
         7a:82:fc:da:05:d4:70:88:ae:f9:4f:f3:d0:7f:ed:23:b2:91:
         54:fe:bc:fc:26:53:87:75:ab:a9:ef:82:db:5e:7d:fe:64:d5:
         80:6e:70:1d:0b:c4:a7:0e:c6:39:b7:f0:40:cc:25:ea:ff:7c:
         cf:05:56:c5:8d:eb:c5:a4:4a:c6:33:1c:f4:5b:d5:fe:20:e6:
         f7:f7:dc:37:d9:5e:01:c6:24:2e:85:7c:5a:52:ec:64:1e:6e:
         04:85:f7:ca:95:0e:c7:62:86:f1:5b:fa:51:e5:bf:d2:46:32:
         04:25:b2:55:d1:eb:82:20:51:06:45:71:9e:c0:f4:c3:72:e4:
         20:c2:aa:92:e2:b6:80:07:92:74:48:62:1d:dd:19:55:52:c5:
         8b:2a:1a:4b:31:ac:e1:0d:3c:a7:ad:0c:6e:76:e5:4a:e0:1a:
         37:5c:0d:ea:ea:16:4b:7f:38:d1:a7:b1:d7:aa:22:76:03:ce:
         2e:5b:0f:d1:06:e7:40:02:4d:75:e7:d6:16:69:4e:ab:de:fc:
         9d:6a:97:b0:d3:08:fd:6a:93:38:32:db:b7:e4:bb:3f:2c:dc:
         72:cb:cf:c6:8c:fb:b6:c5:d5:7e:9a:fc:24:1d:9d:79:18:97:
         ad:af:6e:fe:93:31:3f:36:62:73:b0:cd:b3:c2:e6:0d:f9:16:
         ec:9a:28:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----