Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e39362e302f32332d3234203d3e203532343638.roa
File:                     3138312e37382e39362e302f32332d3234203d3e203532343638.roa (raw, json)
Hash identifier:          2wg2GPklCinchN50P46G1dPsy3tr90GonldllyYQz+Q=
Subject key identifier:   4D:70:CD:D5:43:51:85:C7:85:78:63:14:03:A6:FC:6B:EE:55:D2:1D
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       07F7BB1F507C54EA68F55D927ACF078521827A1D
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e39362e302f32332d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:40 +0000
ROA not before:           Tue 05 Mar 2024 17:59:40 +0000
ROA not after:            Tue 04 Mar 2025 18:04:40 +0000
asID:                     52468
IP address blocks:        181.78.96.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f7:bb:1f:50:7c:54:ea:68:f5:5d:92:7a:cf:07:85:21:82:7a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:40 2024 GMT
            Not After : Mar  4 18:04:40 2025 GMT
        Subject: CN=4D70CDD5435185C78578631403A6FC6BEE55D21D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3c:5b:68:72:f2:e9:2b:a9:6e:9e:8f:66:85:
                    a2:eb:86:60:15:78:83:af:31:33:ef:85:83:e5:6f:
                    b0:f7:b0:97:d1:37:e6:5f:ba:f5:9f:bf:06:bb:36:
                    c6:57:80:9c:66:db:70:11:83:11:fb:26:06:c5:a4:
                    90:b6:b4:bd:99:4f:8d:77:6c:55:de:7b:cc:08:c0:
                    72:c7:f6:7e:f3:c4:c2:b8:60:05:48:b5:82:bb:d3:
                    2a:f9:0e:0d:be:8d:b4:43:d5:f3:4b:be:5f:ca:b1:
                    20:a8:e2:db:c1:d9:8c:b0:eb:3a:48:25:ad:03:82:
                    f8:3b:d3:e2:4b:c7:a8:82:39:6d:15:38:35:39:7d:
                    6b:60:f1:c3:2b:32:4e:a8:8d:1d:38:96:37:4f:f5:
                    2e:0d:fa:24:ab:d0:56:54:95:d8:a4:84:dd:64:b4:
                    fb:64:8a:b4:43:bd:67:3e:91:94:13:6d:60:1a:45:
                    17:d7:a7:a2:93:d7:0f:1f:55:6b:76:f1:c3:e3:65:
                    47:91:de:6d:57:6e:e9:fb:63:12:ea:93:05:a3:96:
                    d3:32:53:b1:9f:4d:3b:f1:f0:c2:45:e5:4b:4a:20:
                    40:20:71:e0:0d:b8:8c:99:fd:94:50:0c:13:ae:af:
                    0d:44:bd:2c:f9:91:fe:23:10:de:41:9d:f0:69:0a:
                    c0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:70:CD:D5:43:51:85:C7:85:78:63:14:03:A6:FC:6B:EE:55:D2:1D
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e39362e302f32332d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:18:61:56:93:86:28:f4:8a:86:e9:ed:57:61:ff:c8:63:c3:
         00:47:10:7a:30:65:a2:6f:46:41:2c:98:2c:59:4b:ee:21:e2:
         16:85:50:ff:40:21:2a:20:e6:51:53:8c:95:48:6c:b6:c0:0c:
         7f:d3:f7:e8:92:49:58:23:40:57:91:78:bc:c0:1e:bc:10:4a:
         cb:03:9e:bd:fa:bf:d3:09:1a:8c:ce:8d:63:82:d8:61:68:a4:
         48:1e:8e:b0:13:b8:d5:6f:31:c2:95:47:00:f0:14:10:82:76:
         10:2b:36:ab:46:d9:35:63:0f:97:d5:e7:f2:63:3e:89:0c:99:
         85:ac:ef:fb:0d:20:95:57:6b:6f:45:1b:d8:91:cb:e6:f5:78:
         42:c0:9a:05:32:fa:8a:04:39:a5:c7:e5:3b:5a:81:a2:fb:3f:
         29:ec:70:0e:92:56:22:3d:39:d5:c9:aa:4f:57:b3:39:04:52:
         a1:7a:39:fb:89:14:a6:f8:ba:05:db:29:5d:e4:3e:1c:5b:13:
         39:f2:4c:35:8c:28:ec:c8:b9:1a:27:00:f3:f6:ef:79:b2:47:
         8e:ee:6b:f4:dc:ba:34:c7:80:f9:41:cf:f6:b4:96:69:7e:47:
         63:14:f2:82:86:4f:68:a5:53:b6:02:53:a5:31:3f:fb:68:e9:
         51:61:55:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 23:11:54 2024 by rpki-client on console-fra.rpki-client.org