Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e302e302f31392d3234203d3e203138373437.roa
File:                     3138312e37392e302e302f31392d3234203d3e203138373437.roa (raw, json)
Hash identifier:          cj9B2pUK9Poval4rub4al2VnBXlHLwksQfmskFYyBdI=
Subject key identifier:   D7:12:88:A4:0F:A2:D9:16:C3:51:AB:C3:D1:9B:FB:C1:30:3E:20:74
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       28DFB86229E7DC0D4F0AC178F424871B21A352D6
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e302e302f31392d3234203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 18:04:28 +0000
ROA not before:           Tue 05 Mar 2024 17:59:28 +0000
ROA not after:            Tue 04 Mar 2025 18:04:28 +0000
asID:                     18747
IP address blocks:        181.79.0.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:df:b8:62:29:e7:dc:0d:4f:0a:c1:78:f4:24:87:1b:21:a3:52:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:28 2024 GMT
            Not After : Mar  4 18:04:28 2025 GMT
        Subject: CN=D71288A40FA2D916C351ABC3D19BFBC1303E2074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ba:27:9b:ee:26:8a:96:97:93:b9:2a:66:80:
                    96:a9:fa:c5:e9:4c:2a:f4:c7:2b:d5:de:07:e2:c8:
                    78:71:3d:9e:4f:69:2b:f9:e1:29:94:c1:7d:13:ab:
                    65:aa:fd:d1:73:e2:29:7f:d0:04:6b:fd:83:91:eb:
                    55:e0:96:03:e7:e3:5d:58:60:c5:24:bd:88:51:d6:
                    7e:3a:e2:3d:d5:62:cd:db:f4:b1:77:45:87:70:60:
                    79:ce:90:0e:f4:a7:2c:6a:aa:46:6d:11:9d:53:32:
                    be:a0:94:b0:dc:9e:d3:bf:8f:63:69:08:c5:29:7e:
                    22:48:1c:87:19:5b:f0:31:b8:f1:4f:bc:84:56:3e:
                    66:2d:fa:5a:77:62:f9:e6:99:b3:65:a2:b5:42:24:
                    fb:e5:6c:f7:8b:1c:62:1d:c1:d8:cb:15:1a:98:ce:
                    79:41:67:f8:75:11:ef:73:a6:b1:22:2b:00:66:3b:
                    45:bd:af:19:f2:56:5d:c0:85:11:21:41:f1:9e:25:
                    a3:60:f0:5e:b9:67:37:7a:2c:6b:18:39:5e:c1:16:
                    d5:74:f3:0c:01:89:fe:31:1e:75:3f:7c:91:1f:b0:
                    1d:3b:97:e2:4e:d1:84:59:bc:2f:9a:66:ec:a8:9f:
                    69:8e:57:93:d1:7c:1d:43:34:74:a7:e1:3b:bf:a5:
                    36:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:12:88:A4:0F:A2:D9:16:C3:51:AB:C3:D1:9B:FB:C1:30:3E:20:74
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e302e302f31392d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         22:c1:41:21:3b:a1:f2:04:bb:21:82:d7:7d:5b:cd:26:e8:cd:
         60:77:61:65:ae:4e:43:fc:69:f6:30:59:fe:e9:ac:4f:df:c1:
         30:03:97:b4:8c:95:58:08:4d:87:7f:95:32:4c:b1:58:96:7d:
         b8:bb:e5:cd:32:1b:02:44:5c:4a:d3:da:d0:6e:56:94:19:2e:
         b9:94:73:a0:7e:15:8f:ed:12:1a:4c:ed:8c:c3:fc:93:e4:73:
         5b:09:94:59:74:e2:96:15:e0:a7:0f:a6:9b:df:ee:00:cb:8b:
         5b:6e:52:4a:a4:0e:d9:e3:1b:2b:a5:4a:3f:60:a8:73:f7:9a:
         f1:28:6b:45:50:93:48:bd:ee:a6:fb:a7:24:77:8c:c3:cf:65:
         2d:0c:6a:c1:47:3c:71:49:40:1f:3d:7a:4a:2c:fb:23:5c:e2:
         fb:13:8e:cb:f5:9a:6a:90:f2:c2:de:25:90:6b:e0:0b:e1:bb:
         0c:c7:5b:ab:47:4c:6b:0b:b0:7f:59:97:01:4e:e7:06:3a:b3:
         d1:6a:b5:3f:57:cf:04:ed:b9:b9:fa:46:f6:ea:93:57:47:79:
         bb:50:bb:76:20:74:13:aa:6b:e1:a0:12:9c:cb:a8:07:71:74:
         3d:0d:2c:48:07:67:eb:cf:09:24:99:19:c2:48:56:dc:39:3c:
         9c:1e:65:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----