Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3139322e302f32342d3234203d3e203532343638.roa
File:                     3138312e37392e3139322e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          kHI0JNXI3CiSO9hSGL7zSll/SgU2AYQ7T174Wmz7br0=
Subject key identifier:   08:54:70:47:CF:FF:A6:26:E8:BB:06:28:8B:FC:37:F3:DD:3D:6B:21
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       432300FC91876F94EFE20751725588060ED30C40
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3139322e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 16 Apr 2024 22:10:00 +0000
ROA not before:           Tue 16 Apr 2024 22:05:00 +0000
ROA not after:            Tue 15 Apr 2025 22:10:00 +0000
asID:                     52468
IP address blocks:        181.79.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:23:00:fc:91:87:6f:94:ef:e2:07:51:72:55:88:06:0e:d3:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Apr 16 22:05:00 2024 GMT
            Not After : Apr 15 22:10:00 2025 GMT
        Subject: CN=08547047CFFFA626E8BB06288BFC37F3DD3D6B21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:35:f9:83:65:ac:9d:a3:24:b8:bb:cb:68:1a:
                    59:fa:4c:23:60:cb:d4:88:4b:b4:3a:49:6b:97:59:
                    6a:70:77:dc:18:78:0c:44:b1:78:c9:a5:8e:7d:77:
                    3a:7b:d4:ba:00:44:14:80:0b:7f:0c:c0:46:b3:d5:
                    cb:1e:d7:f7:13:71:d6:c1:3d:6e:5c:29:54:8a:af:
                    47:48:2e:10:37:e8:d9:a7:a3:10:2e:85:5b:93:dd:
                    f3:1b:66:03:e1:9a:42:52:24:45:57:88:5a:11:fa:
                    23:a7:e1:1a:2a:b3:3f:4d:91:b9:56:a3:e7:67:a2:
                    53:4f:31:f0:64:55:78:ee:88:c4:de:57:e4:9d:e8:
                    f8:49:7d:38:9a:d1:69:60:1f:a6:22:2e:1c:b3:92:
                    a2:76:0d:c9:09:26:c3:f6:c4:7e:98:78:e5:7a:bc:
                    68:81:68:4f:1e:6e:c3:e0:03:a7:fa:59:4e:df:7f:
                    86:60:5f:9b:6f:e1:80:3b:19:f1:64:9a:52:c9:c6:
                    00:05:84:5b:7c:10:ec:ac:04:61:84:ff:66:f9:27:
                    9f:12:3c:8c:6d:23:df:1b:a8:2a:36:6d:e2:7b:46:
                    98:50:91:64:a2:ce:ac:65:bc:ca:53:5e:d5:f5:0a:
                    46:cf:59:86:ac:8b:39:e4:c1:85:48:67:dc:27:38:
                    75:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:54:70:47:CF:FF:A6:26:E8:BB:06:28:8B:FC:37:F3:DD:3D:6B:21
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3139322e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:54:84:1c:db:7c:8a:e5:ed:15:dc:7e:be:48:ba:f9:6f:d9:
         6f:68:d1:c0:72:14:15:dc:dd:2f:a2:6d:0e:86:5f:9f:2e:5f:
         b0:17:6c:62:59:55:48:60:6a:ad:2d:2e:b2:4d:a9:90:e8:9a:
         5f:62:e4:9b:7d:e0:98:f6:b0:53:4f:17:06:4f:75:aa:d0:c0:
         33:a0:4d:7d:04:c5:85:d0:7d:8e:fc:c6:f7:ec:0c:04:61:3a:
         db:c2:3d:59:39:f9:01:f5:6b:cd:76:74:ca:cd:2a:ba:a1:3c:
         35:92:2d:7e:11:b4:bb:86:03:3d:6a:9b:25:0e:b3:83:35:fd:
         21:b8:52:73:3f:47:2c:48:3f:05:3d:84:f0:f6:48:3a:3e:cf:
         80:2a:43:6c:07:06:22:15:65:64:fd:ed:29:99:e1:8d:01:62:
         36:6e:23:3f:a0:13:1d:97:aa:06:df:50:5e:12:8d:57:c0:1b:
         99:7a:b9:f9:3f:11:51:bc:18:5a:b8:a5:b1:c2:f7:51:80:15:
         2d:e9:71:e5:32:02:94:6e:c8:03:a8:14:11:6c:4b:31:e3:ba:
         e0:9b:a0:0e:05:37:49:88:1c:d1:55:7b:77:1e:34:3d:68:e8:
         02:00:28:d2:0a:9c:8c:87:5e:00:13:79:10:c8:eb:36:1d:43:
         01:2d:e6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----