Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3139332e302f32342d3234203d3e203532343638.roa
File:                     3138312e37392e3139332e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          jLiDu8ljzdEedpEjrn8wRO621x61li5/f7z2NgdJRUY=
Subject key identifier:   53:1B:4D:E1:01:74:BA:91:6B:23:38:A5:29:DF:ED:42:D9:3A:81:19
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       3BAC36BF8410A9963BF25FF09BF1DCAEB2268EFD
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3139332e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 16 Apr 2024 22:10:00 +0000
ROA not before:           Tue 16 Apr 2024 22:05:00 +0000
ROA not after:            Tue 15 Apr 2025 22:10:00 +0000
asID:                     52468
IP address blocks:        181.79.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ac:36:bf:84:10:a9:96:3b:f2:5f:f0:9b:f1:dc:ae:b2:26:8e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Apr 16 22:05:00 2024 GMT
            Not After : Apr 15 22:10:00 2025 GMT
        Subject: CN=531B4DE10174BA916B2338A529DFED42D93A8119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bd:cc:35:11:21:36:3e:e3:cd:8d:70:4e:6d:
                    c8:e6:d4:17:46:92:af:12:ab:1b:76:c9:a6:51:55:
                    39:32:34:70:25:13:1d:b6:f0:3c:e1:41:45:76:eb:
                    81:cf:ef:76:30:fc:37:e7:bd:d6:c2:8c:07:fa:ab:
                    6d:d6:2f:5e:99:1d:55:87:ff:af:12:9b:cc:41:34:
                    21:f0:1c:e1:9e:e2:d3:c1:73:3a:59:91:92:fb:2e:
                    72:e5:09:e7:be:06:e2:ae:85:d9:f8:c7:b1:c8:b6:
                    0c:6a:37:2e:97:54:02:dc:52:4c:10:fe:07:f4:4b:
                    16:56:a8:83:24:02:22:8a:24:72:a7:07:82:d9:a7:
                    8c:2c:e1:0e:fa:6e:1f:c9:17:07:3e:ee:4e:16:a8:
                    f1:05:b6:b2:48:59:b0:39:3b:58:52:6b:72:9d:84:
                    f3:4a:a1:60:00:e2:dd:21:a4:8d:8d:9a:ab:a3:00:
                    25:d4:a7:dd:60:7f:a0:8c:73:24:0e:a8:c0:aa:9b:
                    71:82:06:77:17:a6:48:fe:c8:a2:c8:1e:9b:1c:5c:
                    b5:fb:81:f1:aa:ac:89:63:75:d6:fe:6b:1e:4e:78:
                    d9:08:26:4d:24:4e:12:11:8f:17:50:8d:86:4a:a1:
                    99:61:98:ff:31:86:86:73:9c:bc:26:13:16:9d:9c:
                    c8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1B:4D:E1:01:74:BA:91:6B:23:38:A5:29:DF:ED:42:D9:3A:81:19
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3139332e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:a2:36:c5:46:0a:9b:85:02:1c:2d:e7:01:0e:10:12:e2:08:
         a7:f6:95:38:e8:b9:7b:30:16:3a:21:47:28:88:a6:ef:e2:de:
         70:dc:51:94:06:12:76:25:8d:2b:d4:9f:bf:f6:3c:fc:ba:d7:
         f6:b2:00:48:7e:97:6f:0b:df:90:59:b9:ac:b1:e9:56:eb:b3:
         e5:75:40:88:58:24:3c:4a:7d:f5:ba:5f:0e:09:cc:3a:9d:64:
         8a:47:ba:0e:1a:2f:89:f9:cb:2d:90:45:dc:80:49:2e:43:3b:
         17:c9:91:e8:53:85:37:79:3b:19:c3:ce:7b:41:94:6d:12:d0:
         34:c3:22:bd:50:9e:75:b9:88:be:f2:a2:da:46:a3:66:77:e6:
         84:eb:ce:53:fc:1b:44:b6:fd:08:a2:41:87:86:18:62:ac:ec:
         7d:ca:d2:e8:73:0a:2e:92:c8:c0:ab:b1:53:8e:42:33:42:06:
         86:e5:a8:f6:3b:80:25:63:2e:e6:aa:bb:1c:08:43:e7:5e:73:
         e3:7d:aa:43:60:80:53:af:06:33:c9:5a:dd:98:80:60:7f:e4:
         20:cd:f4:37:7e:19:c8:23:c3:9e:27:b5:ff:27:43:5f:af:4f:
         85:5e:3a:3b:b5:c5:64:2b:de:c6:9b:26:f9:d7:53:da:35:22:
         8a:46:4a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----