Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3139342e302f32342d3234203d3e203532343638.roa
File:                     3138312e37392e3139342e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          nfVm8e2RiKRKlMPQ4rrWef/f3kbFzDCNQ5+dfMoxASY=
Subject key identifier:   A9:8C:1D:03:87:92:E8:4B:CE:9A:FA:2B:E3:90:0F:26:01:F2:72:71
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       06E0439F91D875C310F660FB778748AAA7D52B70
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3139342e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 16 Apr 2024 22:10:00 +0000
ROA not before:           Tue 16 Apr 2024 22:05:00 +0000
ROA not after:            Tue 15 Apr 2025 22:10:00 +0000
asID:                     52468
IP address blocks:        181.79.194.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e0:43:9f:91:d8:75:c3:10:f6:60:fb:77:87:48:aa:a7:d5:2b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Apr 16 22:05:00 2024 GMT
            Not After : Apr 15 22:10:00 2025 GMT
        Subject: CN=A98C1D038792E84BCE9AFA2BE3900F2601F27271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d1:f9:eb:c3:91:d1:1b:c7:ff:03:47:0d:e1:
                    78:ed:23:f4:ef:9a:ab:a6:b2:ac:de:3a:b4:04:9b:
                    80:7e:0b:ef:1b:f3:5d:75:c4:4a:e3:35:40:f7:df:
                    67:f6:bf:8a:f0:77:83:4f:f6:08:34:c0:62:d7:87:
                    62:a3:5a:c8:55:d7:dd:3a:0c:b7:f9:0c:2b:91:a1:
                    5c:96:bd:a3:c5:fe:f9:4c:a2:c8:ee:7f:84:35:87:
                    48:ce:bd:dc:fd:da:58:92:a6:33:57:62:e6:7b:7a:
                    e5:ed:32:16:c3:44:b5:7b:75:38:42:fb:11:11:03:
                    a7:8f:27:0f:15:fb:ce:df:f4:7a:e5:5b:09:62:4d:
                    bf:9b:71:c0:7d:80:bb:23:1f:b0:1d:95:5c:1f:dc:
                    9e:dc:3f:71:8b:57:d9:9c:14:83:48:75:24:a0:2f:
                    4f:22:30:f9:e9:1c:ad:79:2e:42:18:21:5b:b8:11:
                    23:d6:12:d4:e6:29:9a:e5:84:fc:dc:4b:0c:d0:22:
                    b8:6a:3d:5c:c1:9b:e1:6f:33:9c:16:d7:c4:89:03:
                    20:c7:40:7d:1d:c1:05:31:fe:d9:96:53:dc:ea:ce:
                    ec:91:7e:6f:5f:62:97:ad:6e:d0:07:5b:2d:b2:ee:
                    30:9f:6d:0e:51:87:61:53:b5:c6:d6:89:40:77:37:
                    b8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8C:1D:03:87:92:E8:4B:CE:9A:FA:2B:E3:90:0F:26:01:F2:72:71
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3139342e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:96:bf:e4:97:3e:cc:c4:3b:6d:f6:a5:cf:f3:50:61:33:98:
         27:37:5f:40:4a:0e:8b:95:25:61:0a:41:09:2d:22:63:da:a6:
         34:63:7f:71:4b:86:1b:0b:06:42:a5:a9:f8:2e:f4:29:d6:f1:
         e8:75:90:0b:aa:16:2f:c3:bf:4e:50:61:f4:8a:ba:60:ab:16:
         13:cd:ae:9f:fb:86:c8:8a:13:e8:6f:4d:71:0a:e9:56:5d:df:
         eb:79:b4:73:fb:10:3b:58:5e:96:bb:5f:c0:24:90:92:9d:a7:
         eb:e1:6f:3b:e3:6b:b6:68:43:a9:cf:d1:40:09:57:33:37:8f:
         00:7e:97:3b:1e:78:8e:75:d6:7c:b8:60:3c:59:c8:67:6d:40:
         c5:18:8d:02:14:b0:a3:ba:0e:a3:91:c4:13:c2:ce:3f:3e:3a:
         93:90:f2:dc:39:b5:bb:1d:4d:ac:01:6f:19:d2:d1:a9:b2:e7:
         62:df:53:aa:4d:d2:bc:46:29:c0:6f:be:75:b3:43:e9:e7:b8:
         b6:2d:95:31:28:87:59:3e:e0:8a:f8:d4:46:25:75:04:bc:fe:
         9f:a5:8a:9c:73:39:c5:cd:7a:c6:2b:d7:9e:6c:08:9d:e1:d9:
         0b:9d:eb:9e:86:26:6d:dd:c8:3a:bd:a5:74:1f:60:ba:91:ce:
         60:e7:af:4a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUBuBDn5HYdcMQ9mD7d4dIqqfVK3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlEOTIzQTI1MjdENzhDQkNBMUJDMkI2QjE1REFDMEYx
RjZDN0U1MDAeFw0yNDA0MTYyMjA1MDBaFw0yNTA0MTUyMjEwMDBaMDMxMTAvBgNV
BAMTKEE5OEMxRDAzODc5MkU4NEJDRTlBRkEyQkUzOTAwRjI2MDFGMjcyNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD40fnrw5HRG8f/A0cN4XjtI/Tv
mqumsqzeOrQEm4B+C+8b8111xErjNUD332f2v4rwd4NP9gg0wGLXh2KjWshV1906
DLf5DCuRoVyWvaPF/vlMosjuf4Q1h0jOvdz92liSpjNXYuZ7euXtMhbDRLV7dThC
+xERA6ePJw8V+87f9HrlWwliTb+bccB9gLsjH7AdlVwf3J7cP3GLV9mcFINIdSSg
L08iMPnpHK15LkIYIVu4ESPWEtTmKZrlhPzcSwzQIrhqPVzBm+FvM5wW18SJAyDH
QH0dwQUx/tmWU9zqzuyRfm9fYpetbtAHWy2y7jCfbQ5Rh2FTtcbWiUB3N7jBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUqYwdA4eS6EvOmvor45APJgHycnEwHwYDVR0j
BBgwFoAUmdkjolJ9eMvKG8K2sV2sDx9sflAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQUJERjQwOTVGRThCMjI4ODJEMjBCMTZEQjdEMkJGRDM4
MUMwRjlFNjJDNkVCNjU5NDQ3RDQ0QkU3RTFDQkMyLzAvOTlEOTIzQTI1MjdENzhD
QkNBMUJDMkI2QjE1REFDMEYxRjZDN0U1MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUQ5MjNBMjUyN0Q3OENCQ0Ex
QkMyQjZCMTVEQUMwRjFGNkM3RTUwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUFCREY0MDk1RkU4QjIyODgyRDIwQjE2REI3RDJCRkQzODFDMEY5RTYy
QzZFQjY1OTQ0N0Q0NEJFN0UxQ0JDMi8wLzMxMzgzMTJlMzczOTJlMzEzOTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALVPwjAN
BgkqhkiG9w0BAQsFAAOCAQEAbJa/5Jc+zMQ7bfalz/NQYTOYJzdfQEoOi5UlYQpB
CS0iY9qmNGN/cUuGGwsGQqWp+C70Kdbx6HWQC6oWL8O/TlBh9Iq6YKsWE82un/uG
yIoT6G9NcQrpVl3f63m0c/sQO1helrtfwCSQkp2n6+FvO+NrtmhDqc/RQAlXMzeP
AH6XOx54jnXWfLhgPFnIZ21AxRiNAhSwo7oOo5HEE8LOPz46k5Dy3Dm1ux1NrAFv
GdLRqbLnYt9Tqk3SvEYpwG++dbND6ee4ti2VMSiHWT7givjURiV1BLz+n6WKnHM5
xc16xivXnmwIneHZC53rnoYmbd3IOr2ldB9gupHOYOevSg==
-----END CERTIFICATE-----