Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3230382e302f32322d3234203d3e203532343638.roa
File:                     3138312e37392e3230382e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          CBXANQjmQ9SUBLcKQ3aQ33fyjXkwVahF4x0GTUDA8Dg=
Subject key identifier:   A6:6E:B5:C7:B5:BC:A4:47:B3:99:3D:FB:11:C5:7D:6B:94:34:90:D8
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       69C7BB2E9147D034E679D3992C7B6242DA7F361E
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3230382e302f32322d3234203d3e203532343638.roa
Signing time:             Thu 12 Sep 2024 15:45:00 +0000
ROA not before:           Thu 12 Sep 2024 15:40:00 +0000
ROA not after:            Thu 11 Sep 2025 15:45:00 +0000
asID:                     52468
IP address blocks:        181.79.208.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c7:bb:2e:91:47:d0:34:e6:79:d3:99:2c:7b:62:42:da:7f:36:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Sep 12 15:40:00 2024 GMT
            Not After : Sep 11 15:45:00 2025 GMT
        Subject: CN=A66EB5C7B5BCA447B3993DFB11C57D6B943490D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:61:54:2f:f9:06:9c:d9:e2:fb:7a:d4:19:33:
                    df:0b:34:c2:54:15:c0:dc:1a:2d:68:b4:94:77:dd:
                    d8:55:f4:65:15:06:81:a0:5b:c5:31:d4:24:05:b1:
                    10:fc:19:13:02:92:a4:77:35:89:50:3c:07:af:60:
                    49:0a:79:25:3a:2a:44:83:97:0c:8a:e5:90:bd:4a:
                    7c:a4:b0:00:34:da:99:07:92:0b:63:67:c7:31:42:
                    73:af:5a:f8:53:15:76:b6:f1:f6:28:30:11:d9:78:
                    30:e0:87:7a:13:3f:eb:3c:82:14:f2:67:41:45:8d:
                    20:fb:77:1b:65:8c:2a:0d:fe:b7:8a:e2:5f:7c:fb:
                    53:39:d1:e6:d3:3f:a3:74:7f:10:f3:9e:e4:f4:b4:
                    27:e8:64:f0:9e:28:ab:f9:d6:ba:89:1a:af:23:6b:
                    29:90:d1:08:af:d5:b9:e4:d9:93:e1:cd:b9:22:1b:
                    5c:90:08:d7:d4:6a:62:0b:20:c5:3b:58:16:01:74:
                    41:18:b7:8d:0e:1c:37:ae:2d:a5:5b:25:b5:33:11:
                    f2:cb:fb:6b:c4:94:f5:85:39:62:ea:69:2f:22:7b:
                    ea:56:13:a4:b0:cc:92:ec:35:e6:3b:26:5e:1e:58:
                    4b:9a:df:4a:83:d9:ee:be:b3:ce:40:da:7d:4b:08:
                    c3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6E:B5:C7:B5:BC:A4:47:B3:99:3D:FB:11:C5:7D:6B:94:34:90:D8
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3230382e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:de:95:c7:14:77:8a:68:a4:75:5e:cd:6f:d6:50:ca:64:da:
         b2:dd:c2:42:dc:93:7a:5d:25:76:66:60:90:b8:41:61:64:a9:
         ca:0d:3a:2d:28:6e:11:b4:df:54:f9:a1:3b:c9:26:df:c5:5a:
         94:27:e6:cc:fc:1e:dd:9a:56:28:8d:da:32:1b:c3:df:3e:7d:
         5e:4a:d9:69:88:a0:39:98:b0:0f:cf:39:35:3f:d8:0f:e7:49:
         78:f2:cd:61:9e:d1:89:8c:a4:d9:c8:15:94:b8:27:1f:8f:68:
         cb:3e:8e:e7:25:f4:eb:08:25:7c:54:22:8d:f3:71:2e:1b:c1:
         c6:1b:c8:f8:82:22:0c:87:98:16:93:1d:a4:58:17:28:c2:1d:
         1b:d6:71:c2:9b:d0:01:e3:a7:5c:ea:01:12:e5:96:e2:0d:72:
         68:d0:59:0e:bf:b7:88:b6:2c:42:44:77:e7:f4:47:44:9e:9c:
         0b:9c:98:93:83:26:df:01:b1:b0:8c:2b:87:7d:10:98:ea:19:
         1c:8a:31:a1:91:cb:78:59:3e:3d:38:2f:05:03:e2:45:ba:68:
         ce:7c:bc:8e:6c:7e:97:bf:d5:65:00:51:fd:06:62:ff:1d:3b:
         b0:eb:81:8f:02:2a:40:8b:2c:df:a3:3c:61:dc:ea:2f:67:04:
         a7:94:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----