Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3231382e302f32342d3234203d3e20323639373737.roa
File:                     3138312e37392e3231382e302f32342d3234203d3e20323639373737.roa (raw, json)
Hash identifier:          52GZcpZjr5He3FaYJQb6sjDhU1/mqIKnuQ1X3qAmf78=
Subject key identifier:   7E:B1:AB:81:F3:13:D6:4E:BD:59:30:8B:69:2F:76:F3:04:A0:05:EF
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       4F1666E53BC29E246A60A581FD4AB46378DDB70B
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3231382e302f32342d3234203d3e20323639373737.roa
Signing time:             Tue 05 Mar 2024 18:04:34 +0000
ROA not before:           Tue 05 Mar 2024 17:59:34 +0000
ROA not after:            Tue 04 Mar 2025 18:04:34 +0000
asID:                     269777
IP address blocks:        181.79.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:16:66:e5:3b:c2:9e:24:6a:60:a5:81:fd:4a:b4:63:78:dd:b7:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:34 2024 GMT
            Not After : Mar  4 18:04:34 2025 GMT
        Subject: CN=7EB1AB81F313D64EBD59308B692F76F304A005EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:44:20:f8:16:d1:86:d2:95:27:84:fc:a2:cd:
                    80:e9:2d:8d:c0:a4:05:bd:b9:e7:65:cf:c0:60:69:
                    b2:99:40:0d:1b:c5:80:69:af:db:3d:9c:14:0d:a4:
                    16:d3:6e:ec:14:07:9c:0a:cd:97:b2:02:17:80:11:
                    36:63:df:7b:e6:75:79:b0:e8:40:79:23:58:96:2f:
                    2d:0a:93:b4:07:47:1e:63:17:c6:6b:79:b6:4c:32:
                    55:0d:b7:41:29:f4:e0:3a:0d:17:ba:dc:0d:5d:d8:
                    23:05:23:9b:51:42:b5:5e:30:b5:fd:0e:7c:52:bc:
                    f7:39:c6:56:03:bc:3b:0c:e7:2e:48:46:52:b1:75:
                    1e:45:58:6d:59:68:64:12:05:25:d9:21:dd:37:e4:
                    70:51:d5:66:d5:d6:37:4d:bb:79:b7:f7:92:b6:91:
                    91:2d:75:f4:0d:04:b8:bc:02:56:95:65:fd:0f:ff:
                    c1:63:b8:9d:b6:e6:63:6c:10:84:c2:61:83:87:d3:
                    ba:94:f3:5b:e4:0c:41:99:7d:64:f1:d3:d7:3d:49:
                    f2:2c:5e:d9:2c:2c:d9:54:0e:7e:7d:bc:0f:48:d5:
                    ce:c6:b5:58:fc:dc:47:57:ee:19:b6:00:55:11:97:
                    8f:3c:27:82:d7:b7:ee:ed:4c:81:0a:2d:6a:ad:3b:
                    7c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B1:AB:81:F3:13:D6:4E:BD:59:30:8B:69:2F:76:F3:04:A0:05:EF
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3231382e302f32342d3234203d3e20323639373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:f2:b6:b3:46:7f:a4:59:b0:6c:20:48:7c:cc:aa:86:03:2e:
         c0:c7:4c:38:65:00:58:cd:af:a8:f2:f3:bd:30:9f:8c:6f:b6:
         1c:91:da:75:d0:18:84:14:8c:01:1c:d5:af:5c:77:26:84:5a:
         81:51:98:d6:18:c8:e8:68:5d:de:51:04:b1:dd:41:77:be:8f:
         1f:cb:ee:01:b9:18:f3:e9:69:19:36:40:fe:c3:00:7a:de:22:
         8f:d9:ab:44:02:b0:ac:cd:ac:00:64:fe:17:11:de:44:f1:61:
         b8:27:ac:f2:69:83:21:6c:c6:cb:29:34:e2:b0:27:b1:06:85:
         51:de:68:5d:8c:1b:77:a2:3a:0c:da:d2:94:51:ec:50:6e:cc:
         8e:95:4c:5f:71:3d:4c:f9:f5:3e:10:ae:30:6f:0a:a1:eb:67:
         a2:9e:28:12:8a:48:27:07:a8:bb:f2:1f:50:2d:17:11:b5:df:
         a1:c0:6a:e1:a8:53:69:cc:c6:3c:31:b3:5f:f3:d5:30:3c:63:
         de:a0:33:85:39:47:13:a9:c9:30:b7:ff:ca:17:a1:00:bf:77:
         ef:91:78:33:11:3c:20:9a:bc:b7:de:3e:1b:4b:18:35:db:ed:
         df:b0:68:ee:d8:ec:71:78:6a:b1:94:31:a4:f9:40:bc:bf:5a:
         80:6b:9a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----