Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3232302e302f32322d3232203d3e203138373437.roa
File:                     3138312e37392e3232302e302f32322d3232203d3e203138373437.roa (raw, json)
Hash identifier:          qVXamjU1fBk0D6Tj8Bf+avVTZY0tLHhNqEjqQ0TmKlk=
Subject key identifier:   78:13:F0:ED:03:74:C7:27:F1:C4:F0:53:A2:C0:4B:63:0C:C2:AF:65
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       50FE7BD0C8D4BE08A844DF30265FA1BD31448C06
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3232302e302f32322d3232203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 18:04:29 +0000
ROA not before:           Tue 05 Mar 2024 17:59:29 +0000
ROA not after:            Tue 04 Mar 2025 18:04:29 +0000
asID:                     18747
IP address blocks:        181.79.220.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fe:7b:d0:c8:d4:be:08:a8:44:df:30:26:5f:a1:bd:31:44:8c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:29 2024 GMT
            Not After : Mar  4 18:04:29 2025 GMT
        Subject: CN=7813F0ED0374C727F1C4F053A2C04B630CC2AF65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:79:ce:f2:70:4f:ad:77:30:bc:d1:11:f9:5e:
                    6b:4a:a4:5d:01:b2:20:b7:f7:e4:7a:a5:1b:10:27:
                    32:77:b1:a8:fe:7c:72:3d:c0:60:d9:df:cb:d1:5b:
                    6c:b8:71:12:1c:2d:ee:91:83:a1:aa:71:21:42:7b:
                    c2:12:63:8d:b4:a6:33:03:2d:62:d8:fe:d2:27:8f:
                    d5:f8:64:ce:eb:7f:14:dd:b5:28:b4:e1:c9:96:00:
                    a0:45:83:28:b4:4b:aa:b3:b0:a6:ec:3e:27:b5:30:
                    19:72:ac:b2:cc:b6:36:e1:73:2e:29:ab:1f:77:bc:
                    8c:05:9d:38:4d:70:ca:c3:ab:f6:96:be:3e:0b:67:
                    c9:5f:f4:70:58:c7:75:f3:75:57:59:be:8e:89:21:
                    7c:29:56:92:c0:fd:ac:99:67:81:d4:cf:89:f6:d9:
                    25:d9:16:60:8a:4e:a0:df:98:49:32:72:e7:aa:d5:
                    dd:58:bf:e6:5e:9e:91:62:cc:90:eb:87:5c:1b:ca:
                    12:11:6c:96:5a:aa:d7:3b:ee:cc:b9:04:15:60:af:
                    2d:6c:5e:97:f2:5e:bd:ca:d6:81:42:dc:9a:ad:30:
                    e3:10:94:01:b2:ec:f9:33:48:2c:13:1a:c2:08:81:
                    84:f7:ec:fb:2d:b5:3a:62:36:ad:1b:da:e0:5e:1e:
                    56:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:13:F0:ED:03:74:C7:27:F1:C4:F0:53:A2:C0:4B:63:0C:C2:AF:65
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3232302e302f32322d3232203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:6e:0d:57:d6:78:34:0e:45:c2:cc:34:85:b2:0f:a7:77:f0:
         b9:e8:a1:4d:06:95:1a:1a:28:bd:d6:38:a2:dd:19:7e:59:07:
         6b:9e:b2:09:a9:af:6d:6d:86:84:f9:a8:b3:23:64:36:9d:94:
         06:f1:57:4b:72:ad:30:cb:02:56:c2:0a:9f:75:e5:8c:f6:df:
         07:84:1f:ac:45:c4:39:c7:db:d7:5d:58:62:84:a7:ba:b4:11:
         fc:71:c2:a3:5d:15:88:3b:3f:36:07:83:a0:58:fe:aa:f8:1e:
         15:df:d3:d7:0a:95:31:70:9c:9d:f5:6e:95:77:19:a3:7e:22:
         1e:0f:07:20:b3:61:e5:32:a3:70:4e:5e:f8:b6:e7:96:a6:18:
         91:6e:bd:c5:c5:ec:43:62:12:f6:c1:5f:ca:c2:58:06:4a:b9:
         2c:43:96:e4:56:88:25:16:3b:8e:72:db:0d:53:d3:a4:8b:fd:
         b6:72:e0:2c:e0:07:c2:b3:34:db:60:82:5b:35:25:e6:ff:38:
         b1:d4:07:56:4b:45:f4:ac:a3:a2:b4:2e:2f:78:9f:14:34:ab:
         d3:79:91:d4:82:e9:4b:3a:ec:cc:09:f0:87:99:8c:18:51:b0:
         2a:92:23:35:b1:03:27:69:86:5f:8a:0b:76:c7:1b:ec:da:0a:
         d8:cc:c5:91
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUUP570MjUvgioRN8wJl+hvTFEjAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlEOTIzQTI1MjdENzhDQkNBMUJDMkI2QjE1REFDMEYx
RjZDN0U1MDAeFw0yNDAzMDUxNzU5MjlaFw0yNTAzMDQxODA0MjlaMDMxMTAvBgNV
BAMTKDc4MTNGMEVEMDM3NEM3MjdGMUM0RjA1M0EyQzA0QjYzMENDMkFGNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTec7ycE+tdzC80RH5XmtKpF0B
siC39+R6pRsQJzJ3saj+fHI9wGDZ38vRW2y4cRIcLe6Rg6GqcSFCe8ISY420pjMD
LWLY/tInj9X4ZM7rfxTdtSi04cmWAKBFgyi0S6qzsKbsPie1MBlyrLLMtjbhcy4p
qx93vIwFnThNcMrDq/aWvj4LZ8lf9HBYx3XzdVdZvo6JIXwpVpLA/ayZZ4HUz4n2
2SXZFmCKTqDfmEkycueq1d1Yv+ZenpFizJDrh1wbyhIRbJZaqtc77sy5BBVgry1s
XpfyXr3K1oFC3JqtMOMQlAGy7PkzSCwTGsIIgYT37PsttTpiNq0b2uBeHlbvAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUeBPw7QN0xyfxxPBTosBLYwzCr2UwHwYDVR0j
BBgwFoAUmdkjolJ9eMvKG8K2sV2sDx9sflAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQUJERjQwOTVGRThCMjI4ODJEMjBCMTZEQjdEMkJGRDM4
MUMwRjlFNjJDNkVCNjU5NDQ3RDQ0QkU3RTFDQkMyLzAvOTlEOTIzQTI1MjdENzhD
QkNBMUJDMkI2QjE1REFDMEYxRjZDN0U1MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUQ5MjNBMjUyN0Q3OENCQ0Ex
QkMyQjZCMTVEQUMwRjFGNkM3RTUwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUFCREY0MDk1RkU4QjIyODgyRDIwQjE2REI3RDJCRkQzODFDMEY5RTYy
QzZFQjY1OTQ0N0Q0NEJFN0UxQ0JDMi8wLzMxMzgzMTJlMzczOTJlMzIzMjMwMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzODM3MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArVP3DAN
BgkqhkiG9w0BAQsFAAOCAQEAqG4NV9Z4NA5Fwsw0hbIPp3fwueihTQaVGhoovdY4
ot0ZflkHa56yCamvbW2GhPmosyNkNp2UBvFXS3KtMMsCVsIKn3XljPbfB4QfrEXE
Ocfb111YYoSnurQR/HHCo10ViDs/NgeDoFj+qvgeFd/T1wqVMXCcnfVulXcZo34i
Hg8HILNh5TKjcE5e+LbnlqYYkW69xcXsQ2IS9sFfysJYBkq5LEOW5FaIJRY7jnLb
DVPTpIv9tnLgLOAHwrM022CCWzUl5v84sdQHVktF9KyjorQuL3ifFDSr03mR1ILp
SzrszAnwh5mMGFGwKpIjNbEDJ2mGX4oLdscb7NoK2MzFkQ==
-----END CERTIFICATE-----
Generated at Tue Sep 24 23:11:54 2024 by rpki-client on console-fra.rpki-client.org