Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3232302e302f32342d3234203d3e203532343638.roa
File:                     3138312e37392e3232302e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          HDpARflrEsDO1PyjZvdrHJ+xLXn2SwinLFIkZE0vciI=
Subject key identifier:   9C:5B:A5:20:7F:F2:EF:E4:56:84:34:1A:B4:0A:29:A5:C4:E6:FA:EC
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       49E0926D1A7E5B8E6508C515480B50DA140479BA
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3232302e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:41 +0000
ROA not before:           Tue 05 Mar 2024 17:59:41 +0000
ROA not after:            Tue 04 Mar 2025 18:04:41 +0000
asID:                     52468
IP address blocks:        181.79.220.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e0:92:6d:1a:7e:5b:8e:65:08:c5:15:48:0b:50:da:14:04:79:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:41 2024 GMT
            Not After : Mar  4 18:04:41 2025 GMT
        Subject: CN=9C5BA5207FF2EFE45684341AB40A29A5C4E6FAEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:9c:9c:0f:ce:da:6b:75:07:77:40:63:b8:
                    ab:2b:45:6e:63:1d:36:33:69:5b:58:e8:60:cc:f2:
                    6e:e6:3b:fd:6b:14:f8:fa:98:06:85:0f:9f:30:cf:
                    59:b3:17:93:a8:aa:79:c3:13:21:84:2a:51:5c:be:
                    6a:7c:29:3f:5b:1b:d4:8c:f5:e8:31:b4:4f:d4:f2:
                    fe:ce:48:6e:60:21:77:ca:53:96:fc:43:10:98:59:
                    9e:56:e7:36:d7:5a:3d:ac:ee:5a:16:86:01:bb:72:
                    1c:9b:39:91:26:d5:49:3e:67:24:c4:9d:8d:11:56:
                    95:0a:ae:06:bc:d6:76:25:4f:35:54:23:cd:66:f1:
                    0f:51:cd:89:2c:a4:4e:23:54:3f:ed:9e:7c:2a:63:
                    0b:eb:b8:74:70:02:5b:d1:77:2e:7a:ce:d5:0f:df:
                    8e:47:70:99:84:fc:80:c1:a0:65:c9:ee:d6:f9:b2:
                    92:a9:d2:cd:09:7c:3d:cf:3f:33:6a:e7:eb:1a:04:
                    b0:72:28:c3:d1:06:57:69:29:d5:6c:ef:2f:da:0e:
                    59:5a:72:48:bb:1f:e8:cb:58:ee:f3:e3:28:fe:a8:
                    9d:b9:8a:7b:d4:c4:a2:e3:15:da:27:d7:67:9d:26:
                    82:05:c5:69:97:c8:71:86:53:ea:2e:f1:0d:81:36:
                    04:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5B:A5:20:7F:F2:EF:E4:56:84:34:1A:B4:0A:29:A5:C4:E6:FA:EC
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3232302e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:b1:13:cd:cd:f9:4f:c0:af:ba:54:cd:69:d8:3e:27:df:01:
         f6:e0:1d:1a:48:d5:d4:ba:83:38:27:b5:9f:da:32:b7:49:a3:
         18:f5:94:bd:d1:e5:b9:0e:2f:2f:1c:4c:be:de:50:1b:13:dd:
         71:8a:cd:f7:91:70:e2:44:61:66:c0:bc:f2:8e:ab:d6:5c:5c:
         cf:20:52:df:19:ad:70:a4:e0:8d:5b:97:6c:64:bc:64:f4:44:
         ee:7b:ee:86:72:74:ab:64:a3:97:97:65:b0:71:ca:7f:d3:ee:
         a6:3a:12:3f:54:5d:ba:7b:ec:34:c9:dc:33:61:08:86:dc:9b:
         a4:53:a4:d3:06:90:61:0a:ed:1e:8b:17:06:6c:41:8d:a4:5b:
         2c:ae:ae:cc:74:d5:8a:c1:63:ff:c1:05:a3:13:3a:2c:cb:f2:
         c7:05:8b:e7:99:ff:52:93:e1:91:b4:5f:83:27:9a:b4:c9:14:
         38:fa:cc:24:50:6d:53:cb:a5:ed:cf:17:be:51:df:d3:fb:81:
         ee:97:5e:f0:44:c5:a3:bd:d7:ff:f5:77:3f:f9:d5:c3:3c:86:
         5d:04:33:67:67:54:06:83:d7:af:c5:f3:5b:33:3c:58:c6:a5:
         f5:40:7c:31:16:b0:ea:88:a8:83:1d:6c:b7:7e:6c:dd:c4:07:
         df:9e:8d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----