Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3232342e302f31392d3234203d3e203237393332.roa
File:                     3138312e37392e3232342e302f31392d3234203d3e203237393332.roa (raw, json)
Hash identifier:          nVVfpIQm5kr9zOwAmpOre+pRdsyl1zY1u8lB/WF2awk=
Subject key identifier:   D5:DD:01:5D:4E:B7:3C:8F:78:FD:79:FB:23:6A:7E:9B:FC:B8:49:FB
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       72DB78E2725E1D3E7FFF8FE0BF06C54BE7405F2F
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3232342e302f31392d3234203d3e203237393332.roa
Signing time:             Tue 05 Mar 2024 18:04:32 +0000
ROA not before:           Tue 05 Mar 2024 17:59:32 +0000
ROA not after:            Tue 04 Mar 2025 18:04:32 +0000
asID:                     27932
IP address blocks:        181.79.224.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:db:78:e2:72:5e:1d:3e:7f:ff:8f:e0:bf:06:c5:4b:e7:40:5f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:32 2024 GMT
            Not After : Mar  4 18:04:32 2025 GMT
        Subject: CN=D5DD015D4EB73C8F78FD79FB236A7E9BFCB849FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a6:59:aa:d9:c9:30:d0:15:a5:ea:80:c9:6b:
                    aa:df:d8:4c:03:f6:04:51:67:fc:6a:86:fb:01:af:
                    17:a7:7f:b2:a9:a2:01:8e:7e:38:c9:bc:a5:28:01:
                    54:86:19:4a:c8:ea:32:77:95:86:30:28:07:5b:b7:
                    64:bc:d3:51:2a:21:7a:25:a2:b3:3e:1e:1d:04:3a:
                    fb:95:d8:ad:4a:d0:47:e0:38:79:31:4b:74:c4:f2:
                    51:f1:b8:d4:12:a0:c6:41:9a:ac:60:af:8a:83:6c:
                    5d:c0:02:2f:ff:0e:44:40:ba:da:6e:2d:54:79:bc:
                    b9:ac:d0:20:5b:ab:af:c5:5d:ad:0e:af:52:e2:66:
                    b3:18:8c:da:7a:45:b8:59:fe:5d:f0:1c:f3:11:ee:
                    92:94:b6:09:2b:82:dd:15:59:4c:76:d7:cd:3f:14:
                    f1:f1:0d:54:3a:41:88:ae:b7:7e:01:f3:c5:42:33:
                    bf:24:6c:f5:84:b6:04:3a:08:03:bc:30:f0:c7:fc:
                    69:9c:b3:1f:11:e3:bc:b5:bf:70:d2:21:4e:bf:65:
                    33:bb:1c:13:9d:a3:cd:fe:e9:17:f0:ab:78:4f:f5:
                    e1:68:91:ac:b3:16:cd:a0:08:ae:5f:ec:47:8e:bf:
                    1c:92:ac:91:ff:f2:5f:78:89:1b:cc:49:21:9f:9e:
                    30:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DD:01:5D:4E:B7:3C:8F:78:FD:79:FB:23:6A:7E:9B:FC:B8:49:FB
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3232342e302f31392d3234203d3e203237393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:ba:86:a3:7a:a2:ce:39:90:10:88:62:8f:1b:ca:f4:79:82:
         95:43:37:dd:cb:6a:68:3c:bd:24:8b:63:07:88:c4:0b:74:07:
         ba:1a:1c:f7:64:60:6b:85:79:02:68:5e:59:99:4e:a5:fb:bf:
         2a:a8:41:b9:00:f7:1a:dc:ea:34:96:10:9c:8d:00:74:9a:eb:
         1c:88:d2:c0:1a:4d:33:76:24:cb:b8:91:51:ed:61:de:2d:45:
         e5:f2:86:e1:3a:55:42:81:0f:2f:ff:02:bd:18:4f:d7:11:24:
         51:64:e5:f0:b0:e8:0d:8d:e0:06:3d:e9:04:96:75:43:3a:69:
         c8:53:25:61:1a:1c:0f:bf:2e:df:c5:e6:a6:8c:0e:77:0e:ea:
         83:ff:a6:fa:a0:94:e6:47:3e:b4:c7:21:97:9b:a9:f0:78:c5:
         a2:49:30:55:f5:1d:44:ca:3b:c0:75:9d:6c:22:cd:3e:a0:5b:
         0a:64:4f:5d:2b:c4:73:db:5e:18:34:73:ae:fc:e8:40:55:3f:
         8a:7b:03:3c:86:97:a3:31:2a:08:8c:49:e0:62:de:63:04:ef:
         b9:5e:9d:b8:09:21:04:27:d6:13:52:bf:67:ec:68:88:15:f1:
         c1:a7:a7:12:dc:20:4f:88:21:72:73:89:c4:72:2b:d8:5c:d8:
         11:3e:3c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----