Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/123c7fa3841a3b41146f0bfa4e30604547f52777.roa
File:                     123c7fa3841a3b41146f0bfa4e30604547f52777.roa (raw, json)
Hash identifier:          ZgnOVCpZkxlejiheYQ9mCKJUTrChY2HZDEycJvfI2VE=
Subject key identifier:   F4:44:A6:44:40:9C:81:1E:D7:FD:0A:EF:C0:BD:7F:20:12:4D:21:C7
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F9FE0
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/123c7fa3841a3b41146f0bfa4e30604547f52777.roa
Signing time:             Wed 24 Mar 2021 14:44:02 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1023968 (0xf9fe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=123c7fa3841a3b41146f0bfa4e30604547f52777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cb:f1:da:57:51:08:9e:e4:af:be:aa:9d:09:
                    68:34:6a:d7:9f:0f:c6:c9:4b:53:62:eb:e3:8d:80:
                    59:07:b9:b2:55:ca:69:b7:26:4f:79:eb:e3:f0:6f:
                    f3:6c:99:72:a9:9c:33:46:72:60:b1:4e:b3:d4:29:
                    3e:da:1f:83:01:6c:fa:5d:30:3c:fa:b0:3c:08:83:
                    a9:41:23:f0:10:e3:ed:76:63:9b:5a:ab:75:05:42:
                    99:42:5d:a8:c8:47:40:22:12:72:4e:05:26:3f:e6:
                    5d:4d:cd:25:e5:b3:1b:77:16:e8:c6:5d:7e:ec:a4:
                    0a:e2:87:da:7e:9e:80:da:95:04:8c:94:8f:59:d2:
                    c3:60:81:69:95:0e:87:1e:20:b6:04:1e:7c:3f:60:
                    f5:77:46:ec:39:43:20:8b:5c:d6:f3:b3:c7:b2:27:
                    71:2c:85:fa:ec:71:dc:a0:e3:ed:e5:08:68:a9:e3:
                    30:c5:0e:b5:2a:82:53:31:ba:76:0c:42:e2:8b:e9:
                    86:80:a3:ed:37:b5:8b:f2:b3:83:47:0f:a2:bc:f2:
                    e3:0a:7e:c8:60:7c:75:7f:b2:b8:ab:62:96:fb:1d:
                    c2:13:ad:91:85:16:f6:b4:b9:5a:76:a6:a6:e7:04:
                    83:e2:a2:31:92:c2:91:0c:58:fa:c0:8b:38:cf:52:
                    50:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:44:A6:44:40:9C:81:1E:D7:FD:0A:EF:C0:BD:7F:20:12:4D:21:C7
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/123c7fa3841a3b41146f0bfa4e30604547f52777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c5:c4:a3:80:b3:3d:f2:e2:f0:04:7c:9f:f7:0b:86:95:37:60:
         64:a6:47:a5:51:02:0a:68:31:8d:30:a8:1a:f4:77:92:de:06:
         3a:4e:44:af:d3:e1:d0:ff:8e:9a:81:58:58:f8:84:a4:27:ab:
         59:e0:8a:0d:3d:39:24:f0:f4:ea:2a:e8:da:ba:27:cc:7b:b3:
         55:71:46:97:75:81:a8:0f:b3:33:1d:01:11:6b:5b:e7:a8:8d:
         b3:2e:8d:9d:b3:a1:be:af:6b:44:ef:56:f9:aa:06:7c:d2:18:
         25:40:c5:69:b7:66:62:9b:07:68:2d:f5:20:98:95:28:82:b9:
         6a:7f:90:4c:c2:96:44:61:1c:21:fd:58:1e:f5:46:ca:30:52:
         73:ec:45:7b:87:40:ea:47:9f:f3:78:ea:49:a2:19:74:1c:7f:
         91:12:7e:46:09:0e:5f:4e:dd:8e:eb:20:4c:52:3a:91:9e:42:
         07:73:95:8b:7f:4b:51:e2:35:27:60:d4:09:21:4a:86:20:a4:
         4c:66:fb:96:8b:db:b9:ae:4a:ac:49:eb:e3:84:d3:14:b6:2a:
         ac:ff:5b:da:9e:bc:02:31:8b:66:2b:5c:d7:ef:97:4f:c2:ae:
         5e:ff:db:36:e1:67:36:46:8b:c6:6a:21:80:a4:44:e6:3d:65:
         9d:c3:fa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----