Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/14882ed08dc8604e5d66f360d3af6a2695ad117c.roa
File:                     14882ed08dc8604e5d66f360d3af6a2695ad117c.roa (raw, json)
Hash identifier:          1RJ2B91XyPL8VBKXLSgWoYo1L/5h0jgRUpEWGSU77kE=
Subject key identifier:   8B:F6:90:EF:12:5F:55:B7:AB:12:8C:AD:DB:35:C7:40:B6:50:A2:F1
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1081A2
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/14882ed08dc8604e5d66f360d3af6a2695ad117c.roa
Signing time:             Wed 24 Mar 2021 14:44:20 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.156.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1081762 (0x1081a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=14882ed08dc8604e5d66f360d3af6a2695ad117c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:76:4a:25:4a:b8:52:0a:7e:a0:dc:de:d6:
                    98:27:96:a8:fb:77:de:17:ab:18:bf:fb:b3:14:8f:
                    66:d8:08:5d:d0:b0:dd:17:a5:b4:99:12:12:88:60:
                    f3:f6:c8:ae:c0:b1:eb:26:ba:63:5b:00:99:61:37:
                    bd:bb:5e:d4:8a:15:6c:fb:26:02:b9:a5:62:06:23:
                    c0:3c:97:50:d6:03:ae:c7:fb:8d:e3:37:39:5b:25:
                    22:5d:8e:b3:82:5b:22:8a:b7:78:c4:b0:5b:e7:09:
                    c8:27:40:0a:1f:a2:69:0c:7a:46:3d:3d:71:c2:f2:
                    28:28:8c:9b:84:ad:55:44:9c:d4:04:32:e5:4d:b5:
                    b3:19:ba:d5:0a:12:0e:c4:c3:94:d6:f6:8c:8b:07:
                    d5:d9:8c:8f:ce:dd:c2:97:eb:99:3b:ff:59:37:f1:
                    81:79:32:00:8a:d0:e1:87:59:4d:98:1f:ec:4c:f7:
                    d6:39:75:d0:3f:c2:0e:7e:eb:6e:b9:77:bf:93:3f:
                    50:df:38:a1:c0:18:c7:e6:0d:8c:57:bd:34:21:8a:
                    ae:6a:7c:e7:bc:bf:4d:c5:12:07:32:85:9a:4b:dd:
                    e2:13:8c:e5:dc:94:48:22:d8:ce:04:3b:56:f5:d2:
                    3f:10:8a:b7:4a:44:5e:f0:24:73:ac:c2:5d:70:fb:
                    f6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F6:90:EF:12:5F:55:B7:AB:12:8C:AD:DB:35:C7:40:B6:50:A2:F1
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/14882ed08dc8604e5d66f360d3af6a2695ad117c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:72:1e:81:f8:3e:df:b6:c2:97:b7:ff:01:10:8a:27:75:7c:
         ee:13:ef:14:02:3f:f6:1f:17:c6:0c:20:22:73:c0:2b:52:61:
         43:01:a5:f8:f6:04:ac:5f:f5:9b:b3:aa:7a:cb:f3:7b:7e:e6:
         9f:29:aa:3b:5e:16:32:ad:56:01:48:0f:8a:4d:3b:8e:99:12:
         e9:a9:f8:0f:29:f2:e5:5e:87:5d:a6:d6:9b:84:03:1b:78:81:
         82:cc:61:10:3c:e1:47:5e:99:15:47:21:45:c6:91:46:db:5a:
         39:1c:47:d8:37:a9:f8:7b:99:a4:c7:2c:f8:5b:c4:0f:5a:91:
         50:77:8a:0f:5d:9d:b5:c2:46:af:70:5b:61:c2:28:e2:1f:74:
         1f:31:18:d0:d5:43:fc:a5:c5:8c:f1:f0:2a:52:58:bd:3b:24:
         c3:b3:74:b7:09:f8:74:03:74:9a:50:c9:39:12:63:44:4c:0d:
         a0:45:82:3c:3d:1a:d2:e6:bd:e0:7a:b7:2b:94:9b:cb:8b:0f:
         ab:a8:33:fe:c0:89:03:29:4d:59:b3:2e:93:23:d4:73:42:7e:
         02:9c:c5:73:e6:63:ab:b3:d3:cb:7f:10:e4:e8:32:24:bf:35:
         1a:88:f0:c2:fe:dd:08:1c:f0:8b:a0:7f:25:87:77:d4:3f:6c:
         1b:07:fb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----