Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1e84a699a83a15422e31623b82948dbc3cab982f.roa
File:                     1e84a699a83a15422e31623b82948dbc3cab982f.roa (raw, json)
Hash identifier:          0yxj/AME6gXN/+CWzqRaZlMHLNdT6A5qZCMUpMy+/9Y=
Subject key identifier:   91:EB:89:85:0A:AA:8A:72:C8:0E:57:4D:29:E6:AD:20:83:57:75:A8
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F943B
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1e84a699a83a15422e31623b82948dbc3cab982f.roa
Signing time:             Wed 24 Mar 2021 14:44:01 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.109.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1020987 (0xf943b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=1e84a699a83a15422e31623b82948dbc3cab982f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:59:86:c7:92:ef:ee:ff:cd:ad:60:4d:06:f2:
                    4b:47:3b:20:ac:68:8c:68:8e:73:4b:96:f5:5c:81:
                    bc:40:e0:79:ff:c0:72:5d:5b:10:cb:15:b5:ba:1a:
                    d3:fd:c9:c3:d0:b3:4b:e4:cd:47:c6:11:93:1e:d2:
                    7e:4e:18:0f:00:45:04:58:43:f4:ff:6f:0f:cf:a1:
                    e3:dd:4c:f8:2e:18:2a:0e:6a:7f:b9:fb:a5:66:6c:
                    b6:70:fa:f3:23:dd:1d:ac:ae:07:af:69:c0:8f:c5:
                    44:71:c3:20:f8:75:55:4d:a6:ba:8e:9b:4d:80:c7:
                    a9:df:ba:44:ce:21:c2:9d:e5:1d:bf:4a:fe:dc:67:
                    d8:20:64:c2:80:46:e3:6d:6b:7e:7a:93:a9:38:ad:
                    38:70:0d:36:c6:90:29:05:59:8b:61:bc:15:84:a5:
                    1e:56:46:e3:e6:5f:e8:3d:e6:78:a8:89:ca:82:ca:
                    ad:1e:b1:18:d2:20:c9:11:cd:27:20:6b:5b:cc:f5:
                    d6:aa:73:6c:0d:7b:bc:5a:ee:f1:f3:10:12:ba:60:
                    ac:f5:2b:9f:ab:19:b9:11:3c:86:70:81:c4:70:d2:
                    7a:6a:10:35:10:ea:0a:22:77:cf:b1:c5:65:e4:ad:
                    c2:9c:e2:95:72:28:61:36:21:b5:bb:ba:37:bf:11:
                    86:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EB:89:85:0A:AA:8A:72:C8:0E:57:4D:29:E6:AD:20:83:57:75:A8
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1e84a699a83a15422e31623b82948dbc3cab982f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:05:c7:d1:bb:18:3e:78:9d:a8:7a:cb:99:fc:2d:dd:79:c9:
         a3:94:b0:f3:76:dc:d7:26:db:68:b8:ac:d6:88:64:bd:2f:c7:
         95:49:3d:27:e6:c9:32:cc:2e:97:22:d9:b2:0b:84:3a:5f:95:
         32:2d:bd:a6:84:8b:04:60:3d:b0:23:87:33:df:d3:58:63:4d:
         46:91:d7:1c:a6:72:54:9f:49:ca:14:85:cb:2a:af:cf:bc:e4:
         b4:57:bc:a0:a2:3f:1c:0c:88:b7:3d:fb:d2:ae:d5:be:31:b9:
         95:68:b5:49:d1:b0:db:5b:ae:8f:7f:d7:13:c1:87:27:90:de:
         b1:d4:87:2f:d0:de:b7:f4:1c:f7:24:2f:ea:3e:75:a1:9d:a8:
         9d:d2:e6:ae:07:68:f3:61:67:90:f7:73:77:3c:7c:ec:ce:69:
         f1:31:7f:3d:b2:9d:92:e9:fb:a5:78:48:f9:e0:c0:26:4e:62:
         d9:f7:8e:6e:83:45:e5:e6:9a:e5:a6:31:e7:d0:ff:b3:b1:ee:
         98:87:87:00:e3:a1:59:8e:3a:18:77:16:ef:87:78:18:84:d9:
         66:6e:9f:c2:54:b1:76:39:59:39:8d:7c:08:57:a9:6b:8b:bb:
         d9:72:a9:23:8f:33:d6:55:b8:9a:78:b6:f8:a9:ac:40:bc:94:
         b7:ee:fa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----