Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/22452c1634d5aa1ad708302ba26f406d6adefbb8.roa
File:                     22452c1634d5aa1ad708302ba26f406d6adefbb8.roa (raw, json)
Hash identifier:          0D3kWVm3hZk5Zc4RUFb6dlSZOy/00NYRyk2E5KSdB4Q=
Subject key identifier:   C7:34:7D:6A:FA:BD:66:43:D9:BB:EF:A5:2A:B1:CC:31:C8:D8:DA:D8
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       105997
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/22452c1634d5aa1ad708302ba26f406d6adefbb8.roa
Signing time:             Wed 24 Mar 2021 14:44:16 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1071511 (0x105997)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=22452c1634d5aa1ad708302ba26f406d6adefbb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ba:de:03:bf:ca:27:18:50:63:a5:42:76:ba:
                    e7:65:bc:af:12:fd:5d:af:22:f7:66:d6:98:cf:22:
                    71:a8:f2:b2:8f:92:e5:cc:1b:39:ee:00:f6:e3:e2:
                    73:63:df:cb:a1:77:25:22:22:31:95:17:6a:d2:a0:
                    1b:60:bc:3c:63:c5:2e:55:2c:76:4c:13:6e:80:50:
                    51:4b:a1:17:9e:c1:fa:b0:13:a0:69:57:78:d1:3d:
                    0a:19:73:09:7f:bd:35:6c:e2:9f:ce:eb:50:ae:5e:
                    72:55:ce:4f:7e:1b:2f:b1:54:f3:46:16:04:95:f9:
                    d1:40:43:6a:fd:99:29:2c:6a:39:8f:ac:30:37:0b:
                    04:36:c3:c0:82:3b:11:c0:35:b7:0d:0a:1a:10:96:
                    4f:9c:f7:31:43:2b:de:7d:77:75:fa:17:7f:ec:23:
                    66:ff:43:02:b9:05:4b:65:20:8e:f9:3c:ac:52:f6:
                    45:0a:16:b2:99:f3:dc:27:0e:91:54:d4:e7:6a:67:
                    82:54:26:e9:ac:10:23:c6:99:79:3e:59:9a:5f:82:
                    a3:02:55:7c:e0:03:1d:bc:59:eb:d6:2f:70:43:f5:
                    3c:6c:e7:4b:bd:ec:1a:3d:c6:b0:48:2a:cc:0a:f8:
                    e1:bd:22:05:06:7e:39:f9:5c:66:c8:a4:e9:57:9e:
                    09:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:34:7D:6A:FA:BD:66:43:D9:BB:EF:A5:2A:B1:CC:31:C8:D8:DA:D8
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/22452c1634d5aa1ad708302ba26f406d6adefbb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:b4:8e:11:25:88:57:61:c7:d3:25:3d:c9:86:10:c1:3c:bc:
         91:8c:72:c5:e5:1d:1a:ce:3a:a5:5c:57:e5:c1:2c:0e:d6:8f:
         79:a6:a2:e8:25:8d:fe:fd:e3:21:ad:c7:a6:e1:df:db:a5:64:
         4f:89:a9:3e:81:9c:37:63:5f:df:c6:2b:a7:3b:f2:02:97:10:
         f2:ae:20:ee:d7:be:2d:7d:59:69:78:a9:c7:dc:f8:8c:0e:bb:
         f3:f3:dc:e7:a8:58:bd:ff:80:cf:cb:31:17:2e:9b:f1:b1:5d:
         4e:0b:89:d6:3d:b4:8a:ac:de:8d:61:43:7f:91:b3:36:67:ba:
         c1:18:79:d3:42:95:59:b7:86:c8:2f:ed:ae:18:c8:96:96:33:
         f4:3b:7d:c2:61:5b:da:9f:5c:2f:f4:02:2a:94:19:41:9e:72:
         11:27:7a:ba:db:a3:5a:42:ce:29:21:3c:37:f2:ac:5d:63:6d:
         73:06:12:23:61:9c:9a:e4:52:91:0e:67:25:d5:46:8b:cd:ce:
         9a:43:8b:87:76:15:6f:90:c5:f2:ea:fc:72:22:c8:54:47:09:
         ac:2f:6e:fd:06:c3:bf:ec:d5:84:97:f7:ba:ee:53:42:0b:0a:
         4e:6e:5f:6d:ca:7a:b2:97:62:08:9b:e4:f5:9c:b9:0c:de:c7:
         5b:a4:c8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----