Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/26129bed6a8a2f1c1b8544e983d6fef5cb665dda.roa
File:                     26129bed6a8a2f1c1b8544e983d6fef5cb665dda.roa (raw, json)
Hash identifier:          47ECL70BYqF3Cm8e2x5lxwUQctDAHemhnIU6LOuYhAo=
Subject key identifier:   9F:26:F7:86:D2:3F:F0:49:94:81:2B:88:52:6F:89:A0:D3:8B:6F:2E
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0FEDD4
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/26129bed6a8a2f1c1b8544e983d6fef5cb665dda.roa
Signing time:             Wed 24 Mar 2021 14:44:09 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1043924 (0xfedd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=26129bed6a8a2f1c1b8544e983d6fef5cb665dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2b:6f:aa:26:66:f2:aa:90:51:6c:23:0b:ca:
                    cc:69:76:8f:fe:ff:d9:cc:c2:9a:1e:0a:16:65:05:
                    41:e6:1a:3c:7d:d5:5a:9c:b7:47:e1:e2:21:df:dd:
                    0b:03:13:e4:33:84:68:a3:08:a0:a8:15:67:5e:d4:
                    01:0b:51:72:b1:64:78:58:a5:84:ef:55:66:a5:87:
                    35:8d:75:7c:37:00:c2:06:54:cb:79:08:89:e8:84:
                    68:67:f8:b0:74:14:5f:a0:0e:cf:7b:ce:9e:72:f8:
                    45:9c:97:04:d9:14:52:53:50:4b:83:d7:25:1b:cf:
                    36:79:e4:33:ed:f8:d9:72:73:55:5d:cf:50:3c:f2:
                    ab:b3:87:b6:92:32:e1:5c:37:0e:2c:29:59:7d:88:
                    a2:dc:45:d7:04:17:54:cb:c6:4a:03:9a:d0:13:72:
                    4e:36:a4:13:30:ae:af:72:39:46:77:fe:ac:83:9a:
                    15:2f:c0:74:94:f2:a2:51:14:a4:8d:bc:67:eb:f8:
                    4f:da:e4:cd:ed:9e:8b:b7:6a:6c:98:43:72:59:00:
                    50:b2:d3:ab:f4:80:54:15:a5:7f:65:81:0c:86:93:
                    7d:6f:08:85:74:cd:93:a5:c1:25:15:df:4b:7c:41:
                    0b:77:19:bd:d0:28:e4:89:32:e1:6a:5e:f8:c5:5f:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:26:F7:86:D2:3F:F0:49:94:81:2B:88:52:6F:89:A0:D3:8B:6F:2E
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/26129bed6a8a2f1c1b8544e983d6fef5cb665dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:49:df:11:8d:50:08:54:f1:d0:87:8e:9c:32:dd:bd:39:4f:
         84:50:59:b0:9c:77:20:af:a1:43:44:65:38:51:4e:8d:a7:dc:
         e0:9f:ed:65:4b:19:98:26:f1:8d:3d:55:c8:e6:0b:87:4e:7a:
         da:47:82:0d:06:8d:97:39:1f:a8:55:14:26:d7:fb:55:84:6a:
         22:69:ea:0f:7d:c9:5f:ae:d2:8c:6f:0e:b2:2a:81:ac:e1:05:
         a4:59:db:7c:69:81:79:84:7e:c9:ed:8b:68:45:5c:9d:0e:01:
         03:53:7f:6c:f7:91:89:58:da:9d:7f:35:a0:c4:76:d3:be:c9:
         c3:20:8d:80:3b:d8:f3:7c:b0:5e:2f:55:5d:95:d7:b8:5b:0c:
         84:bb:0e:9c:fa:ed:b0:2c:1d:83:9b:81:b5:8d:b6:4a:76:6e:
         ca:6a:a6:19:41:2c:d9:2b:fb:7c:1d:6b:c5:a6:0f:32:e7:7a:
         5b:fe:59:9c:e5:fa:af:38:e5:39:ef:40:66:0a:34:b9:0c:71:
         10:f3:25:de:8e:c2:a9:d8:ee:67:37:bf:7c:dc:25:77:b6:b2:
         cc:6b:03:a9:b9:32:5f:3c:27:0e:79:d8:ac:cf:cd:9d:c6:1e:
         50:9b:59:95:e1:04:74:4b:37:84:42:a6:ae:89:d4:95:6c:74:
         05:6a:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----