Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/29ef8132221fd32264373c82afe23d9152ecadde.roa
File:                     29ef8132221fd32264373c82afe23d9152ecadde.roa (raw, json)
Hash identifier:          64u216N8zgwQ6hVhw0SsrrD5PbvnRj7U6DzUjr4Hplc=
Subject key identifier:   A8:FF:BA:C2:90:1C:CC:3B:50:7F:28:2B:69:03:77:90:05:A1:E4:8A
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0FD564
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/29ef8132221fd32264373c82afe23d9152ecadde.roa
Signing time:             Wed 24 Mar 2021 14:44:07 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1037668 (0xfd564)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=29ef8132221fd32264373c82afe23d9152ecadde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:51:6a:8b:ca:76:00:e1:e2:56:b6:8e:e9:0d:
                    b9:28:bd:f1:e9:e1:fb:ca:11:0b:36:b5:f1:c7:0d:
                    d4:0f:ef:68:35:54:50:96:e7:72:05:b8:d8:5d:05:
                    a3:34:06:c4:9e:7b:26:c4:63:5b:31:3b:92:78:78:
                    1b:19:3b:3c:63:03:ee:52:8b:16:6a:53:96:32:eb:
                    7a:3c:c1:1b:5e:75:3c:aa:49:8b:9b:ac:dd:66:8a:
                    99:65:47:4e:3c:22:e6:e5:f1:32:7d:9b:b7:f5:46:
                    21:ca:58:ee:f6:02:7a:66:3a:93:0b:44:a8:66:e3:
                    e8:c3:10:e8:0d:9c:8a:ce:c8:3a:33:ed:8d:9a:b9:
                    3d:1f:75:72:43:8b:45:11:86:51:96:13:c3:1c:2a:
                    34:f5:3a:0f:79:f2:5a:46:58:de:71:8e:34:cb:01:
                    e9:88:47:67:b7:ee:ac:9a:68:55:d3:40:33:22:3f:
                    44:59:95:2b:90:e0:c3:a7:de:f4:3f:52:0e:62:50:
                    fb:54:d7:44:1a:ff:03:2b:2a:7c:2e:a8:e8:bc:36:
                    f0:a6:8b:0b:30:e3:63:17:74:8c:56:1c:b0:b4:c8:
                    1f:83:60:91:15:9c:57:99:26:f5:c9:7c:52:c8:51:
                    a4:0d:41:00:25:14:8d:24:60:44:f6:d7:2a:87:51:
                    46:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FF:BA:C2:90:1C:CC:3B:50:7F:28:2B:69:03:77:90:05:A1:E4:8A
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/29ef8132221fd32264373c82afe23d9152ecadde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:a7:2f:6b:ac:ea:0c:01:55:24:c9:32:22:7e:07:8a:29:e2:
         55:e6:4f:fd:fd:c5:b9:29:d8:e6:14:88:d5:3e:54:10:ec:3b:
         8e:c0:d7:70:b5:25:14:73:42:cf:4c:fa:78:e6:fc:96:8d:c6:
         ac:4e:ad:39:62:2b:ca:93:4f:e5:cd:1c:15:ad:1a:e1:1c:21:
         75:0d:38:98:0e:c0:7f:e4:d1:11:d8:0c:00:88:26:4f:e1:08:
         50:ba:84:16:b2:a3:dd:63:8e:1c:1d:1d:20:cd:1b:c0:66:8e:
         fe:39:e1:dd:b0:24:5d:98:57:cc:3b:fa:58:dc:da:ff:32:13:
         54:53:37:48:e0:8f:fe:79:30:72:f7:52:45:41:4d:79:32:40:
         ce:b6:bb:94:4f:7a:42:13:21:21:79:76:dd:bf:12:44:a6:5a:
         99:f7:16:6a:95:50:af:42:af:5d:4f:bf:d0:c7:4d:3a:0c:9b:
         4d:8e:7c:e3:0b:ca:ba:96:fd:fa:21:c7:80:cb:34:e6:d9:20:
         42:c6:7e:02:6f:f3:04:90:41:51:c7:ef:bc:00:ca:d6:ce:98:
         cd:a7:0e:97:15:e0:6b:cf:16:d5:12:85:47:30:dd:c1:f8:5a:
         bf:00:96:90:40:3c:9a:9b:30:c0:96:bd:6b:ed:9b:98:83:f2:
         63:10:c4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----