Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/35ede766cbf6c0f3528c12b9c6caab95accad4ab.roa
File:                     35ede766cbf6c0f3528c12b9c6caab95accad4ab.roa (raw, json)
Hash identifier:          WNViqaohUOl2BonO6llMK7MQ6kyI3ZhdIFJs/oX6oAQ=
Subject key identifier:   CA:C3:DE:AA:A3:CB:04:CB:51:78:32:22:20:09:0D:EB:C0:F8:D9:60
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0FDDD6
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/35ede766cbf6c0f3528c12b9c6caab95accad4ab.roa
Signing time:             Wed 24 Mar 2021 14:44:07 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1039830 (0xfddd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=35ede766cbf6c0f3528c12b9c6caab95accad4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1a:63:43:da:2a:56:78:1c:18:d7:81:58:b5:
                    76:a1:74:aa:51:3c:10:53:fb:4f:b8:d3:63:44:db:
                    92:f0:1b:9c:ea:91:80:e2:7e:56:fe:bc:bd:0a:f1:
                    7e:40:34:20:82:3e:e0:09:ff:f1:a0:a6:a9:ab:98:
                    aa:a5:27:e1:44:c6:f9:d6:74:26:11:5c:5a:ad:32:
                    db:44:80:d2:c3:04:39:47:b6:bb:03:71:85:f7:7f:
                    38:96:f2:5e:89:61:e9:fd:44:bf:4a:e0:8f:db:d4:
                    ab:0c:92:52:11:16:3d:a4:0e:31:e3:7e:64:1e:26:
                    ce:6c:ad:2e:73:85:c3:59:4a:bf:34:78:1a:53:98:
                    9b:da:c1:90:ba:ad:1e:7c:45:47:16:2b:35:4e:7a:
                    e1:90:4b:e9:52:ae:a8:e2:0c:96:61:a2:df:41:b8:
                    5f:9e:0d:b5:48:b2:b8:cf:9f:d1:dd:9c:f3:3d:64:
                    aa:8a:7d:04:d8:9e:8b:c4:9f:ad:7b:c8:0d:88:4e:
                    f9:ff:d3:ca:13:53:3a:34:b9:a2:83:5f:7e:ed:90:
                    2b:2a:50:ca:2a:74:c9:2f:ed:73:87:08:2b:ea:82:
                    eb:92:4e:cc:59:1e:51:8a:82:c1:fd:c0:38:f8:81:
                    62:22:04:dd:ac:27:55:54:e6:88:c1:b6:c3:4d:33:
                    e4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C3:DE:AA:A3:CB:04:CB:51:78:32:22:20:09:0D:EB:C0:F8:D9:60
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/35ede766cbf6c0f3528c12b9c6caab95accad4ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:dd:1e:d2:9c:a5:8f:00:4d:58:61:bc:47:ac:20:f0:7a:2e:
         cf:0d:18:56:55:b7:09:35:74:02:3c:18:4a:4f:53:26:ea:00:
         df:8a:93:89:7d:cc:28:5b:9f:f8:3a:f9:b7:29:02:05:11:92:
         50:4f:10:22:a6:3f:13:89:03:8d:61:c6:35:5b:e3:c2:55:26:
         fd:0e:32:8a:87:f1:86:f8:0b:1d:62:ea:a5:9f:3a:e0:c5:3b:
         e4:c9:1f:c8:9b:93:7a:63:91:ab:29:75:c2:73:f8:35:42:db:
         76:4f:73:e7:86:a8:fc:6e:2f:c1:76:b0:56:1c:e4:d5:d5:ce:
         54:e9:01:0e:46:6a:01:fa:0f:3e:89:f7:57:8f:02:2e:7b:e4:
         21:50:ba:1b:16:23:34:9e:af:f7:44:57:08:f7:1a:f1:fd:d5:
         5c:ae:d9:d9:4f:84:c6:69:e9:28:b5:26:bb:fe:91:42:63:3d:
         9d:e5:b7:c0:7d:f3:32:f8:06:da:64:7e:57:e6:d8:fc:b7:db:
         1c:56:b1:ad:a7:36:d8:93:77:02:bb:c0:e4:3e:ca:63:c6:5d:
         2a:52:c6:fc:da:ca:ba:00:b0:f1:6c:83:6a:38:e0:19:a5:39:
         99:ab:de:6f:72:2b:25:c1:f8:d1:3d:81:91:0f:90:d5:48:16:
         02:26:b0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----