Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/36245e3b5eda564c230032cb3c0caf6d2abc95b4.roa
File:                     36245e3b5eda564c230032cb3c0caf6d2abc95b4.roa (raw, json)
Hash identifier:          9T74xw/RDP6JmS+P2aEfQVnXRUk921YGlv5zBSrOq9E=
Subject key identifier:   B7:F4:65:8A:C9:42:F5:39:A6:B8:C0:4F:7C:8E:46:7E:9E:D7:0A:BB
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1033E2
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/36245e3b5eda564c230032cb3c0caf6d2abc95b4.roa
Signing time:             Wed 24 Mar 2021 14:44:14 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061858 (0x1033e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=36245e3b5eda564c230032cb3c0caf6d2abc95b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1e:91:19:a7:bd:5f:c8:ad:75:d1:8b:a9:17:
                    84:5b:11:f9:8e:be:93:1e:d3:1d:b8:5f:e9:fa:b0:
                    73:a1:e0:58:48:0d:50:b2:ea:ab:21:3f:51:a9:0a:
                    28:c3:79:df:f1:85:d8:2f:15:04:7a:18:72:72:34:
                    91:49:e1:fc:42:cd:b4:48:f8:76:0f:c3:28:45:1e:
                    89:68:91:6d:13:cd:0a:fe:ad:20:f8:62:63:b2:5a:
                    29:d4:d7:16:cd:5e:b6:f5:b6:a2:69:32:bd:5f:eb:
                    68:9c:68:9c:e3:8b:35:e5:7f:36:a8:9c:b5:a7:07:
                    eb:3e:25:f6:5b:8e:59:6f:7f:7f:bf:2b:b1:85:93:
                    1b:35:29:f6:2e:9d:da:08:0f:27:06:5e:29:fc:b0:
                    2b:e8:d0:0e:f1:0f:23:cb:b8:2a:76:95:f8:bf:f4:
                    96:f5:ac:92:ac:59:1f:be:41:96:98:24:5b:1a:c4:
                    99:ab:5c:c5:18:f7:54:bd:a8:e1:a1:25:ec:7c:2f:
                    77:b1:51:ce:49:42:de:df:04:f9:03:0c:68:0c:48:
                    da:e8:12:94:d2:73:83:a8:e0:fc:26:8e:6f:85:ba:
                    75:7c:8b:d2:71:73:5e:b7:92:d7:44:36:a6:64:9f:
                    b2:a3:0a:e9:ce:a4:ea:d8:58:8b:d2:ce:ae:c6:9c:
                    6a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F4:65:8A:C9:42:F5:39:A6:B8:C0:4F:7C:8E:46:7E:9E:D7:0A:BB
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/36245e3b5eda564c230032cb3c0caf6d2abc95b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:ae:14:2e:32:13:8b:84:d3:a1:7b:ea:26:d5:9e:8c:83:3b:
         74:6b:be:0e:41:14:51:db:e5:1d:a2:b0:7d:cc:3a:b4:46:3c:
         ba:33:b6:ed:6c:6c:e2:2a:73:0b:36:84:9e:63:b0:ca:17:9a:
         16:a7:6d:d4:df:b1:6b:d2:dc:ac:3a:f1:a8:2c:98:52:5f:84:
         8e:39:09:02:53:86:32:c9:d6:ba:e6:b5:1a:c8:c0:56:96:1d:
         87:14:56:36:63:52:2f:de:a8:5f:de:86:9f:8a:37:0a:c6:72:
         34:03:6b:36:f1:c4:11:b2:65:65:4a:a1:f5:39:f9:01:4f:83:
         a3:2c:87:fc:e2:42:16:3f:bf:2d:49:db:d0:5d:82:5a:17:5e:
         60:4b:7a:c3:85:b2:73:36:82:e5:7b:62:37:a0:13:de:a1:3e:
         e8:97:af:dd:a7:02:7e:e0:96:cf:16:62:8a:5f:66:00:e4:ce:
         e7:99:ae:cb:da:9a:ef:8b:df:07:89:57:3f:d1:be:ee:58:46:
         23:18:1c:30:d4:42:94:c9:b1:71:1b:12:2f:0a:8c:05:76:09:
         77:2e:8b:92:4d:98:f4:d7:8e:71:7e:03:8a:3c:c2:00:d8:36:
         b7:d2:47:b1:d8:d0:3e:66:4a:f9:92:7e:44:fb:53:2d:4c:57:
         81:64:01:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----