Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3b1f83b7ab1c1a8fa43ba9d3c753329557bafe3e.roa
File:                     3b1f83b7ab1c1a8fa43ba9d3c753329557bafe3e.roa (raw, json)
Hash identifier:          AZ9zH5qvka7NBoJyO9exYii962f631fSwvbUqqBXXYw=
Subject key identifier:   10:B7:F4:E7:30:B1:CA:AE:9C:CB:40:F4:29:BA:4A:74:43:A2:D9:D5
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       10B126
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3b1f83b7ab1c1a8fa43ba9d3c753329557bafe3e.roa
Signing time:             Wed 24 Mar 2021 14:44:24 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.138.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1093926 (0x10b126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=3b1f83b7ab1c1a8fa43ba9d3c753329557bafe3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:87:70:a2:f7:37:8d:e0:03:d7:0e:b8:07:a5:
                    25:99:64:a5:8e:c5:e9:73:5f:2c:19:eb:35:fa:4c:
                    3b:be:e4:3b:55:2a:67:4a:d8:c6:c0:87:d5:3a:c8:
                    f6:04:14:f5:4d:df:f0:bf:54:09:48:35:11:d2:ac:
                    e2:a3:5f:22:7c:2d:32:d7:2b:47:a1:6b:9a:e4:0c:
                    3d:6a:5b:09:d5:aa:c3:13:02:e3:02:88:58:ff:97:
                    33:8f:f2:92:86:3f:c8:6d:a4:26:93:7d:46:4c:c3:
                    20:32:40:ef:20:30:e4:7d:fe:31:fc:b7:db:4e:9c:
                    17:b2:96:37:c9:75:fc:b3:46:5c:d2:61:ac:1e:99:
                    03:98:e7:fd:a6:69:a8:79:7b:b1:f4:56:16:48:df:
                    a3:64:89:d5:ff:2d:e0:5f:da:56:58:c0:07:dc:12:
                    e6:4a:f1:38:4a:58:82:95:23:3b:87:fd:68:c9:38:
                    ff:eb:5b:f0:67:f7:55:38:98:3d:fc:25:89:42:a9:
                    3a:24:b1:69:18:08:a2:1e:a3:c8:e7:4e:c4:1a:47:
                    8d:c2:08:d5:f1:fb:97:d4:24:be:25:19:70:df:51:
                    fc:0e:d3:86:2d:32:37:07:3b:cf:74:bd:7b:87:7c:
                    f3:59:ba:7e:bd:3b:4a:37:db:cd:45:9f:2a:f6:92:
                    31:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B7:F4:E7:30:B1:CA:AE:9C:CB:40:F4:29:BA:4A:74:43:A2:D9:D5
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3b1f83b7ab1c1a8fa43ba9d3c753329557bafe3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:a2:65:16:b3:95:ba:4f:fd:a8:54:dc:cc:d4:7b:c3:ec:35:
         a3:de:3d:1e:a2:3c:5d:b4:12:b1:78:65:3b:56:19:17:8e:33:
         dc:fa:37:ca:fc:34:d3:5d:bb:ba:e2:25:9e:6b:79:78:c1:ee:
         de:8c:15:6f:ac:d7:c8:c9:fb:4b:7a:85:54:5b:37:c1:1d:26:
         f1:81:5e:25:9d:f7:9c:f7:dc:3b:fa:03:01:ea:e1:89:2a:10:
         0e:18:f8:3b:fe:23:72:2c:82:2c:e3:3e:eb:3d:fc:bd:6a:8b:
         e6:a2:7b:af:92:cb:33:25:01:b9:78:ee:78:78:80:fa:9f:34:
         6e:83:31:e7:84:09:f6:99:76:b4:40:96:05:ce:14:fb:01:37:
         e2:a2:31:b7:73:af:e2:26:c6:ba:38:01:78:5a:67:e8:e3:c0:
         31:b7:fe:d9:e7:f2:8d:cd:b4:51:b8:0f:3c:a2:ef:7a:2e:db:
         68:ea:4c:1e:2f:c2:cc:11:2f:ac:32:d3:68:00:ac:28:5f:e4:
         a0:c0:d9:bf:53:2c:ee:c3:a0:75:32:ed:bd:2d:5d:93:8e:e0:
         cd:64:bc:c5:5d:a0:c5:b6:41:c8:8d:52:89:3a:ea:35:a7:b2:
         26:74:61:32:09:bf:cf:b5:a7:6b:0f:f1:88:9c:95:d6:7c:0f:
         2f:70:61:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----