Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3d38777d6a1e25137824c4ff05b11d279d38cf4a.roa
File:                     3d38777d6a1e25137824c4ff05b11d279d38cf4a.roa (raw, json)
Hash identifier:          LWU0n4fgz2JMz+LxnXcoZiHVtjaLyKvLbZIlDkPdTkg=
Subject key identifier:   4C:09:F7:E1:73:FA:3F:67:35:C4:C0:4E:9B:11:57:EB:B6:F2:9F:CE
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       109C34
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3d38777d6a1e25137824c4ff05b11d279d38cf4a.roa
Signing time:             Wed 24 Mar 2021 14:44:22 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1088564 (0x109c34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=3d38777d6a1e25137824c4ff05b11d279d38cf4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:65:08:47:e7:69:ca:09:7e:72:6e:ba:4a:83:
                    e7:07:73:b4:03:c9:4c:f1:c6:73:7f:bb:e2:78:b3:
                    5b:df:c0:77:7c:a4:62:38:19:c5:c5:ab:7e:f4:19:
                    97:ea:42:28:48:e9:cf:db:f7:27:65:82:57:50:56:
                    cc:7a:ec:fd:11:16:ff:84:36:64:12:c0:bb:33:17:
                    4c:1e:b4:36:92:a5:4d:92:2c:14:40:4b:4e:68:59:
                    7f:be:f3:6c:44:58:ab:0c:f5:a7:5c:29:bc:be:94:
                    fb:fe:8b:6e:6d:04:72:fb:98:26:29:97:32:5a:81:
                    22:88:a1:f3:11:07:cb:a0:2f:1f:ad:4a:4a:0a:37:
                    ae:52:e0:37:f0:c9:f2:93:eb:af:87:25:e8:58:0c:
                    dd:7f:e7:d3:1e:8c:68:80:ce:82:8f:61:ba:ac:8b:
                    60:dd:00:0b:d7:49:a3:08:de:f9:7a:05:4a:4d:0b:
                    85:dd:75:08:53:f6:a6:1e:32:f0:13:70:9c:62:d9:
                    8e:15:bf:88:a8:fe:eb:7c:9c:1d:30:88:ce:0d:8f:
                    c7:ea:42:64:50:8d:41:70:c4:ed:f4:9a:47:32:fb:
                    82:79:e2:53:5b:c1:6c:cf:dc:21:1b:5c:7a:f9:3c:
                    68:f2:5b:a6:b3:66:a2:69:c0:dc:ae:61:84:7d:35:
                    1f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:09:F7:E1:73:FA:3F:67:35:C4:C0:4E:9B:11:57:EB:B6:F2:9F:CE
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3d38777d6a1e25137824c4ff05b11d279d38cf4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:74:95:a0:12:9c:11:2f:f7:e2:64:ee:c4:bb:47:2f:f7:60:
         ff:fb:f4:2f:e7:a3:98:3b:39:6c:45:6d:10:7f:9f:f1:fd:8e:
         05:dd:1d:ea:3f:95:75:0b:98:ad:53:84:f7:18:39:56:c6:b1:
         d9:f9:0a:47:d5:54:ad:57:2c:da:74:c2:ad:f4:fc:0d:d8:1f:
         d8:74:df:99:92:85:d2:df:1c:08:b5:a3:91:f7:1d:2e:b5:31:
         8f:a1:a3:86:09:ad:93:8c:4d:8e:89:0a:16:e1:0e:c4:65:95:
         09:e6:52:f2:5f:0d:b8:33:fd:73:f0:99:9a:29:b8:e9:d4:dc:
         c9:d1:19:80:55:4c:6b:51:54:55:0e:36:dc:0d:c4:32:84:48:
         20:08:df:f0:cd:b5:da:12:97:ce:1a:17:b3:50:62:19:b7:98:
         d2:ff:f3:26:ab:42:e2:9a:16:2d:0e:be:5f:d2:cf:19:48:dc:
         b1:e3:1f:94:a4:1c:ea:67:31:c1:83:9d:e2:4d:6f:36:59:91:
         f1:6c:f5:eb:05:f8:db:be:92:64:23:c6:9e:53:13:8e:64:12:
         a4:3d:16:36:32:2d:7f:96:9f:8d:a2:ff:2d:bc:83:ce:4b:a7:
         a1:ba:82:a3:a2:eb:55:8a:89:f4:bb:61:18:f2:43:ed:4e:54:
         de:8a:1b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----