Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3e979a35e5aa64b304626f58840893f6f5fbbd4a.roa
File:                     3e979a35e5aa64b304626f58840893f6f5fbbd4a.roa (raw, json)
Hash identifier:          SvNKefG7CnzA4yuKnPG0Lx4rCxzBxhUvySS9+mhy7eo=
Subject key identifier:   34:84:21:FE:74:C9:02:39:CD:17:30:E6:84:9A:63:A9:3A:FD:C3:CC
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       10E99B
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3e979a35e5aa64b304626f58840893f6f5fbbd4a.roa
Signing time:             Wed 24 Mar 2021 14:44:28 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1108379 (0x10e99b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=3e979a35e5aa64b304626f58840893f6f5fbbd4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:49:27:22:f5:45:bb:2a:c6:3f:64:da:da:1e:
                    5b:9f:06:4d:e6:60:35:38:b8:40:13:45:ab:de:7a:
                    79:e3:da:91:d3:81:e6:36:82:14:6e:98:8d:e1:5f:
                    b8:71:3f:8c:7d:fe:81:34:d3:ba:a3:fd:69:77:0e:
                    f9:e0:c4:d0:32:4d:71:59:b0:2e:b3:19:f5:bc:97:
                    7e:02:e4:5e:2a:a8:73:2c:4a:5e:1a:fa:cb:03:51:
                    c6:b2:b6:1d:76:25:a4:fe:04:20:f4:2e:32:5d:eb:
                    eb:05:c9:0a:6a:af:ca:a5:ae:04:42:d8:e1:86:b0:
                    62:79:a0:35:02:8c:ba:eb:5f:a7:39:a6:0f:96:9d:
                    0f:ad:12:ef:b3:f0:e4:1a:7f:25:0d:09:3b:ac:07:
                    0a:1b:6f:06:c6:f7:d0:cc:c8:65:2d:84:4d:18:2a:
                    e9:54:d9:94:cf:26:30:49:aa:08:32:27:74:75:d4:
                    d2:97:d9:4e:87:29:8c:e5:20:51:36:98:5c:f1:1f:
                    9a:2e:ee:f0:47:9a:23:dc:3c:6e:d0:ac:e8:db:13:
                    d9:43:95:8e:bf:5f:5f:13:e0:36:71:06:07:94:fb:
                    40:71:02:9b:91:8b:c4:b3:09:2b:ef:29:e5:06:95:
                    d1:41:b2:f9:1e:d2:d3:9c:ed:3b:a5:e2:f9:20:db:
                    af:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:84:21:FE:74:C9:02:39:CD:17:30:E6:84:9A:63:A9:3A:FD:C3:CC
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3e979a35e5aa64b304626f58840893f6f5fbbd4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:4d:6e:15:a0:15:be:73:4c:36:62:de:3c:07:35:d7:2a:9b:
         13:9b:9f:be:9b:da:d1:b0:04:14:a9:9e:e7:53:aa:22:ae:12:
         90:2b:55:6f:72:dd:81:eb:87:f7:c1:9f:07:29:50:66:5b:74:
         a3:a5:a9:1c:d1:20:5c:41:31:1c:e6:44:1f:9b:99:c0:2c:19:
         ce:69:2a:a9:0b:21:1f:6a:52:71:d2:20:50:33:e2:fe:86:96:
         55:91:90:d2:8a:8b:0c:f7:9c:6b:49:5a:18:d0:fa:a8:e1:8c:
         92:de:47:8f:07:0d:a0:59:ff:36:04:8f:aa:e5:d4:a1:dc:b1:
         6d:ba:0b:5c:db:0b:df:ee:a5:c0:eb:b5:a5:5c:b9:09:3e:f5:
         9a:99:0a:06:b9:33:8c:7b:84:79:f5:40:ad:54:f8:61:59:f9:
         60:f5:22:46:05:24:32:2e:0a:3d:dd:a9:73:15:49:fa:e1:dc:
         67:4e:ad:10:4d:d2:58:52:24:ac:c1:d3:be:5c:62:fe:33:3c:
         73:26:01:f3:ee:b5:a1:0e:fc:e9:0d:3b:99:50:1a:62:bd:1e:
         8e:f1:dc:33:e7:93:a6:52:19:76:8f:df:3d:21:4f:a3:ca:24:
         f0:2f:91:b3:ef:ab:11:a4:5e:aa:f3:95:b3:bf:59:0d:8e:af:
         b6:55:e1:73
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEOmbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEygzZTk3OWEzNWU1YWE2
NGIzMDQ2MjZmNTg4NDA4OTNmNmY1ZmJiZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5kknIvVFuyrGP2Ta2h5bnwZN5mA1OLhAE0Wr3np549qR04Hm
NoIUbpiN4V+4cT+Mff6BNNO6o/1pdw754MTQMk1xWbAusxn1vJd+AuReKqhzLEpe
GvrLA1HGsrYddiWk/gQg9C4yXevrBckKaq/Kpa4EQtjhhrBieaA1Aoy661+nOaYP
lp0PrRLvs/DkGn8lDQk7rAcKG28GxvfQzMhlLYRNGCrpVNmUzyYwSaoIMid0ddTS
l9lOhymM5SBRNphc8R+aLu7wR5oj3Dxu0Kzo2xPZQ5WOv19fE+A2cQYHlPtAcQKb
kYvEswkr7ynlBpXRQbL5HtLTnO07peL5INuvmwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDSEIf50yQI5zRcw5oSaY6k6/cPMMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4LzNlOTc5YTM1ZTVhYTY0YjMwNDYyNmY1ODg0MDg5M2Y2ZjVmYmJkNGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT4MDANBgkqhkiG9w0BAQsFAAOCAQEARk1uFaAVvnNMNmLe
PAc11yqbE5ufvpva0bAEFKme51OqIq4SkCtVb3LdgeuH98GfBylQZlt0o6WpHNEg
XEExHOZEH5uZwCwZzmkqqQshH2pScdIgUDPi/oaWVZGQ0oqLDPeca0laGND6qOGM
kt5HjwcNoFn/NgSPquXUodyxbboLXNsL3+6lwOu1pVy5CT71mpkKBrkzjHuEefVA
rVT4YVn5YPUiRgUkMi4KPd2pcxVJ+uHcZ06tEE3SWFIkrMHTvlxi/jM8cyYB8+61
oQ786Q07mVAaYr0ejvHcM+eTplIZdo/fPSFPo8ok8C+Rs++rEaReqvOVs79ZDY6v
tlXhcw==
-----END CERTIFICATE-----