Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/40fd47f00f59937f797245c019fbcdafd3047a83.roa
File:                     40fd47f00f59937f797245c019fbcdafd3047a83.roa (raw, json)
Hash identifier:          nCD6RKO+lZcz6E9a/51QvdXv0BWmYmissVi+YGl5wwQ=
Subject key identifier:   78:DB:99:F6:3A:F2:AB:CD:C6:B8:F7:E3:F7:4A:2A:48:4B:56:24:CA
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F9A1E
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/40fd47f00f59937f797245c019fbcdafd3047a83.roa
Signing time:             Wed 24 Mar 2021 14:44:01 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1022494 (0xf9a1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=40fd47f00f59937f797245c019fbcdafd3047a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:72:b1:84:4a:5a:ca:f3:3a:66:3a:58:fb:bc:
                    7d:40:65:1d:b3:01:58:52:ee:5f:27:4f:fe:bc:74:
                    73:ff:ff:6c:e6:e2:29:74:dd:1d:37:c8:5e:c6:a8:
                    86:cd:03:6c:01:0b:33:d4:39:79:1f:fa:80:19:e2:
                    cc:e5:86:7b:41:1c:62:ae:df:dd:0d:2a:31:54:f5:
                    01:cc:49:ec:cf:dc:a4:02:e1:52:e9:66:19:2f:d5:
                    8c:da:95:0d:ce:4f:36:f6:4d:16:c8:1e:b3:4e:f3:
                    bd:04:54:09:0e:35:7b:cc:df:28:f5:d2:b6:0a:0e:
                    98:4e:2a:88:2e:d8:70:a2:39:29:15:77:1d:3e:80:
                    ae:49:f0:b8:75:54:19:e1:67:a8:fb:ec:3f:31:34:
                    7d:b9:8e:86:33:d3:86:e5:96:7b:44:db:02:16:a2:
                    52:4c:84:46:f6:90:47:bc:12:2c:bb:e0:6a:1d:f0:
                    90:29:9f:dd:cd:32:11:37:64:9e:8f:bd:29:91:72:
                    13:ba:c1:26:b0:72:16:4e:7c:e6:fb:ed:c7:67:a4:
                    cf:46:e2:2a:ad:07:73:1e:0b:80:aa:b0:bf:e7:69:
                    df:49:1d:a5:8a:3c:5f:ac:3d:36:1a:9c:cf:7c:9b:
                    c6:e4:85:f1:60:55:72:f6:af:8f:b0:9f:75:83:47:
                    61:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DB:99:F6:3A:F2:AB:CD:C6:B8:F7:E3:F7:4A:2A:48:4B:56:24:CA
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/40fd47f00f59937f797245c019fbcdafd3047a83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:1c:69:1e:dc:84:35:9a:13:a4:32:d8:16:ff:04:b8:ac:aa:
         59:f6:9f:64:8f:05:ec:a9:e3:9d:50:8d:55:65:d6:e2:69:38:
         08:a2:a0:7a:14:aa:e8:1e:19:62:37:d0:a7:1f:86:2b:ed:7f:
         ae:3f:0e:f8:04:06:6d:01:3e:9b:fb:59:a5:f8:63:74:f1:b0:
         4f:69:99:54:e9:bd:44:c6:19:aa:28:34:4a:69:ec:f6:e7:d2:
         1b:31:6c:17:16:59:5d:10:e0:e9:1a:4f:62:4c:d9:70:4d:0d:
         29:cd:fc:b6:44:8c:de:99:37:2b:4b:74:16:a4:37:50:d6:84:
         3d:b8:60:72:70:16:d3:2e:32:65:94:17:c8:05:ba:eb:a3:a6:
         4d:d3:52:c1:8a:e7:65:9d:dc:16:4f:d5:d2:6c:4a:dc:08:00:
         dc:39:d7:65:96:6e:12:13:5c:84:40:bd:1f:d8:05:3e:17:77:
         fe:50:d6:02:ad:70:98:d7:b5:9a:4c:65:c4:f4:dc:8b:fa:7b:
         a6:af:34:08:22:d4:f3:7c:59:3c:61:59:6e:46:29:04:2b:86:
         32:55:22:22:bc:f9:f8:6c:ce:fa:ab:52:84:f1:b5:3f:56:37:
         e4:a4:d5:f4:6c:9c:f1:e4:aa:23:d7:ee:c1:f7:a8:8b:52:bb:
         98:59:83:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----