Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/48fe9a696b0b7c403d1a0ad809bc1331a883607a.roa
File:                     48fe9a696b0b7c403d1a0ad809bc1331a883607a.roa (raw, json)
Hash identifier:          DebiSmLiY4/LthiNxes5HgPlYmw4XGbXwBDix416ABU=
Subject key identifier:   D3:45:63:C4:CB:38:08:C9:DD:87:2F:6B:47:F0:3A:FF:50:19:64:05
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0FBB65
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/48fe9a696b0b7c403d1a0ad809bc1331a883607a.roa
Signing time:             Wed 24 Mar 2021 14:44:04 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1031013 (0xfbb65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=48fe9a696b0b7c403d1a0ad809bc1331a883607a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:bc:a4:f9:c3:6d:10:59:62:c5:7f:68:44:
                    28:9c:25:ee:fb:da:23:8c:1f:71:4d:07:90:7e:a7:
                    38:c0:77:11:af:63:fd:e0:6a:64:05:39:46:44:75:
                    22:79:e1:87:cc:d6:f2:dd:79:25:1e:a2:09:7c:e6:
                    df:b8:56:86:a5:f3:09:86:b1:0f:6e:8e:59:70:22:
                    a5:e0:f3:f4:d6:e5:16:2c:fa:72:3b:cd:af:b3:d8:
                    68:e2:c0:df:84:ba:ba:3c:d0:12:49:5a:f3:91:3d:
                    c9:b0:9d:ab:94:46:81:26:be:fa:69:bd:0a:5f:da:
                    bb:a6:2f:bb:3f:35:9e:b0:cd:e7:89:0a:42:fc:a1:
                    26:73:80:47:ce:0c:63:c1:87:69:c6:da:f6:ae:ac:
                    fc:82:1e:97:b1:f6:e6:c7:25:4d:c1:8a:9a:5d:d9:
                    63:26:2a:d0:d0:f3:4b:72:9a:11:14:36:e4:09:bc:
                    8d:12:4b:62:21:80:94:1b:46:99:84:98:c0:cf:ec:
                    58:d7:92:95:2b:e3:b8:bb:25:75:a8:5a:3e:6b:45:
                    85:02:6b:05:63:ff:15:1c:87:97:26:7d:05:11:bc:
                    2a:2e:e0:54:59:9f:1a:30:95:7e:0c:21:fe:3b:ee:
                    9b:f5:d3:76:27:1f:1f:90:c6:5d:b1:0f:15:cd:e5:
                    9c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:45:63:C4:CB:38:08:C9:DD:87:2F:6B:47:F0:3A:FF:50:19:64:05
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/48fe9a696b0b7c403d1a0ad809bc1331a883607a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:62:09:6c:73:bb:87:ec:ae:11:f3:b7:d4:97:fa:25:a6:f2:
         5d:bd:f4:58:d7:49:07:47:77:5e:41:8e:c6:12:95:3a:8d:a8:
         f7:58:e4:d8:1e:a9:4a:49:88:7a:bb:4f:29:9d:ac:95:4d:7b:
         08:df:35:89:86:82:e1:f6:26:49:f8:c5:86:aa:7c:0a:a1:8e:
         81:fa:af:61:dc:2e:35:42:83:99:5a:c1:4d:fe:c9:6f:11:91:
         0d:c1:d9:51:37:92:68:90:2a:6a:fd:a7:05:30:64:69:06:0d:
         b0:a0:d4:db:90:56:e6:ea:ca:fe:54:a6:31:da:08:0c:15:c9:
         b3:d3:ca:b8:57:e6:08:e9:8e:b9:22:9a:6d:d4:24:73:f6:1b:
         dd:87:d5:ba:e7:cb:75:2d:1d:59:b5:ab:dd:ae:2d:88:ef:a3:
         c4:c3:9b:b4:79:87:1f:03:dc:c2:14:76:1c:f1:01:8c:ce:f6:
         a1:87:7c:59:3a:da:58:88:f4:0b:d0:4e:6c:4a:08:c3:03:6b:
         57:a7:ae:b8:08:71:ab:72:b6:b2:37:6c:19:e4:b3:60:fe:74:
         d4:2d:8d:71:a7:0c:6f:4f:02:80:dc:43:2b:9b:0d:66:c4:ae:
         68:4d:b5:f6:b9:d8:92:13:45:85:a2:d0:9c:bc:39:c9:ed:97:
         aa:62:6a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----