Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4c37b6207dc6fbc74c59ed659a53cbedf8016c4a.roa
File:                     4c37b6207dc6fbc74c59ed659a53cbedf8016c4a.roa (raw, json)
Hash identifier:          2F7c0T/0ogSIPlqH12CpiEVYnAgvJqpzFLejRg/ioc0=
Subject key identifier:   D7:28:AD:1C:82:41:7F:3E:21:2D:5C:A8:22:9B:A0:88:2E:6F:E4:15
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1035F3
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4c37b6207dc6fbc74c59ed659a53cbedf8016c4a.roa
Signing time:             Wed 24 Mar 2021 14:44:14 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1062387 (0x1035f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=4c37b6207dc6fbc74c59ed659a53cbedf8016c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e3:d8:91:5a:ff:29:4d:7e:cb:b5:1e:8f:de:
                    bb:96:a0:3b:0f:63:b9:06:4b:25:64:ce:81:aa:97:
                    30:3b:e5:07:c3:5b:46:e5:b8:5f:38:79:19:15:14:
                    58:ae:d7:6b:12:f2:15:fa:22:34:10:1f:99:73:0c:
                    7c:45:09:87:ab:25:51:2f:e7:f3:a2:72:d9:c5:ee:
                    ff:61:57:b2:cd:1b:50:b6:29:0e:87:7a:4d:31:44:
                    0a:42:83:71:a8:56:6a:ad:ed:70:14:ec:6e:d0:df:
                    0d:e8:83:81:1b:15:b9:66:cf:69:be:7c:65:2e:66:
                    35:ac:fe:26:98:74:a1:8b:47:8b:de:2a:55:29:5a:
                    da:84:33:6a:70:0d:a1:fa:ed:53:af:89:85:67:e8:
                    26:a5:8b:d8:8c:c5:ab:a6:91:be:52:2b:c2:9a:1f:
                    63:b6:b4:79:b0:5a:12:fc:6d:cc:dd:cd:7a:bd:83:
                    14:dc:60:e4:03:75:fc:57:74:81:52:4b:bd:de:d9:
                    1e:3c:07:4a:81:53:b9:30:75:49:16:b3:7e:b5:1d:
                    70:c6:f9:4e:59:38:94:a2:a9:59:e3:6b:02:5b:cf:
                    8a:91:bf:2a:02:64:5c:49:e8:b7:a7:aa:1e:1a:31:
                    99:de:28:e0:33:e5:5e:96:a2:79:8e:f3:b6:ab:ce:
                    c6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:28:AD:1C:82:41:7F:3E:21:2D:5C:A8:22:9B:A0:88:2E:6F:E4:15
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4c37b6207dc6fbc74c59ed659a53cbedf8016c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:08:81:71:e3:9e:3a:44:c0:1c:74:d5:a8:5a:bc:8d:54:d9:
         ec:35:e0:d1:5a:35:db:8c:eb:4e:69:5d:47:c2:3c:c3:29:ec:
         ee:2d:0e:ae:86:a7:29:8d:4a:0e:9e:d8:20:32:d5:0c:8a:80:
         0e:e9:06:1e:64:be:7e:e3:98:f0:28:20:ca:50:2e:98:dc:25:
         2f:fa:f8:c0:35:85:ca:62:0d:1f:3d:de:72:96:ee:90:3a:7d:
         2e:7d:df:a8:88:8b:bb:3e:34:be:21:fa:68:d9:4b:29:7a:13:
         0b:57:c9:18:d5:15:8f:eb:63:23:ff:7d:58:d0:f2:38:4f:c5:
         99:62:02:39:56:20:f4:97:b9:c5:4d:a0:52:b9:86:98:03:2a:
         ac:98:85:ae:7e:ae:59:80:69:73:e6:5f:f2:17:61:a2:db:f7:
         82:5f:7b:dc:51:31:62:a3:d5:70:6b:66:c1:77:dc:13:7e:58:
         7a:38:a7:00:d8:35:3a:ea:30:47:42:ac:45:14:e0:df:74:54:
         3c:76:98:bd:83:a0:d8:07:d7:78:86:63:c1:60:f7:c3:6c:36:
         9d:82:99:d3:db:6a:33:8a:00:1f:53:9d:69:79:6a:99:3f:1f:
         38:b0:7b:0c:55:bf:1f:f4:37:b3:fe:75:ed:08:fd:3c:7b:a6:
         4a:ec:71:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----