Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4c7f4497b468ddb49077ca2c9cccce5200eae524.roa
File:                     4c7f4497b468ddb49077ca2c9cccce5200eae524.roa (raw, json)
Hash identifier:          irzLoL0KcvAOs1ZNFJHudG7URV6s0RKZo4JVlYjNJVs=
Subject key identifier:   6E:0E:AA:11:28:02:35:A6:F5:95:25:3C:D3:5A:26:C5:9F:9E:81:93
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       106763
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4c7f4497b468ddb49077ca2c9cccce5200eae524.roa
Signing time:             Wed 24 Mar 2021 14:44:17 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1075043 (0x106763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=4c7f4497b468ddb49077ca2c9cccce5200eae524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b1:0e:d3:3a:f2:2b:70:07:29:cb:eb:cc:8d:
                    01:92:40:65:fd:09:37:8d:6f:3e:45:4f:bf:51:4c:
                    24:f6:3b:eb:ca:33:ca:98:91:ac:0d:da:da:f6:74:
                    86:71:b1:19:4b:6a:c6:ec:cc:99:82:a4:8d:14:ed:
                    07:ba:f3:8f:55:0b:4d:45:6a:cc:b9:16:05:86:7d:
                    18:58:ec:bb:e5:2a:60:3d:1f:6d:2a:c2:22:84:ec:
                    1e:cf:78:93:b6:08:ae:77:1b:ca:1c:5a:11:d1:cc:
                    4a:cf:a0:7a:72:6a:1e:cb:52:aa:dd:0e:ad:d2:6e:
                    85:ab:c6:5f:32:91:03:f8:28:fc:ac:6b:c0:cc:4d:
                    95:04:9b:44:69:ef:25:df:9c:ab:f8:14:e8:97:06:
                    9c:d6:ab:d6:ba:51:87:de:6a:0b:49:d5:c0:e0:56:
                    d3:5b:36:31:22:82:df:08:e0:f1:5a:1d:5d:d5:85:
                    bf:bf:c7:fb:37:f7:9e:ee:97:12:36:3a:05:9a:ce:
                    ab:d3:35:24:0a:0e:58:70:b0:85:3f:16:18:be:fb:
                    af:b8:3e:30:fd:74:56:65:30:4f:f1:d1:be:47:d3:
                    7a:c0:36:a0:a4:4b:72:4c:bb:99:92:69:c9:c9:de:
                    eb:9e:9b:41:bc:93:62:e4:45:b7:f1:8b:d1:1d:46:
                    0d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0E:AA:11:28:02:35:A6:F5:95:25:3C:D3:5A:26:C5:9F:9E:81:93
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4c7f4497b468ddb49077ca2c9cccce5200eae524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:3b:68:fd:3c:79:7a:0b:28:c2:3d:01:49:b7:aa:8b:38:51:
         eb:74:ba:1c:92:09:bf:55:6d:9e:24:45:b7:f5:13:a8:ac:79:
         98:e0:00:fc:fc:de:4e:4f:60:19:c8:ee:c8:d6:8d:1d:34:e8:
         16:9e:a6:84:a9:3a:d6:53:15:d2:17:3a:a5:a7:48:13:67:18:
         84:64:d6:b5:18:a5:b9:23:ec:eb:61:95:7e:e1:99:f6:dd:90:
         e0:c5:29:3b:0b:4c:88:6d:78:db:1f:ff:f1:c5:69:67:1e:00:
         74:d7:d9:63:a7:8a:85:cd:72:fb:19:4a:28:2a:aa:e2:55:b4:
         d9:2a:b8:27:f5:6b:68:7a:2d:3e:ce:e9:d8:50:0a:54:ff:d5:
         b7:87:3c:03:33:d8:61:10:04:05:6f:aa:91:78:b3:0c:c7:44:
         b0:3b:28:ae:a8:d8:8a:8b:07:2c:d3:88:0b:8f:aa:6e:63:ad:
         a9:27:a3:17:f5:21:7c:1c:59:b3:c5:ab:c3:d6:c5:17:c7:81:
         e7:9e:8b:61:cb:8c:bf:ba:2d:91:4a:05:34:09:a4:19:aa:d9:
         ae:6f:f9:bc:83:e3:f9:a5:fb:9e:a4:ba:1b:67:57:d0:e4:1b:
         fa:6f:ee:1a:f8:fb:d8:93:d6:e3:91:08:01:62:4f:dc:f0:08:
         f1:76:e8:a2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEGdjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEyg0YzdmNDQ5N2I0Njhk
ZGI0OTA3N2NhMmM5Y2NjY2U1MjAwZWFlNTI0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo7EO0zryK3AHKcvrzI0BkkBl/Qk3jW8+RU+/UUwk9jvryjPK
mJGsDdra9nSGcbEZS2rG7MyZgqSNFO0HuvOPVQtNRWrMuRYFhn0YWOy75SpgPR9t
KsIihOwez3iTtgiudxvKHFoR0cxKz6B6cmoey1Kq3Q6t0m6Fq8ZfMpED+Cj8rGvA
zE2VBJtEae8l35yr+BTolwac1qvWulGH3moLSdXA4FbTWzYxIoLfCODxWh1d1YW/
v8f7N/ee7pcSNjoFms6r0zUkCg5YcLCFPxYYvvuvuD4w/XRWZTBP8dG+R9N6wDag
pEtyTLuZkmnJyd7rnptBvJNi5EW38YvRHUYNyQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG4OqhEoAjWm9ZUlPNNaJsWfnoGTMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4LzRjN2Y0NDk3YjQ2OGRkYjQ5MDc3Y2EyYzljY2NjZTUyMDBlYWU1MjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT3TjANBgkqhkiG9w0BAQsFAAOCAQEAhDto/Tx5egsowj0B
SbeqizhR63S6HJIJv1VtniRFt/UTqKx5mOAA/PzeTk9gGcjuyNaNHTToFp6mhKk6
1lMV0hc6padIE2cYhGTWtRiluSPs62GVfuGZ9t2Q4MUpOwtMiG142x//8cVpZx4A
dNfZY6eKhc1y+xlKKCqq4lW02Sq4J/VraHotPs7p2FAKVP/Vt4c8AzPYYRAEBW+q
kXizDMdEsDsorqjYiosHLNOIC4+qbmOtqSejF/UhfBxZs8Wrw9bFF8eB556LYcuM
v7otkUoFNAmkGarZrm/5vIPj+aX7nqS6G2dX0OQb+m/uGvj72JPW45EIAWJP3PAI
8Xboog==
-----END CERTIFICATE-----