Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/520c89d069a24599227b2975b28a344ca5593aca.roa
File:                     520c89d069a24599227b2975b28a344ca5593aca.roa (raw, json)
Hash identifier:          0nXEgSB//LtgbcpOdUaUC4pUVqSo+t9ncbOT+kyCsxY=
Subject key identifier:   1C:EE:96:62:66:FA:7A:00:0F:CD:6E:B0:58:D6:2A:88:05:D8:5D:F5
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1027BB
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/520c89d069a24599227b2975b28a344ca5593aca.roa
Signing time:             Wed 24 Mar 2021 14:44:14 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1058747 (0x1027bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=520c89d069a24599227b2975b28a344ca5593aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c6:af:8b:0b:c8:fa:a7:25:21:73:81:74:ec:
                    57:dd:f0:3b:ab:b4:33:6f:7b:67:32:c9:31:27:2f:
                    19:34:e2:9b:5b:de:b3:04:ce:8a:44:71:5f:2a:74:
                    f7:b5:2d:98:2d:88:76:57:ec:86:73:57:ad:b6:a4:
                    45:f2:9a:68:69:75:15:97:e9:ce:33:b4:ce:8b:9e:
                    c3:b9:6e:9f:79:38:7b:30:d1:48:eb:b4:f7:2a:5e:
                    b1:fa:ce:8d:6a:99:f9:f3:fc:a5:e9:6c:34:16:bd:
                    8c:59:c2:61:bf:b3:bc:ac:e3:ef:56:ed:bc:dc:84:
                    5d:87:f7:d9:af:60:dd:80:30:b3:08:52:ba:ad:d1:
                    1a:f5:40:49:ad:47:bd:0a:bd:b2:73:70:fe:cf:84:
                    fc:50:e3:ee:81:ae:ca:ae:12:17:bb:14:c0:bc:08:
                    e3:89:b8:61:8d:01:34:34:52:a7:4b:f3:19:3e:da:
                    da:fa:69:9b:8f:0f:ed:f5:24:5d:95:2c:4a:b1:e1:
                    cd:d7:29:a6:60:ac:86:99:8c:e9:96:2c:ab:03:b4:
                    5a:bb:26:4a:4e:b2:3b:5d:02:4c:96:1e:e6:98:05:
                    f7:77:aa:97:cd:65:34:89:05:8c:e8:e7:43:17:73:
                    35:64:09:fa:ea:d2:45:c1:16:50:9c:48:c3:95:81:
                    ec:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EE:96:62:66:FA:7A:00:0F:CD:6E:B0:58:D6:2A:88:05:D8:5D:F5
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/520c89d069a24599227b2975b28a344ca5593aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:7a:df:91:fc:63:2e:1d:c6:e6:74:0f:09:b6:49:77:b8:2c:
         6f:3e:68:3a:6b:41:68:d4:9a:2d:29:32:6e:c4:6b:ff:18:e1:
         75:55:e9:2e:34:4d:3d:87:29:5c:7b:38:8e:90:94:9d:19:31:
         41:ec:00:81:9b:05:89:d8:59:fa:59:65:a7:68:24:1a:a7:26:
         c4:2e:79:b7:10:51:db:ee:d0:53:87:74:13:52:c4:09:69:48:
         4f:e6:d2:09:a5:29:38:9a:30:7b:ba:4d:77:c2:24:51:82:17:
         1d:a0:dd:a8:1a:aa:cd:ec:57:c5:f2:e8:95:e9:b6:97:e1:c9:
         45:0b:d3:ba:8d:be:5b:14:ee:f1:6b:f1:a4:6f:fb:de:b0:1f:
         15:f3:43:69:6b:79:c0:91:79:5d:4a:91:17:48:52:c3:b3:23:
         74:d4:72:c0:86:bc:f2:93:a5:59:ef:e1:97:96:93:59:75:8e:
         8d:2f:e4:aa:d2:1d:75:07:6a:33:7c:07:9c:bc:de:86:13:3e:
         82:f4:27:51:73:d4:bd:79:49:a6:cf:74:0d:87:eb:9a:4e:3f:
         ed:92:87:d9:29:27:d0:5f:8e:a9:15:34:7e:ca:a8:66:10:43:
         93:4f:a1:08:89:7d:f4:36:6e:c6:fb:a1:e7:bb:8b:46:e7:f7:
         da:6f:63:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----