Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/52ca4d10c8dd800373790774934ad8cf9d9b2a4a.roa
File:                     52ca4d10c8dd800373790774934ad8cf9d9b2a4a.roa (raw, json)
Hash identifier:          8ntnU3+eCb3k1nmoEHZQwh0NbDlsn1bBNwspfyk20dM=
Subject key identifier:   66:26:94:76:68:D3:AD:1A:93:E9:AF:A1:F5:B4:2B:D8:24:D2:69:25
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       10DCA1
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/52ca4d10c8dd800373790774934ad8cf9d9b2a4a.roa
Signing time:             Wed 24 Mar 2021 14:44:27 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1105057 (0x10dca1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=52ca4d10c8dd800373790774934ad8cf9d9b2a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:dd:32:33:ec:d6:31:5a:f8:58:14:24:1c:51:
                    d8:13:d3:0a:42:af:a1:5a:16:8a:20:09:46:6f:31:
                    87:48:70:df:12:be:3f:5a:ba:71:43:3d:12:05:98:
                    1b:57:8c:91:76:c2:a7:4a:6f:f4:0f:68:01:d5:90:
                    5b:17:b1:0a:6a:1f:55:d9:10:54:c7:01:72:cb:b8:
                    e3:bd:32:49:4c:aa:78:d7:25:b2:91:17:a1:3b:c1:
                    ae:e6:9e:f6:d0:a6:ae:f9:d9:04:db:90:2c:b2:c2:
                    fc:62:e1:ed:99:78:de:b7:2f:e3:01:ff:87:0c:d6:
                    25:3d:d2:65:90:ad:8e:30:ac:e9:26:4f:56:71:a1:
                    f4:2c:9f:69:83:85:84:20:c1:f6:f4:60:2d:51:8c:
                    87:0e:8b:48:8b:db:86:9f:bf:8e:47:ce:a5:af:41:
                    41:b4:be:66:76:69:98:0c:eb:08:db:d7:99:40:1b:
                    91:b6:da:30:6e:f3:de:0a:55:be:f0:7a:5f:42:8f:
                    4e:e3:c2:93:2b:58:92:6e:94:54:f7:b4:4e:b6:8d:
                    8c:2c:f2:f9:92:c7:26:9d:28:0a:f4:d7:90:34:fc:
                    05:39:bb:6e:ce:0f:2a:64:17:21:0f:92:4d:f3:1b:
                    b9:41:a8:45:2f:6b:96:da:cc:a4:de:29:8e:4d:69:
                    a4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:26:94:76:68:D3:AD:1A:93:E9:AF:A1:F5:B4:2B:D8:24:D2:69:25
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/52ca4d10c8dd800373790774934ad8cf9d9b2a4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:0d:ea:51:a4:1a:e8:fb:db:1e:1e:68:24:57:88:af:85:65:
         f5:67:ea:4a:cc:90:2d:98:f7:0f:d5:96:df:6d:eb:36:a1:c8:
         fe:c1:4b:35:e1:f6:a4:f7:03:de:14:d6:15:02:5c:bc:62:94:
         ca:4b:f4:c6:f7:75:35:66:22:35:5a:dc:ad:31:f8:6a:6f:00:
         7a:5f:d2:2e:bc:40:77:24:df:5f:d5:5a:4c:4f:da:94:f9:f3:
         14:98:58:22:89:71:e2:76:7b:dc:c8:25:e9:0d:e0:ee:6c:6d:
         60:b7:72:82:3b:53:38:eb:46:a5:fb:28:94:62:f5:90:f7:9d:
         3d:f1:77:6d:13:c0:49:ff:78:7f:ec:86:52:85:e4:1c:86:0a:
         c4:2d:f2:45:1a:66:0f:1a:61:6b:e2:c1:89:d5:8b:ae:33:0f:
         11:dc:67:4b:7e:cd:5b:00:21:d0:d5:15:b0:3e:63:b4:78:85:
         cc:78:29:50:88:74:48:cf:ee:ed:92:ca:5f:2d:69:0a:96:ed:
         a1:5d:d2:ad:b1:25:6f:d4:93:c3:10:ab:4b:df:97:3b:8e:f9:
         5e:05:58:9f:45:52:61:65:05:93:11:77:7d:c7:9d:92:de:93:
         40:f4:69:77:1d:86:a9:9c:f3:10:fb:60:fa:9a:41:d2:c3:55:
         da:16:97:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----