Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/56814dae3ccf449eb397e1f22a2b77e0191c8292.roa
File:                     56814dae3ccf449eb397e1f22a2b77e0191c8292.roa (raw, json)
Hash identifier:          8EaI5szVysC7GEfDfcrh2opUqlDJuorz974UyPe8WKY=
Subject key identifier:   EC:CE:FF:A5:05:52:A6:C5:95:FA:DB:9D:A4:BA:07:6D:CD:8E:B3:89
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1008B0
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/56814dae3ccf449eb397e1f22a2b77e0191c8292.roa
Signing time:             Wed 24 Mar 2021 14:44:11 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1050800 (0x1008b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=56814dae3ccf449eb397e1f22a2b77e0191c8292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d5:76:cf:86:f2:53:35:10:a6:1f:4d:02:df:
                    75:17:c9:9f:00:4a:62:60:75:89:31:aa:8d:04:34:
                    e0:db:c0:1d:30:59:d9:27:41:33:84:8f:89:f2:95:
                    5d:d8:30:dc:af:e7:6b:95:e8:b1:47:df:0b:03:2b:
                    aa:d3:c0:65:ae:ed:3b:30:9e:cf:db:43:ea:bb:d0:
                    bf:b4:0a:4e:21:34:4b:cb:58:27:68:27:75:54:87:
                    d4:4f:a3:1e:fe:5a:7d:6d:c7:70:42:63:31:cc:3d:
                    25:60:76:cc:68:1c:f7:de:16:85:43:07:16:9e:ba:
                    be:82:6a:96:6a:4a:bf:52:9e:a5:24:a4:52:ce:0d:
                    17:68:77:d1:d0:f0:a5:e5:7a:5c:5b:bf:51:cf:7b:
                    9a:75:33:4d:ab:9c:3f:56:14:45:51:ab:6f:c7:c5:
                    df:48:46:f7:46:91:3a:a4:69:bc:74:8c:ba:91:25:
                    8d:5a:65:04:d5:f8:cd:d5:fa:48:15:4a:d8:b8:45:
                    d1:db:a6:fa:b4:f0:b1:bb:00:77:3a:1a:5f:cd:55:
                    10:00:f6:7d:eb:a2:d1:84:cc:ae:ca:1a:f6:07:44:
                    02:86:33:6a:10:6b:fa:06:f6:cf:23:de:96:4c:6d:
                    24:1e:47:f8:5b:97:ea:c7:86:70:a1:ed:18:d8:36:
                    b6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CE:FF:A5:05:52:A6:C5:95:FA:DB:9D:A4:BA:07:6D:CD:8E:B3:89
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/56814dae3ccf449eb397e1f22a2b77e0191c8292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:63:dc:1b:32:e6:e2:8d:7e:61:e3:21:78:9f:58:d1:96:20:
         c1:6a:87:cc:61:dd:df:4f:ce:5f:03:c4:a8:73:fe:9f:82:e8:
         db:4b:7a:bf:0c:d4:44:f1:3c:63:55:50:e9:dc:3e:40:ac:07:
         bd:12:e2:07:0a:2b:06:60:04:e1:2d:77:74:3d:f4:8c:f9:93:
         c4:20:b0:64:14:dd:b0:9f:73:1a:b2:e2:40:d3:2f:5e:45:3c:
         14:46:32:09:e8:55:b6:fa:d3:9f:6d:01:6f:80:af:fd:74:81:
         b0:65:cc:ac:c5:40:b1:7b:d7:5c:a0:fc:59:74:0e:5f:2b:6c:
         a2:14:49:29:bf:0a:64:da:0f:7f:d7:e2:6e:64:76:1d:c1:30:
         df:08:f5:02:ea:c7:b8:09:39:46:ec:5d:95:34:70:3b:21:12:
         f3:b6:e1:78:6f:e9:e6:de:3f:9b:dd:c9:ee:5c:ba:02:1c:f9:
         80:6e:a9:e8:91:1b:ff:69:38:8b:c9:1c:41:44:0f:ff:e6:8c:
         4f:6d:95:98:18:31:4a:30:ae:19:14:ee:37:44:38:37:eb:ad:
         e0:f6:da:b1:d0:76:55:69:b2:86:20:43:39:4f:71:b4:56:13:
         84:a7:44:33:86:b2:2a:cc:18:a8:43:a6:16:5b:13:ac:87:6d:
         33:18:58:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----