Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/59a4c3ee39dc4fd6d13238266498f8ca4404a542.roa
File:                     59a4c3ee39dc4fd6d13238266498f8ca4404a542.roa (raw, json)
Hash identifier:          7UWkuDk6OZF/jskVTTuOvLjl22i3WpFC8+0p8ePbb3g=
Subject key identifier:   02:63:EB:FF:AE:51:04:96:7B:C2:4D:D0:37:81:63:CB:93:D2:43:A6
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       104F99
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/59a4c3ee39dc4fd6d13238266498f8ca4404a542.roa
Signing time:             Wed 24 Mar 2021 14:44:16 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.111.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1068953 (0x104f99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=59a4c3ee39dc4fd6d13238266498f8ca4404a542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0d:21:0a:da:dc:b2:4d:b6:b4:21:bc:cb:d3:
                    ba:83:bc:6a:11:3c:0c:21:b3:22:cf:6a:dc:fb:35:
                    1d:5e:f4:94:28:19:9e:c4:d8:d8:f4:82:7a:13:30:
                    f1:44:1d:d5:5d:d1:f4:5c:cb:bc:48:47:40:7c:3c:
                    b6:59:06:7f:38:34:bd:b2:a1:00:9b:8b:e0:68:c8:
                    d9:2a:f2:cf:a7:80:89:09:ab:6e:df:8f:c3:3d:1b:
                    a5:42:99:82:7a:13:5e:7f:be:9e:9a:7e:0f:ef:32:
                    ac:d1:d5:a2:3a:0b:73:7f:50:d8:f4:30:7f:53:30:
                    4a:7e:3b:2d:ef:49:cd:8d:e0:86:cd:32:8f:b2:98:
                    84:ee:ac:eb:18:fb:e6:11:e4:58:ac:e2:22:93:04:
                    ea:0b:b1:97:6e:88:e0:f8:89:03:63:2d:b5:09:8a:
                    7e:9a:ef:99:91:81:9e:a6:de:62:17:cd:b5:c1:11:
                    66:15:56:f9:7f:20:55:f0:97:69:b8:e0:73:3f:73:
                    7f:a6:ea:74:68:ee:e9:d5:a1:fb:24:23:8a:7d:31:
                    74:12:5d:53:b9:e8:e4:ee:e0:a9:02:e0:43:e7:e6:
                    5c:2a:f0:19:aa:4a:90:62:99:5d:1e:26:39:42:95:
                    61:c6:3a:16:22:45:05:d3:f4:4e:16:8f:9b:ab:cc:
                    70:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:63:EB:FF:AE:51:04:96:7B:C2:4D:D0:37:81:63:CB:93:D2:43:A6
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/59a4c3ee39dc4fd6d13238266498f8ca4404a542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:65:36:7e:8e:da:80:fd:c5:27:03:cb:9e:03:bf:f2:01:aa:
         fb:80:f7:9d:f4:21:b2:74:49:4b:04:80:ab:7f:56:41:f2:d1:
         93:87:7c:a3:b1:df:3f:3c:d7:b8:e9:f1:f6:0d:a0:fd:bd:9e:
         e0:3f:1f:2a:a2:82:d5:26:e5:64:34:6f:66:43:66:aa:a9:ee:
         bb:43:3e:0e:78:fe:af:96:9b:7d:31:39:0a:95:e4:84:f2:c3:
         6e:06:90:5b:6e:83:d7:12:78:c9:af:df:f2:04:17:c7:18:1a:
         cf:8b:47:e2:93:14:1a:64:d2:8d:6f:8f:ca:51:4d:73:18:4e:
         db:f5:40:c6:46:28:e7:04:d7:c6:09:d5:f8:3f:04:2d:22:d1:
         e7:a3:69:18:6c:50:b2:5e:90:7d:63:63:d0:d3:09:cd:4e:c4:
         f5:53:b5:5e:b8:d4:f2:a0:d3:40:1d:a4:d3:c1:02:9c:82:4b:
         c7:40:1a:99:6c:ab:59:0c:10:29:89:5d:8f:e3:32:02:75:11:
         c1:37:a5:51:86:6c:56:8d:74:a9:01:aa:72:f9:d9:f4:ef:b9:
         34:8b:6d:02:24:ee:87:23:c7:2b:a9:48:3f:eb:d3:0b:c0:ab:
         a1:7f:1d:15:a3:2f:41:74:83:84:32:ab:20:ca:6d:db:62:ca:
         26:8b:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----