Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/5cf9f12d0aab481bf14fd851c351ecd5b6fc64a5.roa
File:                     5cf9f12d0aab481bf14fd851c351ecd5b6fc64a5.roa (raw, json)
Hash identifier:          jRi01ThNAZbt5FrzKAmdFi/0n05tB55Ok2hbpOIei/g=
Subject key identifier:   B0:4B:B8:A4:21:07:DE:76:69:3F:D7:0A:10:F8:92:79:BC:93:E9:5B
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       104678
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/5cf9f12d0aab481bf14fd851c351ecd5b6fc64a5.roa
Signing time:             Wed 24 Mar 2021 14:44:15 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.172.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1066616 (0x104678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=5cf9f12d0aab481bf14fd851c351ecd5b6fc64a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:04:1f:84:b4:d4:d2:30:ba:3f:bd:6c:cd:fa:
                    c6:03:98:e5:b4:0f:e1:31:e1:3f:2d:18:4c:0d:21:
                    01:17:49:15:dd:61:07:19:e7:e3:8e:23:1e:b1:07:
                    11:32:89:7e:51:88:cc:15:ff:0e:90:f1:4f:e5:8c:
                    73:fe:00:e1:c0:6c:75:8a:ae:e5:5b:c9:8e:ec:d8:
                    21:c3:56:38:94:e8:74:5d:f3:89:b1:fe:fe:69:ba:
                    d6:54:ff:ca:a5:30:48:d9:1a:2c:cd:86:75:f6:82:
                    0a:ff:f4:23:11:9a:71:13:ee:2a:9d:7e:cc:f2:eb:
                    ac:4f:c1:b7:9a:8c:4a:2e:ca:88:05:65:8a:92:6a:
                    97:67:b2:6e:2a:e9:15:87:b6:76:2c:2f:6e:01:98:
                    3a:ed:f1:16:62:4a:8c:d2:24:98:7f:42:06:5a:aa:
                    41:b9:0b:63:66:dd:86:9e:50:9d:a4:06:66:42:57:
                    ca:a3:ae:21:2d:c1:2a:31:c4:94:66:2d:c7:db:5c:
                    85:de:e8:45:f3:bf:b4:a7:cd:c4:75:90:86:4a:57:
                    99:de:78:90:82:79:a0:13:74:c6:56:ba:56:0d:91:
                    b8:89:36:01:5b:b8:b5:5d:9e:a2:46:e2:4e:0e:7c:
                    8f:8f:87:a2:69:97:e2:65:ab:0b:26:e5:dc:39:da:
                    12:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4B:B8:A4:21:07:DE:76:69:3F:D7:0A:10:F8:92:79:BC:93:E9:5B
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/5cf9f12d0aab481bf14fd851c351ecd5b6fc64a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:29:8d:79:6c:57:e5:03:0a:7c:d8:49:77:cc:4e:18:b3:13:
         94:86:a1:38:f2:7b:43:62:3e:0d:7d:5e:60:f5:bd:67:17:8f:
         c1:b0:bb:8d:db:4b:7e:27:c3:c1:96:6f:c3:d5:dc:0a:2d:24:
         bc:06:48:cf:8a:1c:09:4f:c1:b2:42:56:46:65:91:9e:d5:a1:
         5b:db:8b:5f:11:4d:3d:12:dd:3c:22:6a:9f:6e:73:31:91:f8:
         ae:07:d1:e2:ab:25:b1:72:ac:2a:6e:79:90:81:86:fc:e8:e8:
         1f:49:ea:d8:68:4e:40:c0:63:21:a8:67:a6:0b:5a:dd:50:bd:
         41:59:13:cd:b1:97:c9:37:1c:f9:ec:d5:17:eb:7b:1d:dc:82:
         01:16:3c:2d:9f:84:cf:10:26:18:3a:9f:0a:e2:3c:92:93:f7:
         d7:37:94:1f:db:c8:06:2b:6b:8f:4b:5a:d5:00:f2:9e:6d:ad:
         08:4e:67:cc:2b:1e:25:46:0d:d8:0d:53:8c:46:06:e3:c2:de:
         d4:fb:30:7b:ae:db:26:23:dc:7c:cb:78:10:8f:b5:99:4b:68:
         9c:bc:99:b1:03:32:c6:31:75:b5:be:97:e2:66:53:a6:13:ca:
         09:0c:04:a2:b5:32:92:0a:c6:e7:01:2c:96:31:22:32:c0:26:
         65:47:0c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----