Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/6442e3a4f2eb2a6cf3bd89ca619a1052a1ad7677.roa
File:                     6442e3a4f2eb2a6cf3bd89ca619a1052a1ad7677.roa (raw, json)
Hash identifier:          SYG9LJxFFDgR1+c9XFnMVpMEHSeSNGseBsN9cDlE6dM=
Subject key identifier:   F4:C3:E0:89:69:03:22:6F:73:DA:6A:60:5D:FB:B2:B1:B0:A3:F0:21
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       107631
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/6442e3a4f2eb2a6cf3bd89ca619a1052a1ad7677.roa
Signing time:             Wed 24 Mar 2021 14:44:18 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1078833 (0x107631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=6442e3a4f2eb2a6cf3bd89ca619a1052a1ad7677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f9:1e:f6:19:51:78:e3:ba:21:a5:a3:79:c2:
                    3c:f7:3e:5a:fa:07:ff:59:39:2d:fd:ea:e8:d5:35:
                    32:61:5c:19:ec:f1:b6:eb:7e:6a:43:7c:47:a3:14:
                    c0:30:fb:fe:3a:c7:86:b6:e4:14:84:6e:23:04:a2:
                    9c:f7:69:51:7c:c2:b0:cc:5b:e3:8c:27:df:d6:5d:
                    cc:21:8c:a9:c4:92:c0:cf:a1:92:ed:6a:39:af:53:
                    5b:26:b0:05:bc:9a:9f:2a:c4:8a:f6:5f:1b:55:29:
                    10:5f:2b:e8:57:67:f5:b9:56:fa:aa:5b:0c:51:4e:
                    a7:d4:7a:e1:f3:fa:15:4a:bb:01:0c:a8:08:f1:49:
                    3c:9b:35:35:43:53:91:08:a7:47:da:21:ca:5c:bd:
                    6c:fc:f2:07:fb:15:23:16:b0:3b:b6:cd:ba:68:3b:
                    01:dd:f5:01:b7:41:07:62:56:58:d5:ff:dc:4a:77:
                    cf:e1:3e:58:03:5b:ef:26:a8:32:68:29:29:37:73:
                    bd:7d:3a:ce:63:db:1d:78:c1:3f:29:67:33:36:1c:
                    2e:7a:31:88:45:75:71:f7:47:07:0a:23:f4:26:ec:
                    22:8d:9f:92:4b:f1:26:46:3c:32:8c:46:bf:c6:3d:
                    a1:3f:5a:e8:b4:89:a8:ea:96:26:20:68:39:88:3b:
                    10:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C3:E0:89:69:03:22:6F:73:DA:6A:60:5D:FB:B2:B1:B0:A3:F0:21
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/6442e3a4f2eb2a6cf3bd89ca619a1052a1ad7677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:f1:64:c2:0e:6d:cd:20:53:e1:66:bc:61:06:9d:93:9e:df:
         50:d9:2b:f3:b3:36:fc:60:30:66:f7:10:e7:fd:0c:2b:5c:19:
         db:54:67:53:88:2d:aa:02:01:96:9d:65:51:cc:78:84:43:bb:
         22:8f:d5:7c:73:65:96:eb:45:51:35:b0:d3:f6:0c:7f:2a:87:
         a7:13:a9:c6:90:77:8a:5d:95:84:91:07:09:e1:88:44:ac:a4:
         89:10:f3:c0:40:e7:c6:17:e4:78:85:b3:ed:5b:03:b0:9f:02:
         17:21:1d:8f:8d:9d:b2:04:7c:10:59:7b:de:69:e7:b1:ee:f8:
         e8:c0:3d:ff:94:bd:61:c1:81:b0:80:68:1f:df:c5:f7:a8:fe:
         d6:30:c6:f1:82:5a:2e:7a:ef:ca:ee:62:51:28:2a:62:d3:ce:
         08:8f:30:bb:b0:44:54:4f:dd:f4:f8:52:17:4b:72:6a:67:75:
         0f:e5:f0:c5:34:59:d6:7a:37:9c:eb:2f:af:a7:67:24:85:e1:
         2a:14:b5:52:76:30:d2:7c:fa:27:6b:7d:9a:48:02:65:29:92:
         e1:43:c2:13:c2:ef:21:6a:76:3c:f7:80:87:30:cd:26:2a:ea:
         96:2f:ee:d8:bc:7a:37:f2:9e:ae:30:da:b2:b9:fc:4f:48:04:
         ff:e1:08:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----