Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/73b9e41d92ca454b49c3da8afae4b58423dd2a8d.roa
File:                     73b9e41d92ca454b49c3da8afae4b58423dd2a8d.roa (raw, json)
Hash identifier:          rl04FOF1GANhKNsUZ6B5kOjstMDMPCu///EjIITWYAE=
Subject key identifier:   50:93:00:17:D7:E6:91:BC:49:55:E3:1B:66:EB:9D:43:3D:3A:AB:5E
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       100460
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/73b9e41d92ca454b49c3da8afae4b58423dd2a8d.roa
Signing time:             Wed 24 Mar 2021 14:44:11 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049696 (0x100460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=73b9e41d92ca454b49c3da8afae4b58423dd2a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:80:af:c7:a7:7d:f2:a4:30:12:f9:1d:e1:77:
                    70:aa:80:11:f7:65:57:67:07:d7:ba:b1:9e:47:58:
                    5d:50:c2:18:17:c1:d2:9d:85:0f:84:8b:0a:dc:0b:
                    56:c3:1e:bd:73:3a:24:16:94:6f:a2:98:20:3f:58:
                    96:2e:02:6f:7e:8b:2d:63:03:c3:b3:c1:85:4f:60:
                    3c:a3:af:74:bc:32:54:6f:9f:50:f9:80:8e:f1:f0:
                    e5:4c:7e:2c:dd:46:df:ca:d4:c8:9d:1c:dc:ab:24:
                    36:9b:11:a6:a3:6b:90:b3:28:77:91:e6:9e:22:db:
                    f6:1e:4f:16:96:6b:5d:ad:5f:e2:b4:9c:8b:bb:82:
                    f3:67:9c:77:ae:68:1a:bc:93:42:0d:fd:00:38:8a:
                    20:ea:05:fd:3c:ce:0f:ce:a0:bf:f7:5e:3a:f0:d9:
                    6e:b0:bd:2e:e0:94:55:43:83:f5:d9:4b:35:6f:0a:
                    0e:c7:19:7d:07:37:cb:48:5c:ea:d7:37:d3:01:75:
                    5d:9a:00:62:3b:bf:db:db:c5:97:ed:f8:2a:60:74:
                    8f:fd:b2:d8:62:89:cc:58:e2:44:b4:ac:26:2f:28:
                    3d:39:5f:11:39:20:d1:3a:0d:ca:56:ae:89:3c:77:
                    8f:5e:65:82:82:95:29:72:db:71:61:6a:0b:55:f7:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:93:00:17:D7:E6:91:BC:49:55:E3:1B:66:EB:9D:43:3D:3A:AB:5E
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/73b9e41d92ca454b49c3da8afae4b58423dd2a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:cb:46:3f:ab:19:09:97:a4:10:d3:c1:bc:12:44:4c:e5:f6:
         ea:44:df:58:b8:7d:a9:3e:0a:2d:11:8a:8b:1c:2e:c4:b8:b0:
         95:d0:c6:57:cf:3f:64:ce:3e:97:71:8c:82:fd:ae:3a:af:00:
         b1:bc:a7:c8:a6:02:d3:10:49:b0:8a:0e:14:5c:a3:91:21:1e:
         7c:7a:c5:df:96:c6:1c:2e:95:8b:f8:f7:5d:11:06:ab:eb:6c:
         84:fe:db:1c:64:1a:16:4b:4b:33:e2:90:a6:4c:36:86:cd:ca:
         64:1b:d5:cc:37:1e:a4:82:f5:f3:5c:aa:04:75:93:6c:4f:2d:
         50:34:09:5d:86:3e:16:e8:21:c0:d2:de:62:46:19:bc:bd:b9:
         8f:74:ac:73:79:0f:49:f6:6f:8f:d2:85:20:00:af:1f:44:86:
         ab:e0:1e:22:75:9b:9f:59:ed:91:63:c6:6c:7d:d5:d9:c2:45:
         da:b9:9c:8c:74:16:81:7b:37:17:5e:3c:44:af:3f:52:21:2b:
         b3:a1:a2:98:d6:c4:9f:19:2d:2b:45:98:02:9f:02:90:fd:e4:
         fa:bc:b4:9e:ac:5f:69:9e:48:8b:37:c5:3c:3f:81:0b:d7:0b:
         99:8c:88:46:45:5a:f8:51:3b:4c:9e:bf:72:96:34:82:5c:17:
         2b:21:d2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----