Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/744ae39f235fc6c1f5987cdb87941472df877d19.roa
File:                     744ae39f235fc6c1f5987cdb87941472df877d19.roa (raw, json)
Hash identifier:          La8qqYNAseSOHDLjrKfiM8u1hlsHujF657Zlgbzm36k=
Subject key identifier:   80:96:2E:FB:53:AA:A0:13:7A:B1:A7:FC:47:6B:66:B3:91:9B:A5:8C
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       10669C
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/744ae39f235fc6c1f5987cdb87941472df877d19.roa
Signing time:             Wed 24 Mar 2021 14:44:17 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1074844 (0x10669c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=744ae39f235fc6c1f5987cdb87941472df877d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:98:51:a0:5d:c8:ce:84:88:b8:7e:c2:e6:3e:
                    da:5c:10:a0:e9:d6:b2:60:11:1c:f0:57:ef:92:33:
                    4b:e0:b9:07:7a:14:60:b6:6f:45:44:98:6e:f5:22:
                    26:a9:50:36:77:87:b3:6e:e2:ea:f9:e6:54:32:17:
                    dd:c5:88:6f:6f:79:ad:29:59:e1:7b:8e:a2:91:7d:
                    02:41:55:3d:53:a7:47:9c:99:a4:c0:eb:00:86:ff:
                    84:ca:55:a5:c9:d3:f9:7d:4a:c2:37:07:3d:a3:55:
                    4c:50:c6:7b:46:cf:cc:99:8b:b8:e2:c5:0f:1e:c8:
                    44:b3:44:70:0c:51:03:0b:9a:4e:48:50:81:90:24:
                    3e:a1:2e:d4:fc:58:31:fe:61:56:10:b8:e7:04:16:
                    0d:fd:fb:3d:76:44:d1:96:cb:91:0a:35:74:4c:1f:
                    11:85:e9:c3:fa:f8:26:f4:39:9c:d3:b1:4c:e0:30:
                    ab:93:45:97:d5:8b:ca:81:8f:6b:05:00:80:b4:35:
                    1e:bb:50:f8:57:7e:8a:e2:88:d4:0f:73:a2:d7:c1:
                    aa:72:53:46:a9:e6:0b:5e:7a:13:1b:f4:d4:50:07:
                    8e:f0:1d:b5:f1:b2:63:ad:61:c7:2d:17:e9:f3:4e:
                    88:b5:39:2c:2a:64:fa:e1:6d:f7:78:cb:95:66:85:
                    4c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:96:2E:FB:53:AA:A0:13:7A:B1:A7:FC:47:6B:66:B3:91:9B:A5:8C
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/744ae39f235fc6c1f5987cdb87941472df877d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:2e:52:4d:6a:05:24:73:38:8c:fa:60:d7:7e:12:5c:03:a3:
         65:57:15:8b:71:9b:5c:c0:01:c7:f8:a3:35:cb:9c:ff:d1:8f:
         6c:1c:69:aa:ee:c5:5e:f6:9b:2e:ac:a1:f9:c1:4e:59:ce:4f:
         5c:2a:7d:63:06:fd:49:9d:13:00:de:37:ba:28:5e:7b:1f:bf:
         8d:6c:70:21:7f:ae:f5:f7:c9:c2:67:79:93:6e:8d:60:2b:17:
         0c:dc:2f:f6:15:48:43:af:0f:fd:25:a6:b5:ae:24:10:08:c4:
         d9:4c:57:56:96:00:6c:13:93:26:f8:08:68:8d:f4:f3:b2:cb:
         87:bf:28:3d:15:b6:e3:61:b0:da:6d:03:00:2a:9c:47:1d:9f:
         24:fc:12:3b:b7:71:7d:85:f0:34:5f:e4:76:66:9e:86:18:05:
         18:4f:f6:4f:c8:17:71:54:74:6d:bc:87:5b:d5:7a:07:da:c1:
         75:35:93:0a:f3:27:76:91:ec:00:c7:bb:d1:52:36:b5:ff:ae:
         8d:42:5d:d6:4a:bd:5c:d4:9d:2e:f9:34:78:09:81:90:62:93:
         c1:a4:ce:f0:02:2e:c4:eb:fe:ce:5e:83:e4:87:f9:fe:e6:88:
         e0:bf:04:02:ee:ca:23:c2:35:d1:46:05:8b:67:d4:00:9e:20:
         7d:3f:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----