Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/760b5616d425f7641d5b80e14354b8286ec47786.roa
File:                     760b5616d425f7641d5b80e14354b8286ec47786.roa (raw, json)
Hash identifier:          D3FRLgg1FeZowfl+4wlnBYUUZJBwR4yh87zN5CrMGQs=
Subject key identifier:   3B:06:D0:0C:A8:ED:B9:11:F6:29:84:93:C1:B3:86:BD:A4:14:D9:37
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       102B3C
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/760b5616d425f7641d5b80e14354b8286ec47786.roa
Signing time:             Wed 24 Mar 2021 14:44:14 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059644 (0x102b3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=760b5616d425f7641d5b80e14354b8286ec47786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:56:9c:5f:19:68:ce:fa:99:1c:fb:c7:37:c7:
                    a7:cf:af:13:d3:8d:d7:8a:49:d6:fb:7e:32:a9:5e:
                    52:93:aa:e7:d6:d3:2c:0a:81:65:89:06:a6:87:4e:
                    73:ea:d7:51:dd:5a:0d:1a:9f:bf:e1:cd:ab:ac:00:
                    85:ae:36:48:a4:ab:7d:6d:5e:f7:b7:82:5e:60:e8:
                    10:55:7a:62:53:e9:8c:67:cb:e8:c6:b3:ff:b1:18:
                    e6:cd:76:0e:68:08:dd:e7:ae:16:04:4a:62:eb:a5:
                    ea:27:8a:97:e5:8f:92:e1:4b:b2:7c:d1:95:8c:96:
                    7e:7c:1a:f8:58:57:47:4c:c6:6a:e1:15:cc:61:78:
                    61:e6:b1:65:f0:8e:a0:f8:2c:e3:5d:8e:bb:49:59:
                    87:99:8e:4e:ee:6a:06:e1:23:4e:01:f7:a9:9e:c2:
                    85:eb:58:2d:5e:cf:96:8d:bf:fa:ff:03:1d:33:f7:
                    16:e4:c6:1e:66:fd:94:85:cb:8d:65:87:94:a7:68:
                    dc:8a:f7:c1:1b:30:31:2d:d2:f9:3d:9d:a4:c3:5d:
                    ee:28:a1:d5:3f:f2:94:40:5b:32:d9:cc:e2:c0:da:
                    00:13:89:07:31:a6:5e:01:25:2a:20:7e:18:11:ef:
                    d4:39:3f:18:f0:4d:95:65:26:b2:87:f0:23:37:0e:
                    67:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:06:D0:0C:A8:ED:B9:11:F6:29:84:93:C1:B3:86:BD:A4:14:D9:37
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/760b5616d425f7641d5b80e14354b8286ec47786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:9a:e4:07:ff:93:7e:7a:28:05:91:8e:b0:56:4b:e3:9b:e0:
         0c:d7:8f:6b:7b:49:fd:99:ea:25:c4:6b:fa:34:a3:fb:aa:e0:
         50:65:87:e7:bd:4d:25:c9:2d:30:c5:86:8b:14:72:a2:18:dc:
         99:3c:c8:e4:e0:d9:a2:72:0e:a2:af:bc:f3:a4:73:0e:cd:c4:
         00:7a:b4:b0:a7:b2:05:6d:64:0d:4e:7e:a0:67:e3:20:1f:a5:
         f6:38:ef:c2:26:8f:ba:97:96:23:6a:4f:ab:bf:e1:25:77:9c:
         28:c3:28:6b:4d:ae:5d:ed:65:ec:70:02:22:94:64:fa:9c:bf:
         28:87:24:e8:ec:b3:eb:d3:fc:b5:a8:a2:28:f0:d6:71:17:5e:
         6d:10:db:cd:bb:d8:73:a9:2b:f3:96:82:3c:68:09:66:2c:2f:
         ce:dc:34:86:d0:19:5d:0a:05:98:78:f2:9e:61:cc:33:85:a4:
         2f:55:cd:9c:88:34:ee:b3:00:23:1c:f1:89:95:5e:b9:b3:a5:
         d3:b7:95:24:71:fe:96:7f:fa:ec:dc:f6:57:04:55:8c:d4:c3:
         40:ff:fa:2a:fd:20:f9:ea:0b:b4:55:cc:25:95:9d:a6:67:98:
         98:e7:89:82:73:d9:8e:ca:5c:3a:7d:7f:88:e6:2c:2a:55:da:
         80:cc:14:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----