Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/81dca847cfdef57a792adc1f940e08eb57ea1212.roa
File:                     81dca847cfdef57a792adc1f940e08eb57ea1212.roa (raw, json)
Hash identifier:          vxdhhDeu/UlPUDIMIpMTXKI1W7alLFsjKHF15i4MUQw=
Subject key identifier:   DB:74:E5:8B:6B:E1:0C:EA:ED:D2:1E:2F:C1:39:84:CE:5C:CA:2F:32
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       10C68D
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/81dca847cfdef57a792adc1f940e08eb57ea1212.roa
Signing time:             Wed 24 Mar 2021 14:44:25 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.118.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1099405 (0x10c68d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=81dca847cfdef57a792adc1f940e08eb57ea1212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d7:55:7b:28:a5:c0:c7:a3:d2:74:7c:e2:ee:
                    cc:42:c9:fe:52:58:55:eb:5b:15:02:0b:35:90:96:
                    a7:dc:3d:bb:ac:c7:8e:18:55:d6:ec:3d:8f:b6:9c:
                    70:eb:61:0b:07:ea:09:3d:fd:1a:57:8e:f5:85:3b:
                    db:d4:2a:ba:ac:c3:7b:13:c3:d8:de:b1:34:95:d4:
                    1b:fc:7b:a7:d9:c9:f1:2b:5f:c1:4d:66:9f:9c:94:
                    d2:ed:1b:a8:a2:8f:c4:21:11:76:15:d3:c1:24:d1:
                    33:fe:bc:dd:27:aa:7f:f0:98:e0:d0:8c:47:33:6c:
                    42:c7:98:7d:48:a2:e8:ff:70:e8:2a:6f:61:75:70:
                    95:9c:f7:56:89:0a:61:ff:d1:fe:26:17:9c:8a:a1:
                    3f:62:5d:dc:13:d2:a8:7c:18:9f:bb:dc:2b:07:b7:
                    aa:ea:51:ce:a4:88:1c:6e:81:ff:09:ba:45:bf:7b:
                    e5:c8:0f:c1:2a:c7:72:f2:17:a4:80:a3:e7:11:63:
                    20:db:31:2d:80:32:d5:03:c5:78:61:03:2a:bd:d5:
                    95:ff:5c:13:60:e9:75:76:c9:79:08:ce:f1:b0:0a:
                    3e:5b:d5:b3:5a:b9:ac:23:8e:58:db:8b:65:6c:94:
                    4a:89:71:30:b9:5d:6d:31:76:6e:4f:2e:88:3e:00:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:74:E5:8B:6B:E1:0C:EA:ED:D2:1E:2F:C1:39:84:CE:5C:CA:2F:32
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/81dca847cfdef57a792adc1f940e08eb57ea1212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:d1:4e:db:1b:91:cd:8a:93:b7:28:d6:88:b3:9f:f8:4a:39:
         cb:4c:f5:04:a3:23:57:19:c4:aa:24:b1:c3:ff:db:dc:3a:9e:
         ee:74:9c:58:8f:6d:32:e1:ff:01:6b:2d:64:64:44:83:b7:00:
         1c:4d:c8:50:dc:df:95:d4:3c:06:0e:b7:de:7f:dc:8e:6d:02:
         e4:8e:11:2e:e6:ac:96:7a:a7:7e:2c:d6:38:9d:6f:c3:5e:d9:
         4b:e0:eb:cd:a2:45:4e:cb:4e:56:38:50:d5:25:26:cd:f4:07:
         df:83:97:ff:f3:f5:40:25:34:32:71:33:c8:ee:4c:19:33:16:
         15:1d:14:c4:e9:9b:4b:b4:ee:89:94:68:aa:24:74:c3:f1:64:
         f5:a5:52:23:af:0f:f2:9b:0d:38:78:5c:09:63:bd:fe:8f:97:
         09:0c:05:45:11:51:75:b6:ab:8d:8a:1a:3f:1c:02:b5:56:4c:
         1c:d9:e7:bd:66:e4:09:2c:28:18:ee:1a:7a:f0:8a:3b:23:f6:
         71:e7:56:29:d2:0a:eb:0d:63:80:04:13:d6:cf:d9:05:8c:65:
         2d:49:23:8e:b0:10:72:04:90:d5:7d:5e:81:f6:d4:46:98:de:
         b7:8d:cd:5b:ac:59:40:b8:ad:46:ee:65:b2:3a:bf:1c:9c:fd:
         f0:f5:fb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----