Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/899793e69c3adf8206530cfe1743e69ff98db28b.roa
File:                     899793e69c3adf8206530cfe1743e69ff98db28b.roa (raw, json)
Hash identifier:          conwI85ItHt600TaJgvHDESD4CossFWGt7ywhgHsm14=
Subject key identifier:   B9:C6:3B:00:A8:9F:4E:1F:AC:91:78:12:7F:43:56:D5:5D:4F:04:5B
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F54BF
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/899793e69c3adf8206530cfe1743e69ff98db28b.roa
Signing time:             Wed 24 Mar 2021 14:43:52 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.184.0/25 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1004735 (0xf54bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=899793e69c3adf8206530cfe1743e69ff98db28b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dc:bd:8c:9c:33:76:f4:2f:83:9c:5c:b5:97:
                    14:c3:e0:e8:de:dc:11:ec:6a:e3:dd:29:e1:b1:b7:
                    f0:00:65:f4:55:7b:70:98:88:f7:5c:5b:c4:9f:a7:
                    6d:76:c3:f0:cd:d5:03:d1:b4:6e:7b:ad:2c:b4:27:
                    24:18:b3:3d:5a:15:93:b5:fa:46:98:09:65:f1:14:
                    0d:c7:fb:94:97:10:09:2b:d2:c8:01:b3:3b:04:8d:
                    9d:22:59:78:76:3e:d8:0c:a0:60:1c:6f:e2:b2:48:
                    ff:d2:18:0f:2e:7b:61:c1:18:76:70:f9:87:ff:7c:
                    69:9f:51:f5:d7:ab:e7:c3:11:1a:98:78:1f:24:a5:
                    d1:83:93:18:ed:7a:e6:15:54:df:fd:1d:c3:34:ba:
                    99:a1:b8:4c:c8:09:0b:38:1e:20:74:ca:6e:b5:47:
                    32:41:54:5a:70:f4:fd:90:06:2a:96:13:94:7e:13:
                    e2:3a:a4:94:15:50:7b:fb:9f:29:26:18:ba:83:96:
                    78:10:03:b1:91:69:12:af:51:e7:3f:e9:2d:e7:1a:
                    53:53:1d:65:7b:02:e1:c0:b4:1f:b9:1c:72:7b:3b:
                    5d:41:5d:aa:e4:95:cc:f9:cf:4d:1c:b1:5e:89:6f:
                    75:a6:43:57:fa:b0:2d:aa:d9:92:40:5e:3f:99:d8:
                    66:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C6:3B:00:A8:9F:4E:1F:AC:91:78:12:7F:43:56:D5:5D:4F:04:5B
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/899793e69c3adf8206530cfe1743e69ff98db28b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.184.0/25

    Signature Algorithm: sha256WithRSAEncryption
         bc:51:99:da:e3:3b:50:a7:e6:e7:64:4c:92:2f:7b:16:c9:2b:
         32:4d:f6:52:cd:18:84:b6:85:bd:c9:88:43:72:59:20:8f:b2:
         5b:8a:06:44:3f:53:80:fe:4a:f5:19:6e:55:46:f2:4d:bd:20:
         00:7b:ed:25:a5:54:5e:18:e2:d6:c5:27:2f:7f:9e:40:a0:b6:
         cb:d0:30:23:16:ca:e9:0a:e8:19:3f:ff:f9:0c:ec:ac:45:85:
         f5:6b:cc:e5:d4:47:a1:6c:7b:08:59:74:b5:c4:04:cc:19:15:
         b7:aa:b7:9c:f6:63:f2:22:c9:00:86:57:ef:62:96:e8:c7:ec:
         40:4d:f9:dc:ce:f0:82:dd:01:65:e6:2e:70:ee:b2:44:e5:47:
         f7:98:48:5d:58:7c:34:ee:49:74:a5:67:cb:09:e7:37:e5:ca:
         70:bc:ae:f4:bc:ad:c3:46:6c:f2:03:29:d5:33:ff:8f:8f:c3:
         80:3b:5e:9e:8b:cd:d6:74:45:ae:0c:09:86:82:db:50:2a:8f:
         ca:fa:5b:20:c0:01:c0:cf:be:4b:2f:0e:d4:3c:d5:f3:70:f8:
         0f:95:a2:95:93:04:a6:06:04:d7:68:57:63:03:55:4b:a1:c6:
         61:e5:cd:f8:5b:23:dc:6d:e6:66:55:89:03:f5:1f:61:1d:86:
         5d:fb:da:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----