Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/906812e2f54ce937649419a2d7102c3338f0c878.roa
File:                     906812e2f54ce937649419a2d7102c3338f0c878.roa (raw, json)
Hash identifier:          +1bOSgcvocF0CaVnIUKe/Nm971GXWRkZ0kSnP8kcooE=
Subject key identifier:   40:40:66:14:8D:AE:ED:F9:01:C5:93:39:25:6F:D0:73:95:E7:36:F9
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       10E43C
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/906812e2f54ce937649419a2d7102c3338f0c878.roa
Signing time:             Wed 24 Mar 2021 14:44:27 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107004 (0x10e43c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=906812e2f54ce937649419a2d7102c3338f0c878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f3:c0:d2:09:ac:ed:f7:8e:29:42:f6:84:eb:
                    d9:6d:f5:70:8e:4c:ac:56:3e:b2:2f:bf:35:fd:26:
                    f8:a7:1a:d5:4e:6d:63:03:d1:07:ea:fd:7c:e7:b7:
                    60:6e:e5:9e:60:5b:13:49:d5:77:49:f2:1d:67:b6:
                    dd:64:6b:1a:52:2b:74:db:53:6e:7f:9a:f9:f5:30:
                    a2:e7:4e:7e:e6:55:bc:37:3b:2a:36:fa:64:4f:fa:
                    d4:30:54:6c:0e:d4:32:0e:98:20:de:08:e9:01:39:
                    a3:2f:09:77:93:56:70:06:89:9e:57:8b:a9:14:05:
                    9c:14:eb:2b:8c:4a:5a:49:89:46:cc:ae:83:e2:0c:
                    d3:31:be:92:31:57:91:52:97:c0:55:4f:ca:a6:60:
                    e2:69:77:37:02:0a:24:d9:e5:ee:af:d6:0f:21:0a:
                    ef:15:ae:eb:96:60:f0:bd:ad:23:0c:f7:11:88:de:
                    cf:bd:d1:28:9c:4d:52:e5:0f:88:6e:98:3f:5f:a7:
                    07:69:37:08:de:28:10:6b:e6:06:86:57:e3:e1:19:
                    4d:f5:cb:21:99:ce:e3:d0:97:0b:53:33:b3:8d:c9:
                    df:e8:9c:fa:5c:ad:b2:7b:ea:4c:e5:e5:9b:73:59:
                    14:9c:0b:21:e6:92:e8:27:83:d5:eb:d0:0e:de:d0:
                    d4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:40:66:14:8D:AE:ED:F9:01:C5:93:39:25:6F:D0:73:95:E7:36:F9
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/906812e2f54ce937649419a2d7102c3338f0c878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:10:73:64:37:d3:82:dd:6e:42:28:1c:ef:cb:0b:49:ac:47:
         67:7f:62:d6:45:90:e4:95:3b:51:d4:de:44:d5:38:3c:44:16:
         ca:98:c5:f8:1b:e3:e3:54:cf:e6:f3:d7:44:6b:05:9b:dc:30:
         84:83:ae:76:80:c0:fe:02:ff:a6:4e:55:fd:2b:3e:18:e7:7d:
         b5:2b:03:1d:63:f0:d0:d3:f1:64:82:36:d6:e4:8b:a7:01:94:
         36:a4:22:e1:dd:5b:b2:a7:65:4e:02:33:75:d0:57:98:69:f0:
         4d:1c:f7:b6:59:43:f4:62:98:b6:a3:ad:96:89:78:e0:97:e1:
         39:59:20:a9:54:a3:20:16:62:79:06:77:ea:f2:ff:e3:5c:79:
         0c:45:fd:7a:99:96:08:7f:0e:8b:76:a1:66:87:56:c0:0a:8b:
         c8:5c:fc:65:31:61:24:29:f5:fb:e7:c7:fb:19:38:8f:fc:5c:
         df:97:e9:b9:4b:c8:84:0b:b8:e9:1e:7d:ac:ac:04:5f:b9:45:
         44:c7:91:97:e9:b6:a0:e5:46:ff:c0:60:91:af:85:44:f9:9a:
         89:3d:bf:f0:c8:29:a7:16:d6:86:4b:14:e5:4e:1b:98:f7:75:
         e6:95:32:c2:ca:a4:1f:44:1f:42:b6:8c:2f:8f:a6:f0:17:ee:
         4b:e6:9f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----