Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9b50d3d145ef8a46e08db81a30cb018aa12a0272.roa
File:                     9b50d3d145ef8a46e08db81a30cb018aa12a0272.roa (raw, json)
Hash identifier:          EdsY3gCOIBPm+JKWt+MWcFLMKjUsYsOV1tCYwGKHFBg=
Subject key identifier:   56:D6:AB:62:89:1D:32:1C:30:E9:B7:93:A9:99:CB:ED:F1:F1:F5:D3
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0FA626
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9b50d3d145ef8a46e08db81a30cb018aa12a0272.roa
Signing time:             Wed 24 Mar 2021 14:44:02 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        192.100.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025574 (0xfa626)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=9b50d3d145ef8a46e08db81a30cb018aa12a0272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:eb:5b:f8:40:5e:61:70:80:e0:2a:2c:e5:a0:
                    aa:d7:70:a4:0d:00:23:2a:4f:7a:56:49:ae:2e:f8:
                    b4:12:79:dc:a4:84:59:46:6d:e2:05:c8:9d:ef:0d:
                    2c:d0:25:53:70:ee:2c:fa:ed:b1:db:5a:37:e7:aa:
                    70:fb:a9:d5:06:2b:5c:b4:b9:99:7c:35:a0:51:f4:
                    7f:7a:86:03:28:c3:24:88:f2:0a:49:2b:c7:8d:eb:
                    22:6f:3e:5e:a3:71:dc:f8:cf:3d:0b:e0:08:30:af:
                    51:d6:3f:53:b6:dc:ca:f5:e8:a3:a2:f7:b0:77:46:
                    e9:e2:cc:a4:31:57:59:1b:71:bb:1c:06:fa:f1:de:
                    a3:14:10:74:08:dd:c4:15:b3:4c:a8:93:5d:69:b5:
                    42:64:b9:f2:ee:c5:e0:a4:dd:fe:57:5f:d1:00:d5:
                    46:25:8f:2b:c0:c4:a8:08:a8:4d:42:3e:54:9d:ae:
                    04:a2:60:d3:02:5b:24:e7:d2:a8:f6:ca:5a:74:c7:
                    99:5d:bb:d2:7f:e9:2f:42:bb:6c:2f:ac:2a:bf:18:
                    2e:0d:b7:4f:3f:c1:79:50:50:ee:27:40:f6:ef:7f:
                    b1:8b:a1:60:89:8d:33:22:5f:18:c3:78:db:bd:55:
                    1d:9b:22:de:5a:a5:19:88:a3:c5:ce:e1:02:fe:91:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D6:AB:62:89:1D:32:1C:30:E9:B7:93:A9:99:CB:ED:F1:F1:F5:D3
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9b50d3d145ef8a46e08db81a30cb018aa12a0272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:96:d8:e3:6d:1b:61:85:f2:2e:93:18:66:64:91:ad:02:24:
         86:88:88:ce:96:2f:04:02:70:1e:b8:54:c4:e9:b5:1b:3d:84:
         b4:05:e9:71:76:c6:ac:15:21:13:16:5d:41:9d:b6:09:c0:83:
         6c:97:1e:7e:9e:9b:42:a2:a9:83:4b:70:a8:86:49:91:8e:6f:
         74:f1:20:15:b4:4c:8c:e7:8f:5a:39:26:a9:80:53:c1:90:cd:
         77:e7:1d:a2:89:e8:b3:43:09:d8:35:a3:42:f0:85:07:ca:68:
         fa:64:de:5b:fb:ef:68:28:f8:d7:21:1e:38:72:32:6d:0a:d5:
         f4:9b:0c:51:dc:b2:28:1f:29:7f:f3:4f:5f:61:f2:37:f7:50:
         2e:ef:cf:ab:03:35:9b:b4:01:fb:57:0b:94:c7:42:b9:d9:a0:
         69:7d:e7:17:26:a6:bf:9c:69:19:d8:4b:11:d7:80:81:9c:8b:
         f3:e0:aa:3d:24:f3:99:58:80:0f:f5:bb:18:f5:69:ae:d3:31:
         7a:26:85:f4:3b:c7:66:72:10:e6:e6:92:7b:41:74:ff:74:a4:
         ca:25:78:7a:40:ba:15:87:fc:51:a2:d2:a2:77:80:e6:1c:33:
         9d:c0:17:1d:36:f5:57:ad:5e:c0:bb:95:f9:a7:4d:bf:8d:ab:
         0a:6a:35:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----