Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/abb2492d7ae823b8a673e10d823f6c6b287c37e1.roa
File:                     abb2492d7ae823b8a673e10d823f6c6b287c37e1.roa (raw, json)
Hash identifier:          jNA8YlFdXzN81PvVIM4yGV2jReMOwJq2+0BZCD8HIvo=
Subject key identifier:   57:70:F6:12:AB:F4:5D:1C:5B:03:24:4E:EC:3A:BD:0D:6C:3A:5E:20
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       101D54
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/abb2492d7ae823b8a673e10d823f6c6b287c37e1.roa
Signing time:             Wed 24 Mar 2021 14:44:12 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1056084 (0x101d54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=abb2492d7ae823b8a673e10d823f6c6b287c37e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9e:0c:4e:8e:7e:ab:98:ef:5a:68:cf:2e:d8:
                    0e:39:d6:6d:aa:09:38:ed:d8:a4:81:2c:68:a3:3f:
                    36:95:04:c2:ce:da:9a:2f:67:f5:bc:20:54:90:c6:
                    14:63:b5:07:9f:60:09:97:9a:21:ac:f6:bb:d3:db:
                    ba:60:50:2f:03:ca:f6:0b:15:52:78:2b:d0:3b:46:
                    63:2f:fa:da:5c:ef:0c:33:32:b2:a1:41:3a:04:d9:
                    9e:60:03:a6:1f:6c:b5:f9:2d:ff:33:26:c6:96:06:
                    cc:a2:d0:c2:3f:60:f3:74:98:41:86:4d:f2:81:6a:
                    28:21:fa:b8:d7:0e:27:48:bf:93:f5:8f:11:56:7b:
                    85:e2:3e:9b:53:ae:ad:f2:8a:01:4d:53:13:3e:a8:
                    ae:ab:62:9e:5a:df:ce:fe:9f:70:d1:a8:d4:30:95:
                    dc:f1:2f:76:3a:1a:20:bb:eb:f9:38:fc:48:0a:b4:
                    d5:87:bb:9c:89:d5:ca:50:ea:dd:01:56:f1:77:7c:
                    d5:2c:9e:bc:2a:0d:54:55:59:96:39:c3:f4:4c:19:
                    32:c1:38:1c:a5:39:25:a9:39:68:16:98:e1:37:e7:
                    ec:21:20:1e:9b:ce:d6:f3:a4:12:ee:55:31:3a:a7:
                    56:ce:d5:b9:fc:9c:2b:e6:d5:72:33:e7:48:ab:2e:
                    7e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:70:F6:12:AB:F4:5D:1C:5B:03:24:4E:EC:3A:BD:0D:6C:3A:5E:20
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/abb2492d7ae823b8a673e10d823f6c6b287c37e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:d1:1d:6a:59:a5:97:b0:38:c7:1e:db:02:e7:8f:d1:e4:15:
         55:15:bf:33:4b:96:39:14:03:9b:d7:99:f8:76:67:9b:57:9f:
         fe:ee:51:d4:4a:1b:04:40:b0:0c:a5:a3:7d:8b:87:d1:c8:b3:
         d8:9c:d4:cb:cc:eb:6c:ee:e6:a4:2f:cf:80:9d:1d:d5:58:6c:
         eb:34:b5:bc:1b:3c:d0:5c:4c:15:44:3e:2b:ac:59:68:c4:2e:
         95:4d:89:48:ea:77:76:ce:a4:7d:62:15:5c:7e:72:b3:83:fc:
         23:1c:be:48:af:6a:70:50:9b:7e:95:cf:70:c6:99:8c:e6:9e:
         ad:95:b1:7c:76:16:14:4c:30:49:25:50:4e:8a:72:fd:c1:81:
         5a:14:2f:a6:a5:3b:ac:27:b3:c2:6d:61:ff:c0:65:a2:d4:88:
         bf:e2:d9:52:06:ed:b4:9f:ab:b9:50:16:6e:a4:36:ff:42:58:
         a4:0a:a1:b4:3c:a9:e8:62:c8:40:02:e0:8d:7c:ea:31:d0:c1:
         8c:e0:ba:5c:a5:fe:ea:90:38:1b:a3:f4:9e:c9:f0:c2:d6:eb:
         e5:b3:50:f7:73:80:51:2d:a8:d8:b1:90:60:be:fd:1e:4e:dd:
         5e:13:8c:5d:8f:f8:a8:ed:71:6d:c0:bc:2f:0a:0f:39:98:88:
         94:e8:fa:b4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEB1UMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEyhhYmIyNDkyZDdhZTgy
M2I4YTY3M2UxMGQ4MjNmNmM2YjI4N2MzN2UxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArJ4MTo5+q5jvWmjPLtgOOdZtqgk47dikgSxooz82lQTCztqa
L2f1vCBUkMYUY7UHn2AJl5ohrPa709u6YFAvA8r2CxVSeCvQO0ZjL/raXO8MMzKy
oUE6BNmeYAOmH2y1+S3/MybGlgbMotDCP2DzdJhBhk3ygWooIfq41w4nSL+T9Y8R
VnuF4j6bU66t8ooBTVMTPqiuq2KeWt/O/p9w0ajUMJXc8S92Ohogu+v5OPxICrTV
h7ucidXKUOrdAVbxd3zVLJ68Kg1UVVmWOcP0TBkywTgcpTklqTloFpjhN+fsISAe
m87W86QS7lUxOqdWztW5/Jwr5tVyM+dIqy5+5QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFdw9hKr9F0cWwMkTuw6vQ1sOl4gMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4L2FiYjI0OTJkN2FlODIzYjhhNjczZTEwZDgyM2Y2YzZiMjg3YzM3ZTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT3jzANBgkqhkiG9w0BAQsFAAOCAQEAndEdalmll7A4xx7b
AueP0eQVVRW/M0uWORQDm9eZ+HZnm1ef/u5R1EobBECwDKWjfYuH0ciz2JzUy8zr
bO7mpC/PgJ0d1Vhs6zS1vBs80FxMFUQ+K6xZaMQulU2JSOp3ds6kfWIVXH5ys4P8
Ixy+SK9qcFCbfpXPcMaZjOaerZWxfHYWFEwwSSVQTopy/cGBWhQvpqU7rCezwm1h
/8BlotSIv+LZUgbttJ+ruVAWbqQ2/0JYpAqhtDyp6GLIQALgjXzqMdDBjOC6XKX+
6pA4G6P0nsnwwtbr5bNQ93OAUS2o2LGQYL79Hk7dXhOMXY/4qO1xbcC8LwoPOZiI
lOj6tA==
-----END CERTIFICATE-----