Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ad206de5ef712fee618ed632397e3f0adca564bd.roa
File:                     ad206de5ef712fee618ed632397e3f0adca564bd.roa (raw, json)
Hash identifier:          61gwAd7nz5I7fRYoLgbWLxgr1o7IU/btx8+aNXc6Ym8=
Subject key identifier:   81:B9:65:DD:B0:C2:4A:79:60:DA:8C:0C:FF:F1:C4:1D:C4:98:E4:39
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       10711C
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ad206de5ef712fee618ed632397e3f0adca564bd.roa
Signing time:             Wed 24 Mar 2021 14:44:18 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.128.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1077532 (0x10711c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=ad206de5ef712fee618ed632397e3f0adca564bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:10:e4:f0:e0:6b:e7:ab:66:c5:65:ff:4b:9a:
                    84:56:44:5a:71:95:ff:ed:ed:e7:21:b9:2a:3d:46:
                    8b:fd:c4:84:2c:19:6d:9d:8f:1b:71:fd:37:9c:3f:
                    5f:98:ef:59:65:5b:bb:3b:36:40:78:6d:48:ba:15:
                    4d:de:f7:f5:dc:57:10:c7:d6:b3:7c:52:24:91:25:
                    8a:5f:ce:8b:6f:b1:db:cb:6a:0e:74:14:29:1b:41:
                    ef:94:f4:a4:3a:7b:8c:5f:55:81:3c:8d:ec:3c:c9:
                    50:a4:2e:e3:ac:3f:49:e8:ad:aa:76:c5:08:9f:86:
                    1c:ba:da:d5:07:e4:38:fb:70:9e:24:27:4e:00:b1:
                    ad:e5:fe:c2:78:93:63:ba:87:65:9f:69:38:cd:26:
                    94:68:cb:d1:c4:a3:8a:1a:d8:92:f9:df:68:86:5e:
                    82:8b:24:ed:a9:95:8a:01:da:46:3b:2b:91:27:13:
                    fa:8f:84:e2:b1:92:67:bf:24:df:19:87:d7:01:90:
                    f1:a6:a0:d5:54:49:63:df:3c:3a:0a:a7:70:cd:89:
                    b5:00:af:a4:98:45:fc:2c:63:f2:35:b9:9f:0d:b4:
                    ba:9b:46:0b:f5:ba:65:e9:38:e8:db:d9:bc:64:1d:
                    48:70:3d:f9:69:06:f5:9a:09:f6:0f:dd:14:a7:cc:
                    00:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B9:65:DD:B0:C2:4A:79:60:DA:8C:0C:FF:F1:C4:1D:C4:98:E4:39
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ad206de5ef712fee618ed632397e3f0adca564bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:b1:70:92:53:51:7e:98:84:ba:32:58:7f:dd:bd:22:13:57:
         4f:08:7d:cf:dd:b7:15:d3:10:93:d7:b8:e8:32:0f:08:6b:99:
         87:e4:70:1f:ff:a2:a7:a8:a3:0a:ba:4f:b9:93:80:47:07:4e:
         b0:27:d4:c3:f3:ef:6d:79:46:72:5e:22:ff:a2:c9:7a:dc:3f:
         b2:d8:1d:b3:6b:43:8e:59:7a:dd:8e:7e:92:4d:01:0b:f8:2c:
         8f:e4:9b:1a:0f:da:da:6c:44:9c:a5:8e:f9:a6:83:a0:68:d6:
         4c:26:78:d2:aa:28:e9:e8:5c:d8:94:94:c6:99:4e:19:e7:b5:
         1d:09:c5:84:fc:08:b6:a2:11:f6:e6:e9:e5:c3:a3:45:7d:3c:
         f9:0d:f4:b9:b6:5b:aa:80:fa:6f:56:68:2d:22:c8:9c:4c:a8:
         dd:df:a5:25:c3:85:80:2e:db:5e:c8:5f:98:a5:d2:19:87:6d:
         25:f4:2a:00:6c:10:9d:36:04:fc:44:1f:de:14:f8:30:3d:59:
         0b:5b:b0:c4:c0:00:a2:61:24:08:c7:6c:c7:89:14:b7:b6:72:
         42:15:9b:fe:38:6b:f8:6d:ff:1a:a6:9e:b3:27:13:6a:3e:19:
         29:2d:d1:77:65:d8:1f:3a:7a:3d:dd:8d:c4:d2:db:0c:86:c1:
         c9:ad:03:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----