Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b2f9bbb279c67fcd1c7459609f9f863431b24404.roa
File:                     b2f9bbb279c67fcd1c7459609f9f863431b24404.roa (raw, json)
Hash identifier:          an975YyWRku1+DxGg+xk4+uw9AD0iA9fFBKMjt07ETw=
Subject key identifier:   DE:7A:98:46:E2:7D:75:76:FA:B1:F1:B9:6B:C8:C7:D7:99:5F:A1:68
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       10AE2B
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b2f9bbb279c67fcd1c7459609f9f863431b24404.roa
Signing time:             Wed 24 Mar 2021 14:44:23 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.175.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1093163 (0x10ae2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=b2f9bbb279c67fcd1c7459609f9f863431b24404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:08:f3:df:7a:43:75:51:44:1b:d6:7c:44:d6:
                    e5:1c:94:5d:d3:95:93:38:78:01:61:d0:4f:af:87:
                    7a:77:6b:f3:cc:83:e8:be:f0:7e:00:1e:7e:16:f6:
                    0e:29:d3:d3:8f:61:06:42:92:f8:66:46:44:94:78:
                    40:b1:37:81:d4:ea:ca:f2:b4:78:93:07:9d:82:38:
                    fb:70:d2:3e:a1:9d:36:30:e2:bd:2b:96:20:8f:1a:
                    b1:7b:d7:91:66:82:17:52:1e:49:fd:0f:f5:38:33:
                    e2:af:5f:1f:90:21:cf:c5:b0:a1:3a:3b:a4:e7:a9:
                    72:6e:a7:82:c8:49:93:c5:b6:6b:2a:22:e3:55:ca:
                    e6:1e:9d:54:3a:5e:5f:ff:52:60:59:4f:2a:c1:68:
                    07:00:39:7c:04:c8:80:f9:41:a6:ed:e6:40:12:c3:
                    bc:39:25:c1:ea:c8:c5:f8:f5:a1:6f:0b:e4:0a:eb:
                    98:c5:53:c3:34:1d:c3:92:97:fa:96:5b:d0:b8:70:
                    32:94:46:b8:87:e4:e2:b9:ba:05:fe:d5:db:be:8f:
                    a1:b5:5b:2c:e6:8c:3f:90:bf:6d:4f:3e:0e:88:ec:
                    8c:22:eb:eb:91:90:9d:5a:9a:7c:8a:53:36:83:ce:
                    14:ed:93:71:a0:69:d0:c2:76:67:b0:eb:e3:ce:66:
                    ac:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7A:98:46:E2:7D:75:76:FA:B1:F1:B9:6B:C8:C7:D7:99:5F:A1:68
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b2f9bbb279c67fcd1c7459609f9f863431b24404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:0d:fc:a8:e8:20:2d:2f:04:a1:2e:8e:69:71:95:89:a3:12:
         5a:86:e1:6a:3b:8f:fe:aa:9b:04:ba:41:b7:80:14:b5:66:5d:
         15:36:5c:86:b1:cd:03:33:a9:59:0b:38:fe:62:31:17:cd:73:
         74:47:d5:0e:27:49:32:54:16:fa:cf:03:d9:cf:9c:47:86:4e:
         5e:62:1b:87:d8:2d:f5:f5:17:8d:b2:7c:f0:87:22:c3:a7:d3:
         53:49:8e:20:24:0f:c4:87:b1:22:8d:6b:95:e8:ba:bd:47:02:
         6a:58:07:80:02:c1:ac:bf:3d:15:a3:69:0e:ac:73:63:9d:9b:
         84:50:2b:a1:10:7c:d2:6c:ea:77:57:48:de:b2:75:3e:c6:b6:
         45:43:64:9a:0b:2c:5e:26:2f:c1:43:d9:fd:ee:b7:fa:0f:41:
         86:08:6d:6a:1e:f4:44:fb:09:e8:72:07:97:b4:df:b0:9f:c4:
         12:9e:e4:6d:36:05:a7:b6:c0:ac:bc:55:c5:ca:90:bf:fc:dc:
         3e:db:a5:8d:fb:fb:0d:7c:5a:8d:da:cf:c5:d8:7a:26:8d:cb:
         5c:04:76:e4:52:aa:bb:b9:b5:8d:3e:18:9d:7e:73:8b:c0:33:
         d9:c2:ac:ac:ab:7c:d4:27:cc:cf:d7:25:de:ec:77:a5:7d:6e:
         7e:84:2e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----