Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b36aeebb5a553e57fcb35b7634aaace190539792.roa
File:                     b36aeebb5a553e57fcb35b7634aaace190539792.roa (raw, json)
Hash identifier:          5KfsYbBNubgZ14qWj5yaZSVjoLckM+amP9Lb29VVjFg=
Subject key identifier:   0B:4D:E7:B4:B0:5A:17:23:69:40:C0:7C:B3:8D:0E:F5:49:92:85:CC
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0FB41D
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b36aeebb5a553e57fcb35b7634aaace190539792.roa
Signing time:             Wed 24 Mar 2021 14:44:04 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1029149 (0xfb41d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=b36aeebb5a553e57fcb35b7634aaace190539792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:44:f4:05:41:be:19:b5:26:71:20:76:33:
                    80:6f:9c:eb:f7:09:46:09:ed:6d:c7:45:eb:97:99:
                    ba:ab:4b:b0:00:a0:11:17:40:85:83:a2:b9:19:62:
                    b7:b3:e2:7d:b7:93:5f:e3:d3:2f:97:7f:0d:82:1f:
                    3b:6c:a7:13:80:76:08:f5:26:76:31:a8:06:b7:0c:
                    ad:81:bd:2e:54:fc:dd:9d:8a:18:47:2c:cf:84:0a:
                    9e:ca:3d:e0:80:65:a4:2e:7a:fb:d2:09:86:bc:d7:
                    d6:6c:cc:7f:fd:84:e6:11:08:68:b1:4b:0e:c0:d4:
                    ab:cb:4b:0e:05:b2:1c:17:7b:8b:62:26:fe:5b:34:
                    a9:7b:32:35:c1:07:c9:8e:39:13:c7:3b:bf:4a:29:
                    96:e0:58:e7:76:e6:73:b0:63:34:8b:8e:d1:e7:24:
                    e7:f1:8d:34:40:2b:c8:dc:d2:f2:63:f6:10:f3:19:
                    2a:97:03:12:a3:e6:45:2e:ba:db:5d:20:af:be:8d:
                    16:73:77:18:44:9b:77:1f:f5:a1:10:63:65:86:7f:
                    6c:5a:d5:8f:c6:ae:f5:a7:ae:13:c5:b3:bf:9e:e1:
                    5d:55:05:1e:c1:8b:fb:cf:b0:4e:b3:f6:04:ed:b4:
                    90:f5:f2:a7:27:99:a1:24:2e:be:74:91:fe:aa:a5:
                    8e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4D:E7:B4:B0:5A:17:23:69:40:C0:7C:B3:8D:0E:F5:49:92:85:CC
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b36aeebb5a553e57fcb35b7634aaace190539792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:e6:a5:fb:8d:bc:c3:9f:ce:66:75:f8:8a:8c:f4:ba:a9:c9:
         a1:fe:e9:81:48:57:36:65:86:ba:dd:7f:36:6e:b6:34:c7:3e:
         04:c3:e3:1d:50:a2:27:97:36:27:3a:61:22:96:d2:6f:64:66:
         2a:c4:0f:4b:68:a3:28:f8:95:cb:19:ff:c6:6c:de:6d:d9:1c:
         60:00:2d:5b:72:ef:a8:f2:cd:73:22:49:a6:b7:28:76:4e:e5:
         11:c9:1c:1c:c7:b0:65:63:01:d5:92:2e:1e:f9:aa:d4:92:47:
         b3:ea:ce:c3:97:dc:0c:66:4f:e4:df:da:4f:39:2e:a5:09:56:
         06:f2:fd:eb:bc:50:d0:b4:d7:dc:79:13:ce:3c:8c:5e:2f:f5:
         ce:b2:72:dc:a6:98:67:0f:16:99:e1:a5:35:31:2a:03:64:8b:
         2a:6e:b7:b3:ec:91:99:76:e8:87:61:f6:08:1f:21:45:2f:3a:
         98:d7:06:19:d8:94:d3:96:ed:f2:e7:cf:48:1c:31:76:22:27:
         49:63:cc:fa:01:4e:44:c8:0b:7f:fc:21:0e:12:06:c2:0d:e9:
         53:17:94:e0:f6:57:7e:2f:68:3a:31:76:cd:e7:c2:3c:03:14:
         b6:8d:18:f9:e0:2b:f5:28:7f:6b:6c:e6:b1:a6:eb:b1:30:76:
         5b:d6:a5:26
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDD7QdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEyhiMzZhZWViYjVhNTUz
ZTU3ZmNiMzViNzYzNGFhYWNlMTkwNTM5NzkyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAugtE9AVBvhm1JnEgdjOAb5zr9wlGCe1tx0Xrl5m6q0uwAKAR
F0CFg6K5GWK3s+J9t5Nf49Mvl38Ngh87bKcTgHYI9SZ2MagGtwytgb0uVPzdnYoY
RyzPhAqeyj3ggGWkLnr70gmGvNfWbMx//YTmEQhosUsOwNSry0sOBbIcF3uLYib+
WzSpezI1wQfJjjkTxzu/SimW4FjnduZzsGM0i47R5yTn8Y00QCvI3NLyY/YQ8xkq
lwMSo+ZFLrrbXSCvvo0Wc3cYRJt3H/WhEGNlhn9sWtWPxq71p64TxbO/nuFdVQUe
wYv7z7BOs/YE7bSQ9fKnJ5mhJC6+dJH+qqWO1QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAtN57SwWhcjaUDAfLONDvVJkoXMMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4L2IzNmFlZWJiNWE1NTNlNTdmY2IzNWI3NjM0YWFhY2UxOTA1Mzk3OTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT3PjANBgkqhkiG9w0BAQsFAAOCAQEAD+al+428w5/OZnX4
ioz0uqnJof7pgUhXNmWGut1/Nm62NMc+BMPjHVCiJ5c2JzphIpbSb2RmKsQPS2ij
KPiVyxn/xmzebdkcYAAtW3LvqPLNcyJJprcodk7lEckcHMewZWMB1ZIuHvmq1JJH
s+rOw5fcDGZP5N/aTzkupQlWBvL967xQ0LTX3HkTzjyMXi/1zrJy3KaYZw8WmeGl
NTEqA2SLKm63s+yRmXboh2H2CB8hRS86mNcGGdiU05bt8ufPSBwxdiInSWPM+gFO
RMgLf/whDhIGwg3pUxeU4PZXfi9oOjF2zefCPAMUto0Y+eAr9Sh/a2zmsabrsTB2
W9alJg==
-----END CERTIFICATE-----