Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b7689a41cbb108de2deca32171507168b17b951f.roa
File:                     b7689a41cbb108de2deca32171507168b17b951f.roa (raw, json)
Hash identifier:          Fud7I5O4LqBNjMoLLcLFUAzQrHk7vVINm/Xa29iuNbA=
Subject key identifier:   6B:F3:EE:60:F1:BD:9D:0F:6A:BC:25:14:DD:D7:DA:F1:81:90:58:55
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1073E4
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b7689a41cbb108de2deca32171507168b17b951f.roa
Signing time:             Wed 24 Mar 2021 14:44:18 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.102.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1078244 (0x1073e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=b7689a41cbb108de2deca32171507168b17b951f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bd:44:14:a6:a9:e5:a0:f0:93:13:71:bb:84:
                    2d:33:e5:08:bf:c2:2a:41:a2:71:81:62:c0:0d:b0:
                    43:df:f7:5d:81:53:48:0b:c1:86:0c:e7:10:9c:ab:
                    ec:16:84:96:3a:46:df:7f:9d:ea:4a:02:de:ce:84:
                    83:17:8d:5d:0e:1a:3e:aa:50:57:72:65:cc:ae:3b:
                    ac:c1:4b:2b:e9:17:05:97:8a:e2:1e:c5:dc:08:8c:
                    32:e5:1e:80:6b:06:2a:d7:b9:e6:04:7d:98:eb:ba:
                    03:44:03:1a:b8:7f:12:bd:14:ac:75:4b:3e:1a:49:
                    7e:3a:ed:d3:d5:1e:af:d4:25:77:48:78:27:81:b8:
                    09:44:d5:0f:69:6b:1a:52:e5:8c:50:d2:41:5b:b4:
                    6f:d6:a9:e3:fe:b5:35:2a:52:5d:85:79:bc:82:6e:
                    65:18:26:fb:27:63:b3:ea:09:25:83:b2:be:d5:1c:
                    34:b4:f4:4b:be:a0:13:0a:2a:85:15:ed:b5:1d:a9:
                    1a:d6:e3:92:60:31:27:5a:ca:fb:7a:93:90:03:11:
                    21:1a:d2:84:d7:11:19:e7:56:9d:8b:38:4d:e3:25:
                    e1:bf:6d:09:d1:82:15:b1:a2:f5:3d:3a:ce:fd:4f:
                    05:fc:21:ab:c8:cf:8f:3e:a9:ad:f4:73:d2:f3:52:
                    b5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F3:EE:60:F1:BD:9D:0F:6A:BC:25:14:DD:D7:DA:F1:81:90:58:55
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b7689a41cbb108de2deca32171507168b17b951f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ed:21:ff:6c:37:11:87:de:ee:40:1d:48:75:5b:b9:68:9a:
         f3:1a:a4:7f:0c:7d:e5:48:8e:16:aa:06:9a:73:7c:71:32:4e:
         df:5a:94:ab:24:6d:50:33:bd:31:23:2d:d3:d5:20:53:23:32:
         1a:01:d3:13:0b:84:ee:14:77:e0:02:34:59:35:57:a1:f7:e1:
         09:f5:2b:30:0d:6c:60:ec:47:41:a9:f4:dd:56:85:f6:ac:8f:
         e8:53:d0:59:6b:67:10:6c:17:b7:1c:29:92:1c:91:77:48:e0:
         56:c3:36:eb:1b:35:da:11:85:6a:92:f1:85:80:8f:37:c8:8e:
         4d:86:a4:a9:50:51:d9:de:d2:a1:91:a4:63:58:7e:b1:80:14:
         57:43:f7:c3:34:78:e3:c2:85:19:c5:33:14:b8:8c:fa:cb:0d:
         60:ee:f4:a2:d9:96:b1:fa:f2:0b:19:df:ae:e1:42:d0:49:bd:
         01:5a:37:f2:b3:50:ad:f9:8f:e1:2b:ef:77:40:f3:3e:ee:f6:
         1e:b2:1e:99:9d:ab:11:7d:c5:58:34:65:d7:47:03:ad:b1:0b:
         f8:09:d4:8c:b3:a4:71:0a:81:32:5a:18:3e:8e:28:85:55:1a:
         0d:f8:48:96:8f:ee:77:3c:90:2e:c5:cd:05:77:90:c2:73:f7:
         79:8d:d8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----