Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c05807fa8d677b54b2b311f6a07b3104be5c09c1.roa
File:                     c05807fa8d677b54b2b311f6a07b3104be5c09c1.roa (raw, json)
Hash identifier:          ht0xuZtopVTxmOpJ/6PYGtw/YV/exZp8Rln2OsaVkWo=
Subject key identifier:   BF:FA:B5:E4:D4:84:9F:B1:33:34:6A:D3:0D:60:ED:05:6C:01:71:BE
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       10EE0D
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c05807fa8d677b54b2b311f6a07b3104be5c09c1.roa
Signing time:             Wed 24 Mar 2021 14:44:28 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.205.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1109517 (0x10ee0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=c05807fa8d677b54b2b311f6a07b3104be5c09c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:d1:94:87:63:aa:48:c4:05:1f:32:03:65:
                    18:3e:d6:14:f6:b2:a9:1b:83:73:fe:6a:52:48:3f:
                    91:67:05:69:36:0c:ae:b5:63:b6:aa:3b:98:4c:3e:
                    6f:11:c1:0b:9c:1a:a8:2e:4e:87:53:24:06:41:e2:
                    e4:21:97:35:e3:3e:43:d4:60:a5:f7:95:7b:ba:2f:
                    b6:5e:16:53:3c:eb:bb:03:ac:54:71:8e:d9:a4:d1:
                    be:69:b9:ca:4d:1e:07:03:64:a6:e4:8a:3c:b7:00:
                    df:25:29:74:24:f8:53:77:85:da:03:c7:da:f8:c0:
                    4e:47:5b:a1:96:c6:46:2f:9f:b2:4f:63:13:83:81:
                    93:bc:3e:94:15:7a:f6:59:dc:4b:88:d2:46:86:08:
                    2c:f0:cb:5c:99:81:73:c1:b1:fb:1f:67:fa:8a:30:
                    f5:2d:10:15:b8:3a:8f:ff:5d:12:64:f1:c1:7a:63:
                    8d:c4:d1:a3:d1:7e:fa:e6:43:2f:76:5f:f2:76:6c:
                    75:b0:19:f4:d5:be:2b:59:ac:9a:57:ae:fb:bd:e6:
                    22:ca:c9:58:e0:ee:6c:1b:36:52:26:ec:29:40:72:
                    94:7c:2b:e7:c7:1f:0e:53:53:cd:ab:76:7e:bd:d5:
                    03:0c:37:3c:06:5a:73:d4:14:aa:c2:f8:0d:f1:7a:
                    ba:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FA:B5:E4:D4:84:9F:B1:33:34:6A:D3:0D:60:ED:05:6C:01:71:BE
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c05807fa8d677b54b2b311f6a07b3104be5c09c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:c0:a3:98:35:e7:64:39:b5:5e:10:75:85:6d:41:e7:bb:0a:
         76:f3:e7:b5:42:4d:66:9e:10:5e:a1:ea:8a:c2:4f:b5:94:8b:
         c0:85:bf:01:16:a0:00:52:d1:95:e3:7a:92:01:4f:02:b7:46:
         c4:43:4b:93:1c:bb:72:7a:40:b2:aa:38:61:b4:85:2c:90:04:
         ad:a0:95:29:59:fb:32:34:93:74:34:85:63:ce:cb:ff:90:b6:
         5a:79:84:ba:fb:ea:c4:0f:42:4a:ee:96:d1:27:a2:4a:53:39:
         11:ac:d1:37:e7:6e:a2:c2:17:92:70:e3:96:51:6e:77:9e:5a:
         8c:d1:95:99:10:3c:bf:5e:84:fd:dd:b4:c1:c7:d2:6b:78:5d:
         3b:96:2e:e1:5d:a2:e5:3d:81:c8:eb:30:92:5d:9b:96:dc:4c:
         70:40:d5:bc:b2:09:3a:7d:eb:eb:d3:94:d2:a1:b7:9b:8a:92:
         c8:8b:d3:a3:1e:a5:52:6b:b4:19:57:dc:0d:5d:85:f4:a7:c3:
         81:db:28:7d:8c:3c:35:ff:83:f8:9c:78:43:fb:ce:31:8e:e4:
         46:81:c2:08:b1:d1:c8:2c:d5:72:65:bf:9f:be:8b:02:0d:18:
         85:09:4f:e5:a8:1c:b7:2a:73:9f:9d:e5:bd:4d:2d:c1:9a:f0:
         06:88:48:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----