Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c1f05466857cb156b4995285d2c2712933c8a7b3.roa
File:                     c1f05466857cb156b4995285d2c2712933c8a7b3.roa (raw, json)
Hash identifier:          oQXWOw3QPU279IZ5FAoRtcaT38KJ7ZGWelG3oDue6FQ=
Subject key identifier:   D3:89:FE:1D:C7:F5:88:19:CC:78:E4:15:CE:E0:B0:D9:74:EA:51:97
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       100F4B
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c1f05466857cb156b4995285d2c2712933c8a7b3.roa
Signing time:             Wed 24 Mar 2021 14:44:12 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.33.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1052491 (0x100f4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=c1f05466857cb156b4995285d2c2712933c8a7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:bb:59:28:3f:98:a1:4c:e7:61:c4:71:26:
                    9e:82:49:da:98:3f:37:03:09:ca:59:f2:98:fc:62:
                    63:6e:f8:5d:3d:c0:03:13:67:75:6a:fd:2a:73:60:
                    0f:52:db:04:e0:d0:2e:78:2f:96:04:f6:d8:1e:49:
                    20:42:9b:b0:71:40:de:98:c0:e5:1a:30:59:5a:3a:
                    2e:2b:c0:c7:f6:1e:60:74:36:9d:32:47:46:a9:c3:
                    da:90:af:8b:01:79:53:0f:3e:25:0a:34:13:3d:5e:
                    98:4b:9d:21:0f:ec:97:69:50:57:03:23:dd:1f:a3:
                    49:31:75:63:44:cd:38:ca:1b:d9:9d:4a:6d:fa:ab:
                    1d:f3:ac:8d:75:0a:dc:c0:f8:8d:90:3e:18:57:11:
                    0f:8e:6f:d5:62:78:93:95:52:04:cb:e5:83:dc:d5:
                    1e:74:8f:e5:7a:b1:5b:c1:37:f8:fd:b1:ba:ff:56:
                    b8:93:6d:a5:e1:8a:48:0e:7f:bf:a7:be:77:de:19:
                    47:04:38:8d:21:e9:86:6d:ea:fc:e8:f9:4e:72:7e:
                    07:43:77:4e:f9:b0:3b:a6:3a:55:2a:ef:81:f3:6a:
                    ad:24:fc:b5:51:6f:7e:e8:ed:f6:34:d8:53:ba:3f:
                    a0:3c:d2:31:10:7a:ca:8e:1e:1f:8c:81:10:1e:81:
                    78:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:89:FE:1D:C7:F5:88:19:CC:78:E4:15:CE:E0:B0:D9:74:EA:51:97
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c1f05466857cb156b4995285d2c2712933c8a7b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:a9:87:b7:78:e2:bc:01:00:2d:d7:ce:c2:3d:22:0b:29:c9:
         db:7b:9d:a5:3f:c9:5d:fa:a0:d3:a8:db:09:5e:2e:1e:67:91:
         7e:ab:75:14:19:d5:4d:de:88:d5:b8:d6:50:d5:c7:ac:c4:a3:
         e4:4a:0b:a6:6e:a5:98:d1:05:c6:06:c9:ef:aa:d4:a4:b5:7c:
         d9:e4:00:18:64:d9:c7:65:9a:b3:ee:e0:a9:47:c2:2b:de:73:
         bf:f4:2a:0a:15:82:b7:bc:b2:26:24:ce:c2:8d:cb:d8:4e:d7:
         b6:b3:0b:f6:07:b3:98:dc:b3:13:49:a1:85:6a:45:aa:f4:75:
         c9:90:b4:38:d4:64:aa:9b:62:3c:98:cc:c5:d0:06:01:29:3f:
         c2:aa:d5:7f:6c:07:b6:c7:34:2a:23:e8:5a:10:73:7c:ca:1c:
         94:cf:ae:f7:22:fc:f4:a8:87:ea:76:a6:6c:29:30:a7:69:27:
         47:fd:19:5c:34:d1:86:96:d5:23:a9:bf:06:c8:9b:e0:20:b7:
         30:b0:80:f6:7a:23:64:dc:7a:43:d5:55:37:41:71:41:4e:e1:
         07:2e:b9:d2:9c:17:6a:b7:7a:f2:a4:0b:69:89:0e:16:3a:b2:
         e7:da:30:49:27:01:d9:a4:75:f4:68:60:c8:2b:b8:e7:4e:ac:
         cd:ad:7a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----