Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c38506564e706a94195acfd136290718aa99fda1.roa
File:                     c38506564e706a94195acfd136290718aa99fda1.roa (raw, json)
Hash identifier:          NUqjMCvv7IjODC6HTHbL/c1atFTdW2aCtl8I7l6W8ZQ=
Subject key identifier:   9F:E6:97:4A:BA:CF:AE:A2:CB:F9:F8:BF:79:EC:79:DF:8C:5C:5F:1A
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1054B3
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c38506564e706a94195acfd136290718aa99fda1.roa
Signing time:             Wed 24 Mar 2021 14:44:16 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070259 (0x1054b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=c38506564e706a94195acfd136290718aa99fda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:eb:8a:3b:77:05:46:33:fd:b1:5f:39:fd:58:
                    fe:7f:2b:34:2b:98:50:cb:7c:d7:fa:66:4d:55:c0:
                    f6:41:aa:33:a7:27:6b:f3:90:d2:d4:42:21:3d:5d:
                    9d:3b:4b:58:0b:db:f2:a6:93:75:fa:1d:15:73:3a:
                    98:ae:c2:c4:a4:23:e3:3c:cc:6c:f4:c8:72:01:90:
                    ae:c1:97:6c:d8:62:49:d3:e2:97:9f:7c:0d:df:53:
                    93:35:db:5a:d3:e2:5f:42:65:e1:a8:90:eb:dc:e0:
                    5a:ec:a8:bc:6a:79:99:a0:f4:aa:d9:d1:76:ee:b1:
                    ec:b3:48:c1:4b:64:9b:52:bd:32:0d:07:30:6b:ef:
                    00:a8:a3:1d:d1:58:34:89:61:bf:41:96:dd:04:be:
                    0f:3d:21:99:f6:9c:d4:79:17:75:ea:03:8b:39:34:
                    92:65:77:eb:c6:87:48:01:ab:ff:eb:c5:41:a2:c5:
                    d3:1e:5b:31:5b:da:15:13:6a:7c:2c:3c:f0:0b:47:
                    b6:d1:34:e6:e7:95:5e:2f:91:ca:da:b9:85:de:d7:
                    82:35:34:59:3c:0d:3f:7c:9c:b7:a6:3d:0d:f4:b3:
                    f4:cc:76:c9:69:6c:dd:dc:30:36:bd:89:ee:52:0e:
                    79:ac:ec:90:a3:22:c5:a2:96:4e:47:e5:86:2c:d5:
                    5c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E6:97:4A:BA:CF:AE:A2:CB:F9:F8:BF:79:EC:79:DF:8C:5C:5F:1A
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c38506564e706a94195acfd136290718aa99fda1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:70:a2:f6:28:ad:c2:5c:8a:c1:9c:70:2c:c8:5b:8b:16:e0:
         c5:94:8d:68:69:41:17:cb:12:d0:27:aa:88:21:dc:3b:43:7c:
         61:0b:f4:ba:0c:c1:c4:6d:7f:71:0a:03:4e:8e:3b:f1:44:c1:
         a9:ce:18:e8:23:d7:b4:9c:7c:7e:c0:b4:41:31:6a:23:a1:9e:
         73:58:c5:ff:98:69:fb:53:9f:57:00:b2:b0:c7:b9:5d:55:78:
         a9:4a:34:e2:f9:23:71:e0:d3:58:74:50:6b:5a:07:b9:16:00:
         cb:93:f5:0e:f8:5c:c5:04:d5:d9:29:91:59:da:f6:43:5f:b9:
         ea:59:0a:bd:16:f8:1a:71:8c:c0:cf:15:4a:48:8a:df:d6:db:
         a0:a3:58:6c:c7:cd:0b:ff:bb:9f:52:78:6e:ed:e8:d4:4f:39:
         5d:e3:f7:43:98:09:c2:30:8a:a8:5f:c2:c9:0f:9b:be:f3:25:
         9b:12:bc:af:8b:bb:fb:de:70:5d:8a:c3:91:cf:a4:3a:94:95:
         ab:6b:f8:41:41:e8:12:df:e5:e5:62:a6:71:a2:91:8f:6b:6c:
         ee:73:a7:a4:1a:ab:86:a6:70:85:4e:c6:ca:d4:0e:7e:8c:ff:
         03:33:16:41:a4:17:dd:cd:29:82:10:80:29:a7:94:d5:80:ef:
         56:65:42:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----