Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d9955687d76172d41e0036ea0f6af814b26d5b14.roa
File:                     d9955687d76172d41e0036ea0f6af814b26d5b14.roa (raw, json)
Hash identifier:          FmDmI/zRk6iT0uU/wuqRWp3bYLmTkilot6d0xx6X7tM=
Subject key identifier:   AE:2F:D3:A8:04:8F:74:98:FF:C9:02:60:2E:9F:27:2A:2D:BE:2F:68
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0FC5F9
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d9955687d76172d41e0036ea0f6af814b26d5b14.roa
Signing time:             Wed 24 Mar 2021 14:44:06 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1033721 (0xfc5f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=d9955687d76172d41e0036ea0f6af814b26d5b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2f:56:13:d9:7d:4b:d0:cf:28:22:99:42:2e:
                    06:04:b8:2b:15:6c:74:f7:bf:e5:57:ee:5a:48:3a:
                    1e:6e:76:a5:2d:50:17:0d:9f:b1:1d:2a:30:a8:a7:
                    df:6a:0f:a8:4e:5f:33:07:3b:7d:5d:41:43:67:51:
                    dc:84:52:b7:64:50:b5:3f:b8:56:f0:82:9f:85:a3:
                    53:ef:b9:e5:10:4e:29:e3:61:4d:27:8c:6b:89:41:
                    34:e2:16:68:a3:6b:75:e2:d8:32:28:66:ff:dc:4d:
                    2c:eb:80:d8:d2:0d:b2:24:c3:f8:a7:23:d5:95:89:
                    59:59:c6:10:40:c0:ab:d0:2c:4c:13:38:2a:52:82:
                    33:cf:ee:25:46:28:d8:c0:c8:27:91:f1:8b:d4:e2:
                    75:80:7c:9a:f7:80:f2:63:b3:1d:9a:de:50:61:16:
                    8f:99:de:65:3e:61:aa:66:a3:c5:a5:28:80:42:4a:
                    01:24:8a:7e:3a:7c:d0:60:df:09:c1:b4:e2:64:d2:
                    8d:dd:2d:a0:38:8c:b6:64:64:e2:65:e7:75:ec:ce:
                    3a:26:20:26:2b:01:42:76:c3:9d:40:2d:3c:5f:79:
                    89:c4:ea:e1:eb:37:20:78:d6:23:f2:12:d6:92:5c:
                    0a:fe:ad:25:38:86:14:e8:89:06:78:23:2d:32:56:
                    77:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2F:D3:A8:04:8F:74:98:FF:C9:02:60:2E:9F:27:2A:2D:BE:2F:68
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d9955687d76172d41e0036ea0f6af814b26d5b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:03:b5:5e:6d:28:e9:01:b5:2a:15:62:8a:ca:37:73:b9:8e:
         0b:86:bd:69:3f:e5:5e:ee:31:b6:73:f1:5f:ca:d9:a7:78:02:
         a9:b4:f4:67:b6:e2:08:08:56:18:af:ec:76:bf:2b:00:01:20:
         26:d1:28:86:9b:5e:df:d1:df:64:a7:eb:1e:d3:ed:2a:fc:3a:
         b5:bd:34:e9:19:21:00:94:c9:fb:49:6f:7a:5c:36:74:a5:35:
         fa:fd:dc:83:69:26:55:15:a2:2b:cb:80:35:40:33:8f:95:88:
         1d:8e:27:10:96:7f:17:fe:64:3e:01:a5:44:81:f7:a3:20:a9:
         47:98:c3:ef:02:0c:34:e7:d8:21:d6:b7:1f:f7:b2:74:92:ef:
         7e:72:85:e2:b1:67:63:b8:71:59:b3:95:6e:f6:e7:9c:43:14:
         e1:60:f0:91:87:93:9c:a0:59:46:83:cc:8b:5a:4d:45:63:4c:
         12:8c:4c:09:36:d3:0f:e8:8e:4f:28:0d:b2:d0:54:f9:07:c7:
         d9:68:0c:18:43:83:4e:cd:e8:d3:af:31:50:e3:89:ed:2e:55:
         12:34:69:93:0e:2d:71:bb:a1:ec:b3:4d:af:a8:a5:39:0a:cf:
         2c:6e:f3:3b:81:26:0a:90:66:65:54:ff:60:33:20:ee:61:75:
         5a:17:eb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----