Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e6b95ca0ed9b21d4f90d9199d0bf8145c26f2fdb.roa
File:                     e6b95ca0ed9b21d4f90d9199d0bf8145c26f2fdb.roa (raw, json)
Hash identifier:          5IsaVMVsBAr0PqzlaGwvHd8nq4h5p/rtDRy86s5br6c=
Subject key identifier:   F7:81:C4:FA:07:06:DE:FF:25:C3:9C:5D:5B:9F:A5:10:B0:94:C8:D9
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1063C0
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e6b95ca0ed9b21d4f90d9199d0bf8145c26f2fdb.roa
Signing time:             Wed 24 Mar 2021 14:44:17 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.76.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1074112 (0x1063c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=e6b95ca0ed9b21d4f90d9199d0bf8145c26f2fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:29:ad:1a:1a:9b:87:37:6c:3c:ba:fe:b6:5f:
                    11:45:b8:d3:52:55:29:aa:fa:9f:6d:23:c5:fe:4a:
                    30:4b:14:9f:1c:9a:1f:d7:98:8d:a8:28:f9:d7:43:
                    b9:16:49:85:4b:fc:32:53:d6:8e:e3:fd:5c:88:3f:
                    ef:35:e1:66:b4:e4:91:4c:0c:77:92:b3:d3:93:f4:
                    7a:4e:87:ff:46:b6:9f:d5:61:4e:07:02:7f:7d:c7:
                    9b:e9:b9:d8:2d:2d:6b:aa:2a:31:78:df:03:7e:c1:
                    d5:fd:61:a9:ae:3c:e6:4e:29:9f:c7:94:c4:52:84:
                    25:6c:c8:86:5d:fb:89:d9:2f:90:cb:ca:8f:ec:eb:
                    94:5a:d4:89:fe:16:60:78:f8:ba:22:5a:62:8f:f2:
                    61:b2:06:01:fe:76:5d:b3:83:cc:2e:43:43:7b:c0:
                    b6:41:34:5f:29:c5:e5:1a:dd:fb:b6:96:6e:a6:08:
                    6d:0d:ec:22:e5:64:64:1c:c3:18:23:3d:e6:14:fb:
                    6a:b1:22:f1:cc:90:b2:3e:47:b8:d6:de:ae:42:69:
                    9e:28:ee:1e:33:89:9a:70:b7:2d:db:1c:51:ef:1c:
                    bf:70:d0:8a:44:b7:27:08:e7:ab:e7:d8:8f:58:33:
                    70:d1:ec:61:e0:da:48:67:ba:a9:6e:f7:af:6f:08:
                    a0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:81:C4:FA:07:06:DE:FF:25:C3:9C:5D:5B:9F:A5:10:B0:94:C8:D9
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e6b95ca0ed9b21d4f90d9199d0bf8145c26f2fdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:4b:b4:23:16:1a:ad:7a:9b:6c:bb:6a:5d:6a:01:53:36:4e:
         13:40:b4:59:4e:2b:73:a1:d2:1b:9f:d8:b3:c1:d4:08:11:74:
         58:55:fc:87:0a:62:6e:1b:2e:ec:0c:53:aa:35:7f:ea:fe:d9:
         4a:a5:64:d8:21:00:e1:7e:f4:a2:50:84:ca:80:47:8d:06:42:
         54:86:6b:45:44:26:76:75:66:ce:94:f7:7a:4d:b6:7f:66:46:
         2a:09:5a:b0:9d:ef:d5:5d:3b:2e:88:84:ac:43:db:e2:ae:52:
         e6:bb:cd:ae:a4:09:ce:3b:e6:a7:4b:5f:3d:f9:4d:8b:7b:8b:
         9e:84:dc:8e:a8:2c:af:f9:da:97:e8:f2:12:09:60:f6:70:31:
         37:cf:35:86:67:55:0a:05:9f:03:38:0e:7e:06:02:85:43:40:
         df:45:6b:fd:04:62:a6:9c:31:72:83:2c:db:e0:c6:1f:01:8d:
         08:c4:29:02:53:ad:9d:de:5c:e6:4b:e2:2f:1c:0c:58:41:c4:
         30:be:22:a0:87:eb:a8:73:b4:8f:dd:3e:c1:df:83:d4:f7:6f:
         17:74:bb:40:ef:0e:61:f5:84:cb:87:99:3d:43:99:f7:79:e8:
         e0:8b:09:8f:c5:b8:35:e2:a9:b7:33:3f:aa:3d:28:c5:82:c4:
         ff:99:25:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----