Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ea6c7d04d6a0ee0fcec2be1603da81167a64bf27.roa
File:                     ea6c7d04d6a0ee0fcec2be1603da81167a64bf27.roa (raw, json)
Hash identifier:          xbaEbNNbXmXd2qK31OiZu4TvcS35Cn82Fcztg4vHp+c=
Subject key identifier:   FC:36:17:06:20:B8:2D:96:77:E8:5E:90:1A:0B:78:B0:16:30:79:FE
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       16E28A
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ea6c7d04d6a0ee0fcec2be1603da81167a64bf27.roa
Signing time:             Thu 23 Sep 2021 01:29:56 +0000
ROA not before:           Wed 22 Sep 2021 03:00:00 +0000
ROA not after:            Fri 22 Sep 2023 03:00:00 +0000
asID:                     278
IP address blocks:        132.247.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1499786 (0x16e28a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Sep 22 03:00:00 2021 GMT
            Not After : Sep 22 03:00:00 2023 GMT
        Subject: CN=ea6c7d04d6a0ee0fcec2be1603da81167a64bf27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:d3:2c:01:08:b2:63:0b:44:d3:8d:71:5a:
                    37:8a:df:32:88:a6:ef:5f:22:1f:b4:06:bc:8d:68:
                    64:9a:2e:7a:19:78:4f:9a:6d:23:35:f9:c1:96:fa:
                    b1:e9:db:6d:00:3e:88:3a:83:cc:3d:64:a9:79:7a:
                    d7:59:13:63:92:42:eb:24:97:8e:83:ff:96:d6:05:
                    0f:e5:d4:c2:2e:25:9c:69:77:82:08:62:2a:b5:ac:
                    b9:4d:80:00:27:40:1a:d2:ff:29:ac:bf:3d:e3:7f:
                    4d:16:ea:c3:47:74:ca:fd:cc:fb:5e:8c:0c:bd:30:
                    7d:af:33:0b:fe:c5:f7:ad:d0:a0:bd:8c:04:a8:4a:
                    70:7b:6a:72:cd:a9:6a:07:63:b7:e3:01:f6:78:85:
                    5a:f7:3e:6a:d6:bd:60:87:b3:2d:d4:01:43:6c:06:
                    70:fe:ea:93:d0:6b:be:da:d5:dd:1b:f7:db:c1:4f:
                    16:41:94:0c:cc:c4:95:ba:ea:bf:1d:38:38:e5:8a:
                    b5:a0:cf:28:3d:73:c1:24:9e:2b:33:01:8d:87:e3:
                    c9:93:42:52:4b:8c:46:1f:46:5b:56:a3:bc:5d:99:
                    c7:5c:27:80:d9:70:37:6f:f5:6c:a5:78:81:84:c0:
                    58:4d:82:4e:07:0f:a5:4c:62:83:16:92:bb:99:dc:
                    c0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:36:17:06:20:B8:2D:96:77:E8:5E:90:1A:0B:78:B0:16:30:79:FE
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ea6c7d04d6a0ee0fcec2be1603da81167a64bf27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:83:05:39:a8:79:01:d9:c9:a1:84:f1:a6:e0:1f:53:0f:a5:
         cc:5b:39:46:a3:ca:c9:22:5a:a0:62:15:cd:70:fe:88:bd:39:
         98:4d:41:db:7b:39:d3:1a:4f:1f:73:96:d7:79:50:5b:8f:4b:
         85:82:69:6c:b7:c2:f2:db:e9:8c:f7:4e:cb:ed:f0:17:26:ef:
         74:78:32:50:51:f4:39:7f:51:fd:14:e4:d1:34:29:57:ef:e7:
         03:76:9e:00:6d:87:8b:2d:fc:8c:2b:04:78:87:05:e4:44:8d:
         f3:ee:10:58:1f:27:8a:ed:14:76:76:56:2d:34:8f:18:3f:79:
         d9:8f:dd:9f:0c:68:3b:9a:f5:b6:33:3f:1b:cb:5c:e8:75:60:
         85:4f:3c:8d:e4:a8:19:4f:0e:ca:e5:5d:37:d7:98:2e:56:8e:
         16:32:cb:60:21:10:f5:97:8c:e7:aa:47:a0:d9:c0:fc:30:0c:
         17:9c:8d:9c:db:b4:89:4e:63:a4:30:65:5b:ca:c5:1a:0c:32:
         13:08:5e:4b:30:e8:e2:45:c8:5e:9a:58:92:1a:09:80:e6:73:
         81:29:93:bb:f6:38:7f:07:b6:ed:18:81:e6:ed:8e:d0:21:91:
         40:d9:55:4a:ed:45:57:3a:2b:2f:87:c6:bd:ba:03:4e:fe:64:
         da:cc:60:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----