Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fafb3bbeafd63cd3fdbbcee6fdeb0dfd82f233a1.roa
File:                     fafb3bbeafd63cd3fdbbcee6fdeb0dfd82f233a1.roa (raw, json)
Hash identifier:          A7gtQzldhowPu2lV9ZxW/p7TqvZXBaxu3Nq4POHv0lQ=
Subject key identifier:   54:C8:3E:B0:91:15:E2:F6:E5:64:A6:68:D3:31:97:AF:BA:AB:EA:18
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       10FB65
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fafb3bbeafd63cd3fdbbcee6fdeb0dfd82f233a1.roa
Signing time:             Wed 24 Mar 2021 14:44:29 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.41.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1112933 (0x10fb65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=fafb3bbeafd63cd3fdbbcee6fdeb0dfd82f233a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ff:da:fb:de:68:2d:2d:8e:49:aa:ca:51:81:
                    72:3f:9e:ae:d5:de:eb:cf:19:29:69:f9:41:87:2b:
                    16:de:f1:de:cb:ad:f5:15:ed:de:aa:bb:71:a3:9e:
                    3e:d3:e5:16:61:b3:2e:07:2a:7a:ca:b3:e1:24:dc:
                    ae:24:eb:0c:8f:0e:e9:3d:24:99:a8:f9:db:8d:d3:
                    31:b8:12:9a:59:0b:1b:61:9d:c3:ea:41:a9:c5:46:
                    ad:c3:80:20:a7:b1:3c:e7:36:0c:1c:09:73:40:52:
                    58:6b:a5:74:35:a2:47:a4:00:4a:fc:e1:74:f4:6a:
                    4b:64:c2:2c:de:f4:13:a3:55:7a:2d:80:55:3e:ab:
                    06:2e:d9:a5:1e:71:0d:cc:6c:d4:e9:de:2c:09:c7:
                    bc:67:0e:c1:99:aa:74:ea:3f:9a:e8:7d:40:ba:6c:
                    60:61:9b:45:66:6d:5c:03:17:ee:b9:65:1e:16:e3:
                    cc:9f:56:24:6b:2c:54:b1:2c:32:06:bc:20:85:e0:
                    b6:5e:42:0c:56:53:93:f7:4b:e7:09:94:67:34:47:
                    c9:7e:d0:7d:25:5f:1b:20:78:58:84:f7:63:24:d4:
                    d9:35:44:c8:40:55:0b:ed:06:4c:1e:6b:4b:b0:f3:
                    59:fd:48:da:02:a3:a1:e1:b2:6c:55:e1:b7:8b:91:
                    a0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C8:3E:B0:91:15:E2:F6:E5:64:A6:68:D3:31:97:AF:BA:AB:EA:18
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fafb3bbeafd63cd3fdbbcee6fdeb0dfd82f233a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:11:52:23:33:ea:22:53:1e:f8:37:0d:5b:0d:ee:ab:25:85:
         c6:58:fa:95:db:c1:ef:70:ca:b9:ce:e0:e7:15:6c:6c:f7:16:
         c8:74:e6:ae:c9:5e:1b:75:af:f8:d9:54:42:59:6d:0a:f6:1a:
         8e:49:cc:60:12:f0:ba:87:44:4e:77:2b:d9:c2:58:48:5f:41:
         e1:46:fd:23:1f:12:8e:89:2b:25:08:92:06:2a:3a:99:30:3c:
         be:19:6b:d0:5c:26:84:79:06:4d:ef:57:ae:12:7b:3f:94:da:
         8a:91:9c:79:16:46:84:33:c8:42:c0:bc:1f:56:53:91:69:74:
         9e:dc:b9:3e:1d:fc:66:0a:5d:51:82:59:0f:ca:5e:d9:a5:84:
         8a:a2:75:64:7b:f9:2d:49:35:22:1b:a8:9f:f4:f1:99:2d:34:
         c7:f0:d7:6d:50:70:42:2a:c4:c7:f1:f5:f3:ea:08:87:f3:58:
         27:50:cb:3e:e9:10:b0:f1:1c:dd:d9:69:12:ba:b9:22:c1:5b:
         2c:19:5f:e7:2c:64:6d:4d:29:75:6b:81:49:95:dc:76:34:53:
         08:b2:41:bc:26:ef:81:78:9b:dc:b7:5c:6b:84:43:60:5b:00:
         71:43:82:f5:a1:d3:85:1c:a6:6a:5e:ff:b9:b8:df:e4:96:d4:
         39:d8:7b:a7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEPtlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEyhmYWZiM2JiZWFmZDYz
Y2QzZmRiYmNlZTZmZGViMGRmZDgyZjIzM2ExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwP/a+95oLS2OSarKUYFyP56u1d7rzxkpaflBhysW3vHey631
Fe3eqrtxo54+0+UWYbMuByp6yrPhJNyuJOsMjw7pPSSZqPnbjdMxuBKaWQsbYZ3D
6kGpxUatw4Agp7E85zYMHAlzQFJYa6V0NaJHpABK/OF09GpLZMIs3vQTo1V6LYBV
PqsGLtmlHnENzGzU6d4sCce8Zw7Bmap06j+a6H1AumxgYZtFZm1cAxfuuWUeFuPM
n1YkayxUsSwyBrwgheC2XkIMVlOT90vnCZRnNEfJftB9JV8bIHhYhPdjJNTZNUTI
QFUL7QZMHmtLsPNZ/UjaAqOh4bJsVeG3i5GgVQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFTIPrCRFeL25WSmaNMxl6+6q+oYMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4L2ZhZmIzYmJlYWZkNjNjZDNmZGJiY2VlNmZkZWIwZGZkODJmMjMzYTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT3KTANBgkqhkiG9w0BAQsFAAOCAQEAkRFSIzPqIlMe+DcN
Ww3uqyWFxlj6ldvB73DKuc7g5xVsbPcWyHTmrsleG3Wv+NlUQlltCvYajknMYBLw
uodETncr2cJYSF9B4Ub9Ix8SjokrJQiSBio6mTA8vhlr0FwmhHkGTe9XrhJ7P5Ta
ipGceRZGhDPIQsC8H1ZTkWl0nty5Ph38ZgpdUYJZD8pe2aWEiqJ1ZHv5LUk1Ihuo
n/TxmS00x/DXbVBwQirEx/H18+oIh/NYJ1DLPukQsPEc3dlpErq5IsFbLBlf5yxk
bU0pdWuBSZXcdjRTCLJBvCbvgXib3Ldca4RDYFsAcUOC9aHThRymal7/ubjf5JbU
Odh7pw==
-----END CERTIFICATE-----