Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/8ae79044cc00178ccd4430b13516575121d18a6f.roa
File:                     8ae79044cc00178ccd4430b13516575121d18a6f.roa (raw, json)
Hash identifier:          SnqdMuw9fCPS74hfK1R9FqDldoZ8bja4GED+nVMNR5M=
Subject key identifier:   66:22:4A:5D:74:59:42:62:EE:BB:75:14:49:0D:FE:3B:F4:57:0A:F7
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15FE24
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/8ae79044cc00178ccd4430b13516575121d18a6f.roa
Signing time:             Thu 26 Aug 2021 23:06:30 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:60b8::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1441316 (0x15fe24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=8ae79044cc00178ccd4430b13516575121d18a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d5:c6:c1:96:d5:39:e3:95:7b:34:a4:35:5b:
                    14:39:36:c7:66:ca:2d:ee:88:b4:99:0f:56:23:53:
                    de:c7:2e:9a:1d:37:31:0e:3e:96:8d:00:76:0d:30:
                    aa:36:08:c5:f1:96:e9:c4:60:f9:ee:47:19:64:c1:
                    0e:ff:eb:1d:50:67:a9:d4:89:d0:18:86:93:f4:d7:
                    e5:c5:98:54:6c:5f:52:85:b2:e7:6c:1e:31:68:fa:
                    43:25:17:5b:9f:0f:69:66:68:e8:ec:4f:65:2c:21:
                    cc:9f:b7:9e:89:6d:44:64:ec:c4:4c:cc:cb:08:9b:
                    35:30:bf:17:2b:7e:bd:01:33:26:83:8c:c2:1a:b6:
                    c1:ad:1b:b4:4e:92:1b:f5:fa:d1:ba:01:b5:b4:3e:
                    c1:84:9e:39:12:6c:e3:42:07:0a:e5:f6:f6:59:7e:
                    8d:be:34:bb:f0:00:de:54:e6:9d:45:9b:b7:9a:c1:
                    d5:59:11:25:07:41:e4:52:19:a8:fd:ef:07:1f:2e:
                    b8:76:60:ae:8f:c7:52:74:da:3f:1b:4b:65:35:c5:
                    be:46:3f:9a:e2:24:21:19:9d:8c:36:74:21:05:d1:
                    04:47:2a:66:76:0a:c2:be:e6:e3:48:8c:47:31:63:
                    a9:c2:4c:38:0e:69:7c:42:4c:34:37:9c:0f:5f:87:
                    d7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:22:4A:5D:74:59:42:62:EE:BB:75:14:49:0D:FE:3B:F4:57:0A:F7
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/8ae79044cc00178ccd4430b13516575121d18a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:60b8::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:41:12:5e:a3:d4:01:ed:74:1a:a2:49:24:51:5e:58:f5:3e:
         d1:87:a0:b9:77:5f:23:1f:d1:7a:da:f6:69:74:98:8e:f4:0a:
         7e:fd:bc:93:a2:14:bd:e7:03:85:c2:44:c2:99:25:ee:49:36:
         ed:5f:c6:0d:74:34:8f:2e:49:7a:be:a6:73:e6:f7:c0:c0:88:
         b0:7b:e2:48:3d:3e:f5:1d:e5:0a:71:5c:2d:28:8f:8f:af:5a:
         a0:71:2f:f1:9c:fb:a0:22:2b:02:5c:5a:c9:f9:d7:fc:c3:e3:
         29:f0:4b:9c:8f:34:ae:9e:15:6b:26:6b:ca:ef:b1:0e:fe:d8:
         48:60:e2:18:ae:5d:b5:f1:a9:82:fe:cf:a4:91:42:c0:1c:ef:
         ab:b1:06:50:00:9f:23:b4:d4:26:5b:f3:c8:b4:48:90:99:ad:
         1e:d2:a3:c0:05:b1:9f:4b:a3:d0:b3:c0:00:fc:1a:a5:73:51:
         66:1a:df:8e:97:fa:f7:bc:a2:d6:1f:c9:3e:6d:2d:1d:e4:52:
         c5:a2:44:4a:ce:71:e5:5f:ee:ac:7c:fb:d3:30:71:f8:b2:e5:
         dc:27:94:a0:8d:db:73:38:08:da:c5:f4:da:54:9c:49:c4:89:
         b0:da:2e:78:f8:93:9b:cc:87:6a:62:f8:11:fd:15:e0:5c:43:
         f9:85:45:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----