Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/0123ffbc45d63738d9377b5a66536eb80113d3e3.roa
File:                     0123ffbc45d63738d9377b5a66536eb80113d3e3.roa (raw, json)
Hash identifier:          knQyfDolMPTd94rSe3EMFPPo2xZynxYy5TYYvo9I+Lk=
Subject key identifier:   20:ED:63:EA:89:04:25:9F:C0:7C:86:C4:92:4F:34:63:AA:3B:12:5D
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15056A
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/0123ffbc45d63738d9377b5a66536eb80113d3e3.roa
Signing time:             Wed 18 Aug 2021 17:38:08 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6035::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1377642 (0x15056a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=0123ffbc45d63738d9377b5a66536eb80113d3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:fb:9f:6e:9e:88:5f:a3:27:cd:97:a8:87:
                    37:5f:8a:79:73:fc:cc:36:68:ea:f8:3a:99:4c:d8:
                    38:5f:cd:bf:ca:56:02:0e:71:f4:12:6e:d8:26:85:
                    3d:d4:29:f1:8e:6b:08:f4:85:ff:3b:13:5d:27:59:
                    4a:ba:b5:65:64:31:a0:e5:12:59:96:d0:12:5f:74:
                    8a:77:6b:e5:05:80:ef:f8:38:57:ff:da:69:3b:48:
                    fa:76:4d:70:32:1a:f5:ce:ec:d3:6c:d8:80:a6:ca:
                    54:28:24:10:92:e0:af:25:83:d8:03:3a:d1:c9:9f:
                    32:fb:15:a1:68:c1:56:7a:6e:d9:ae:32:77:29:40:
                    ba:83:cd:d7:03:ba:4b:23:79:09:ff:db:ae:8c:89:
                    dd:07:39:5a:35:cd:53:3f:aa:f5:9f:f3:f5:f8:32:
                    55:fb:af:9f:0e:d8:f4:0c:fd:2f:43:b1:d0:fa:1e:
                    67:1b:9d:d4:5b:f9:75:ab:29:f6:8e:ad:2e:07:39:
                    56:36:23:23:dd:5a:cb:b4:38:bb:0f:af:4d:c9:cb:
                    63:d0:65:6c:34:f5:02:f8:37:6b:8f:f6:68:17:f9:
                    a2:86:c3:18:53:6b:30:67:2c:ab:dc:c7:d8:d2:56:
                    e6:e7:75:dd:81:5e:96:7a:39:64:f8:1e:a4:16:53:
                    55:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:ED:63:EA:89:04:25:9F:C0:7C:86:C4:92:4F:34:63:AA:3B:12:5D
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/0123ffbc45d63738d9377b5a66536eb80113d3e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6035::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:4a:6d:76:0d:4f:42:5a:9c:26:40:ba:a4:65:59:72:06:34:
         56:80:09:30:51:2d:8f:13:f2:70:c5:fd:7e:1f:0b:8d:61:21:
         f8:ae:10:d6:9a:2c:88:23:54:4e:7a:4a:18:e3:2e:f5:42:12:
         45:5f:a0:16:2f:36:91:9d:86:8d:a4:13:50:dd:01:dc:33:d9:
         2a:c2:3c:a2:c4:41:26:fa:0a:6c:72:46:ad:fe:77:97:0d:3b:
         00:04:ad:e7:b3:2c:ee:46:10:cb:37:3b:7b:b9:1b:ec:e2:d3:
         67:6d:30:c1:ed:41:df:4a:26:dd:c3:59:67:a0:6e:af:aa:6b:
         eb:ec:f6:fa:81:7a:16:f9:32:b2:73:94:8d:e7:6f:aa:2a:d0:
         bc:a1:f2:9b:fd:06:98:d3:41:b1:85:e9:d0:25:ed:f9:07:b2:
         f1:2f:12:e8:3a:72:30:87:6f:b2:ad:fc:e7:fb:f2:d6:4d:8e:
         c7:fe:31:69:d0:5b:a8:cf:b9:7d:12:18:cc:14:f1:e3:5f:54:
         ff:ea:6d:5c:db:ce:c1:f4:b2:50:74:38:7f:f9:ba:88:f9:a2:
         7a:53:94:96:39:ba:67:ca:c6:2c:25:ec:32:ea:fd:c5:ce:e9:
         34:03:43:94:a9:b0:76:b3:71:b6:4f:e2:87:38:f3:3a:9c:36:
         d4:d4:70:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----