Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/0a34ea935802f43bdbe6ef6526d628085650d9f7.roa
File:                     0a34ea935802f43bdbe6ef6526d628085650d9f7.roa (raw, json)
Hash identifier:          e2k4ayRF2Tre+ufKFV9ROYg4GdFyUjv2r1zYlhdseUk=
Subject key identifier:   69:0F:C9:E1:81:DD:21:8D:F9:D7:02:FE:3F:6C:B9:5C:8D:46:ED:39
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       151550
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/0a34ea935802f43bdbe6ef6526d628085650d9f7.roa
Signing time:             Wed 18 Aug 2021 17:46:50 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6039::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1381712 (0x151550)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=0a34ea935802f43bdbe6ef6526d628085650d9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:c0:f3:eb:cf:17:59:85:b3:13:db:2c:06:
                    f5:52:0d:b7:37:4a:55:07:36:1c:a0:b5:bd:dd:be:
                    ef:54:ab:41:96:18:1f:78:ee:90:27:52:ca:7a:a1:
                    49:1d:fc:f3:3e:05:c5:cd:03:60:a3:92:9b:2b:07:
                    9e:b8:0e:ce:aa:17:ad:5d:83:ae:a7:8e:44:46:03:
                    18:30:a8:da:5a:d5:48:1d:bc:6c:e2:61:2b:f4:8a:
                    42:37:7f:0c:43:b8:db:0d:6a:0b:0f:18:a4:1a:a1:
                    55:1c:59:93:55:c8:04:26:30:3d:2a:71:65:b7:87:
                    5a:13:d5:a8:27:64:7b:b2:d7:e2:bd:7b:c9:83:b2:
                    20:15:1f:71:88:24:d3:05:3a:91:ff:92:b7:96:9c:
                    2c:54:58:c1:92:f4:b1:36:b9:f3:fb:b4:76:2d:a7:
                    af:b1:1b:6b:6f:cd:89:9d:4a:dc:6e:6c:22:23:7b:
                    2e:6d:c4:dc:7c:07:96:02:72:d8:5f:92:13:b0:07:
                    66:0a:b8:83:2a:2a:58:85:50:cf:a6:0c:f3:14:a2:
                    ba:e0:31:8c:eb:08:83:b3:c7:0e:78:d3:2a:77:1f:
                    50:54:b1:2d:9d:fb:14:87:92:09:b2:fa:e8:4b:c4:
                    87:09:a3:58:d0:0e:b6:ab:2f:1a:5f:05:83:20:d1:
                    ec:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0F:C9:E1:81:DD:21:8D:F9:D7:02:FE:3F:6C:B9:5C:8D:46:ED:39
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/0a34ea935802f43bdbe6ef6526d628085650d9f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6039::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:08:3e:22:83:09:52:0b:58:b5:a1:3b:03:ca:93:99:04:52:
         62:1f:2e:32:1f:04:c9:c2:4b:88:4a:d6:27:3e:31:93:6d:1d:
         20:89:27:a7:83:4c:1b:70:d6:ad:27:fa:b0:8c:10:68:4d:89:
         b1:9a:84:cf:7c:e6:5f:af:c1:1b:a7:4c:dc:28:25:1c:6b:f2:
         f9:36:e2:64:34:a6:bd:63:f3:37:e1:36:dd:a7:23:59:8b:3a:
         0c:18:cf:1a:92:8f:14:27:ac:0f:58:66:5a:14:9a:d5:8b:17:
         07:94:a4:4a:9f:fd:36:25:0a:2f:c2:2c:bf:0e:06:9d:2c:5d:
         50:2f:af:42:32:f2:5a:97:f4:31:7b:3d:5d:af:65:38:f8:28:
         5c:84:f8:96:44:21:0e:16:8b:a5:ba:0e:27:8c:32:a2:2c:67:
         44:81:3a:35:85:82:dc:41:a5:37:d4:9c:6d:91:a8:47:18:d1:
         32:14:f3:35:2f:d6:52:2b:78:5b:87:73:45:c2:a9:75:83:fa:
         21:07:94:4e:40:e8:97:77:81:f5:c6:56:59:68:92:9b:9b:fa:
         a4:13:84:fa:82:27:b7:27:d8:af:a9:5e:5f:e8:3c:92:cd:45:
         9d:c0:9a:b8:95:7b:dd:aa:a8:7f:0f:ef:62:41:a2:08:8a:b0:
         3e:3f:98:b2
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDFRVQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwODE4
MDMwMDAwWhcNMjMwODE4MDMwMDAwWjAzMTEwLwYDVQQDEygwYTM0ZWE5MzU4MDJm
NDNiZGJlNmVmNjUyNmQ2MjgwODU2NTBkOWY3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqj/A8+vPF1mFsxPbLAb1Ug23N0pVBzYcoLW93b7vVKtBlhgf
eO6QJ1LKeqFJHfzzPgXFzQNgo5KbKweeuA7OqhetXYOup45ERgMYMKjaWtVIHbxs
4mEr9IpCN38MQ7jbDWoLDxikGqFVHFmTVcgEJjA9KnFlt4daE9WoJ2R7stfivXvJ
g7IgFR9xiCTTBTqR/5K3lpwsVFjBkvSxNrnz+7R2LaevsRtrb82JnUrcbmwiI3su
bcTcfAeWAnLYX5ITsAdmCriDKipYhVDPpgzzFKK64DGM6wiDs8cOeNMqdx9QVLEt
nfsUh5IJsvroS8SHCaNY0A62qy8aXwWDINHs5QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFGkPyeGB3SGN+dcC/j9suVyNRu05MB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4LzBhMzRlYTkzNTgwMmY0M2JkYmU2ZWY2NTI2ZDYyODA4NTY1MGQ5Zjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABEhhgOTANBgkqhkiG9w0BAQsFAAOCAQEAOAg+IoMJUgtY
taE7A8qTmQRSYh8uMh8EycJLiErWJz4xk20dIIknp4NMG3DWrSf6sIwQaE2JsZqE
z3zmX6/BG6dM3CglHGvy+TbiZDSmvWPzN+E23acjWYs6DBjPGpKPFCesD1hmWhSa
1YsXB5SkSp/9NiUKL8Isvw4GnSxdUC+vQjLyWpf0MXs9Xa9lOPgoXIT4lkQhDhaL
pboOJ4wyoixnRIE6NYWC3EGlN9ScbZGoRxjRMhTzNS/WUit4W4dzRcKpdYP6IQeU
TkDol3eB9cZWWWiSm5v6pBOE+oIntyfYr6leX+g8ks1FncCauJV73aqofw/vYkGi
CIqwPj+Ysg==
-----END CERTIFICATE-----