Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/0b5582c689bb12d18c5da6165076d5a065fa0006.roa
File:                     0b5582c689bb12d18c5da6165076d5a065fa0006.roa (raw, json)
Hash identifier:          bR7lZeMa5qhual2TSsvTqrbnOzETR2OTMTPVHDTaWcs=
Subject key identifier:   8B:1A:C0:48:4C:4A:D6:E1:B1:1C:FE:01:0C:25:72:82:CA:FB:85:36
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       123EF0
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/0b5582c689bb12d18c5da6165076d5a065fa0006.roa
Signing time:             Wed 12 May 2021 03:30:36 +0000
ROA not before:           Wed 12 May 2021 03:00:00 +0000
ROA not after:            Fri 12 May 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:601c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1195760 (0x123ef0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: May 12 03:00:00 2021 GMT
            Not After : May 12 03:00:00 2023 GMT
        Subject: CN=0b5582c689bb12d18c5da6165076d5a065fa0006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3a:73:48:00:71:2e:09:2a:52:b1:47:97:4c:
                    9a:10:69:62:59:3b:ab:a1:75:ef:15:63:11:79:d1:
                    38:2b:5a:72:2e:7f:d1:b7:fa:81:18:0f:11:24:bc:
                    6e:78:40:96:6a:85:0f:07:e2:38:f4:b6:ce:41:4b:
                    a5:da:6b:7a:57:62:8a:cb:60:6b:05:48:99:cc:38:
                    49:35:44:66:72:ee:28:52:0f:fa:83:dd:01:c6:0d:
                    2c:2d:cc:7e:5a:98:b3:31:5d:ed:b8:41:7e:57:f6:
                    08:3f:da:89:7e:18:d8:96:78:88:11:f0:8d:29:30:
                    93:94:71:ee:75:1e:50:3d:23:1b:23:92:71:87:c1:
                    5e:33:6b:96:57:a2:db:83:67:dc:e4:dd:fc:1f:04:
                    c4:a8:af:04:80:8a:68:78:1b:b5:b2:93:29:58:35:
                    37:50:90:80:35:ea:1b:45:4d:e7:c2:8f:b5:99:fe:
                    0f:65:47:ad:b1:cb:40:2f:0f:c5:3b:d4:df:92:01:
                    3d:66:37:4e:a8:3b:9e:6b:0e:cf:0f:c5:76:b0:05:
                    aa:60:fb:fb:4b:8c:dd:43:8f:94:25:b7:b6:3a:a5:
                    52:43:d0:2e:d0:9b:e6:e3:e3:19:95:aa:17:0c:24:
                    96:31:d8:bb:50:c6:94:92:8f:37:85:2c:4d:06:a3:
                    e2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1A:C0:48:4C:4A:D6:E1:B1:1C:FE:01:0C:25:72:82:CA:FB:85:36
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/0b5582c689bb12d18c5da6165076d5a065fa0006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:601c::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:33:e7:c6:7f:a9:a4:e4:c5:88:4f:0f:53:d2:90:25:ae:ca:
         f0:77:ec:fe:7a:d5:3d:92:18:db:a5:80:dd:7d:55:8e:55:38:
         93:4e:e8:e0:cf:16:b9:35:94:cc:c0:c2:29:58:41:4b:60:b7:
         a9:fc:fd:6d:8b:5e:cb:21:5c:01:92:1e:ef:0f:1c:47:0c:a7:
         59:1b:49:c1:26:ac:70:f4:5e:06:00:95:79:18:c1:43:64:5c:
         20:bd:5a:e3:56:24:42:a4:17:7f:09:a8:67:69:fd:84:f5:5f:
         5c:e0:ef:0a:18:0d:c6:e6:aa:3e:ca:5d:cf:99:17:bc:63:dd:
         3e:c2:25:c1:9e:07:d1:17:8a:42:10:f2:37:8b:32:8b:65:b7:
         49:61:5b:5f:a0:15:83:cf:44:ce:c2:1a:b8:17:e9:c5:5e:83:
         59:1f:8e:c6:6a:9b:f7:fe:ec:22:12:1d:38:bf:c2:a3:80:56:
         f0:a2:d3:14:8e:7e:e1:41:03:37:5e:23:5e:e9:8e:96:72:a4:
         4c:98:f8:f6:eb:33:b3:f2:9a:a7:3a:66:b7:6d:62:82:71:3c:
         9e:fb:b0:9b:1d:fa:67:0f:72:c0:80:ac:43:6e:c9:f5:a9:09:
         a3:31:27:5f:4f:ec:fb:69:38:75:84:4a:44:2f:42:e1:d3:bf:
         40:ce:99:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----