Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/137f3527b84e923388720fa8191e7538e7bd4172.roa
File:                     137f3527b84e923388720fa8191e7538e7bd4172.roa (raw, json)
Hash identifier:          GeZsmvM88RT+rPPq2oz5mZaQR8p4OYEEFP9KZv+rxo8=
Subject key identifier:   53:65:64:62:6B:05:B3:59:3F:68:2C:E7:1B:C8:E1:22:B1:25:64:C1
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       26053A
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/137f3527b84e923388720fa8191e7538e7bd4172.roa
Signing time:             Thu 11 May 2023 08:30:00 +0000
ROA not before:           Wed 10 May 2023 08:30:00 +0000
ROA not after:            Fri 09 May 2025 08:30:00 +0000
asID:                     278
IP address blocks:        2001:1218:601b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2491706 (0x26053a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: May 10 08:30:00 2023 GMT
            Not After : May  9 08:30:00 2025 GMT
        Subject: CN=137f3527b84e923388720fa8191e7538e7bd4172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:db:8d:50:61:21:84:9e:5c:df:08:6a:2b:f2:
                    06:a7:c9:9d:f8:00:f4:66:ae:3a:f6:c1:ec:f8:ac:
                    d7:52:87:67:2d:87:10:e3:e8:f9:46:20:b6:a8:0d:
                    1d:cc:21:f7:75:27:3e:81:c0:8f:01:7b:a5:8f:5e:
                    e3:77:f4:4d:36:26:a4:7f:99:6b:e6:57:a6:1d:ed:
                    cb:f6:4c:fb:db:75:fb:af:d3:02:9f:e8:8b:eb:d5:
                    97:ca:7c:2b:bf:4e:51:af:1a:16:b3:83:48:a9:b7:
                    81:9b:1e:ea:32:f8:d9:59:db:f3:2d:8e:4a:69:6c:
                    ad:cf:3f:14:81:18:30:f8:88:18:84:f9:20:ec:25:
                    4f:13:1c:b2:5f:4c:70:a3:64:59:8d:12:1a:b0:fa:
                    55:48:2b:33:d6:1d:b2:17:be:71:5d:38:d9:7d:ce:
                    34:91:e7:f3:66:92:23:cf:81:4b:91:9d:2b:6e:96:
                    15:96:c0:7a:d0:7e:a4:b9:f5:d1:cf:af:93:b4:27:
                    48:c9:16:f4:d8:98:5e:5f:8a:c5:6f:9a:e3:25:a7:
                    ef:89:c2:48:39:ca:55:eb:61:b9:3c:1d:f5:b9:2d:
                    e8:b2:0b:b8:0c:8c:30:3e:cb:46:65:7d:f8:01:bd:
                    a2:aa:38:df:f8:2c:97:2e:e2:37:1c:6c:54:f7:00:
                    4f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:65:64:62:6B:05:B3:59:3F:68:2C:E7:1B:C8:E1:22:B1:25:64:C1
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/137f3527b84e923388720fa8191e7538e7bd4172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:601b::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:71:63:27:93:36:7b:0f:f5:2a:09:b3:44:e5:e8:f0:33:ba:
         7c:70:75:a9:bc:ee:14:18:3b:67:5e:38:9b:97:bd:c3:8e:5b:
         10:eb:ba:db:74:95:f0:27:65:d5:d6:1c:c7:ce:81:53:bc:6b:
         e5:f5:fb:5a:0b:a4:c7:6f:91:6f:34:4a:d7:a9:2f:c5:a5:70:
         8d:0f:69:4c:ea:d3:d3:af:a9:58:0b:2b:b0:7b:9a:63:47:f1:
         6c:d5:84:2d:5c:90:3b:7c:3d:92:36:db:6d:e6:00:a3:35:75:
         af:b2:57:f9:52:7a:4b:60:88:30:b5:b4:e0:53:96:25:b3:1c:
         88:02:ae:90:72:70:47:9d:ba:0e:b0:68:d6:75:a5:0c:e3:87:
         da:ce:c5:6f:4f:d0:71:92:c4:f7:8b:b8:7f:9f:32:56:23:e0:
         0d:d1:4f:7c:a4:72:67:89:2d:1b:f9:0d:f6:3d:43:18:d5:6d:
         05:06:37:3d:24:8c:b7:1c:4e:0f:fa:7f:32:a1:6e:41:32:26:
         f6:6b:3b:f6:fc:e8:9d:f0:d2:5a:62:64:e9:ef:52:4b:c1:2e:
         59:ad:b9:70:c0:dd:d6:8a:85:12:44:c2:7e:1b:48:74:ab:61:
         14:2a:ad:e5:9f:83:bc:f7:08:ce:cf:f2:1c:a2:45:59:bf:2c:
         e6:c6:1d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----