Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/13c17ff2755c9adcff255913a726eb54dea6de21.roa
File:                     13c17ff2755c9adcff255913a726eb54dea6de21.roa (raw, json)
Hash identifier:          QoBQxr7D8MkIV5gI9JnujnBL7pKVfle7RH5Z64TMxq4=
Subject key identifier:   63:B7:71:FD:05:42:45:C4:92:D5:05:45:9F:01:8B:21:B4:8C:AE:72
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       17EDBC
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/13c17ff2755c9adcff255913a726eb54dea6de21.roa
Signing time:             Wed 03 Nov 2021 23:55:19 +0000
ROA not before:           Wed 03 Nov 2021 02:00:00 +0000
ROA not after:            Fri 03 Nov 2023 02:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:60c0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1568188 (0x17edbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Nov  3 02:00:00 2021 GMT
            Not After : Nov  3 02:00:00 2023 GMT
        Subject: CN=13c17ff2755c9adcff255913a726eb54dea6de21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c5:6c:1c:a3:0f:df:2f:44:28:9d:f6:fc:59:
                    ba:f7:29:28:f2:35:6e:29:ab:b4:20:cb:d3:28:39:
                    21:32:28:7f:21:8e:a3:ff:a0:ff:61:36:c3:44:93:
                    44:09:c7:e8:2d:47:fe:7f:b8:3d:fa:7d:f6:08:5e:
                    b7:9a:55:8e:0b:98:64:d6:9e:2d:2e:ac:77:6b:1a:
                    ef:08:33:1a:82:f1:42:67:f0:7f:de:57:c7:78:a6:
                    25:4c:87:47:db:7f:d4:0b:45:ad:87:d5:47:ae:64:
                    f4:b6:cb:84:4c:98:42:15:4c:0d:9c:82:7b:cc:5b:
                    28:38:e0:f2:f6:87:93:a3:64:77:2e:f8:4c:2a:74:
                    b7:86:d3:60:cf:8b:70:30:ec:c3:97:6a:c7:ae:62:
                    65:8f:d2:eb:1e:0b:b6:ce:69:91:cd:ff:a8:e0:2b:
                    1e:d7:d8:eb:59:4b:ee:43:e3:30:07:a4:53:4c:1b:
                    b4:a2:43:c4:d2:92:94:6c:7a:98:2e:2c:db:16:9f:
                    c3:09:b5:3d:2e:d4:8c:d6:42:c5:74:23:45:c8:34:
                    70:2b:0a:a6:e9:64:f5:a8:67:52:20:57:da:b6:99:
                    2b:1f:34:7f:cb:6d:72:1a:df:c7:00:b1:d0:e6:38:
                    5b:9e:33:c3:b4:b3:46:e5:5c:e5:11:82:97:a6:c3:
                    22:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B7:71:FD:05:42:45:C4:92:D5:05:45:9F:01:8B:21:B4:8C:AE:72
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/13c17ff2755c9adcff255913a726eb54dea6de21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:60c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:e5:7c:5f:88:ac:29:71:92:69:42:78:f0:52:6a:de:91:58:
         1d:ef:51:10:7c:49:94:f3:fb:cd:e4:0e:04:bd:b9:be:c3:40:
         41:36:0a:60:e6:a2:d0:2b:ec:c5:44:57:5b:ee:b5:79:a8:54:
         b0:46:ae:3d:d4:92:7c:32:cc:b5:9a:8d:d6:a5:e9:b5:62:91:
         13:cf:ef:e7:84:ef:31:e5:4b:e3:36:18:33:75:86:79:ee:d0:
         b0:96:1b:83:84:94:1a:c7:a9:0c:19:4d:a2:8d:20:c5:7c:fa:
         5a:ea:fd:f5:02:f4:f0:5b:f9:07:3e:39:ba:05:75:be:24:e3:
         a9:9d:05:53:0d:83:4e:dc:21:a3:38:58:fc:38:a9:6a:2b:a4:
         23:01:8f:00:9a:5d:3e:e2:23:a8:28:42:83:24:af:a7:f8:4f:
         70:5e:e3:51:e3:f7:0d:01:1c:a4:12:83:43:01:a9:5b:ac:bc:
         30:c1:15:47:04:69:b4:c8:44:a8:e4:e4:35:f5:11:2a:8c:72:
         c5:37:4b:87:b7:4f:9f:2d:f8:4a:75:2f:af:21:81:c2:7c:4e:
         a4:9a:72:41:4b:7e:50:0d:29:5d:9e:ba:9c:2a:89:d2:73:9b:
         dc:2e:ea:7b:19:6c:2e:b1:73:a6:01:90:d5:05:09:d5:fc:dc:
         dd:51:1e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----