Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1aadd439c4b58db6da7a1094b1912788e1c3d316.roa
File:                     1aadd439c4b58db6da7a1094b1912788e1c3d316.roa (raw, json)
Hash identifier:          v5uYspIYHFklyhYn18NWosjEpnyn9+treh2UTEwF9TA=
Subject key identifier:   D3:A1:1C:9B:1D:28:35:16:AB:31:D5:37:45:DA:94:7A:4A:E4:AD:0F
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15A4F0
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1aadd439c4b58db6da7a1094b1912788e1c3d316.roa
Signing time:             Tue 24 Aug 2021 22:20:53 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6054::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418480 (0x15a4f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=1aadd439c4b58db6da7a1094b1912788e1c3d316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:11:65:98:03:88:84:21:9a:bd:02:ab:40:ea:
                    9c:2d:87:68:9a:64:58:69:47:77:6f:a6:8b:4c:22:
                    a7:15:6d:d3:76:e1:06:b8:95:d4:b5:b9:2d:49:a1:
                    cf:52:8b:4f:ba:ff:5a:13:07:00:ea:ea:26:39:6d:
                    5a:b6:ca:33:85:7f:19:d0:68:7e:ee:80:5e:5b:86:
                    d0:9e:54:88:4a:b9:5f:39:69:8f:0b:ff:2c:2b:98:
                    f4:93:7d:59:9e:4a:1c:df:32:0d:69:af:f2:96:0d:
                    2a:bc:4f:6e:0d:ef:e5:e6:ce:c6:fe:f6:1f:3b:3f:
                    38:df:1a:f7:8d:24:b6:e6:4d:30:54:dd:70:d8:a0:
                    34:d2:7d:24:57:af:39:d6:2e:8d:9e:28:5e:0c:88:
                    72:92:35:d6:86:bf:80:c7:71:23:d4:bf:93:92:52:
                    0b:90:c4:b0:ff:55:61:bb:34:e0:46:b5:11:41:1a:
                    1d:83:dc:36:33:54:81:a2:16:e1:76:a9:78:22:a3:
                    e7:6d:17:24:20:17:98:e4:67:0a:cd:fd:ae:a8:12:
                    c7:fc:28:49:00:36:57:fe:07:1d:2f:bf:60:46:04:
                    63:ca:26:ab:a4:b4:ee:d8:ad:0a:63:76:f9:b9:d1:
                    17:9b:4e:2a:a5:5a:8a:02:cd:f4:0e:63:91:f6:a0:
                    4d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A1:1C:9B:1D:28:35:16:AB:31:D5:37:45:DA:94:7A:4A:E4:AD:0F
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1aadd439c4b58db6da7a1094b1912788e1c3d316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6054::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:bc:58:04:7e:f3:73:05:70:86:07:04:11:ce:03:40:0c:db:
         23:74:58:83:d7:cd:a4:ed:3b:09:2e:f2:6a:ca:66:0f:81:92:
         bd:8a:1d:16:89:eb:3d:dd:55:cd:c3:c3:5e:13:97:3b:de:2a:
         02:4c:24:a8:32:09:4f:11:16:25:6d:86:25:81:c5:38:11:00:
         1d:28:31:cb:c8:1f:34:22:ea:89:64:d4:2a:23:9a:13:09:78:
         d8:19:af:43:e8:8c:70:51:48:bc:1a:89:25:8b:9b:3c:3e:89:
         ae:2b:2a:56:ac:67:88:db:08:9a:62:ee:7a:2d:ea:42:0a:5c:
         e2:f5:3c:a4:24:55:d2:5f:50:23:23:b2:be:87:23:02:15:64:
         c4:3c:e9:e9:96:7c:cb:8e:62:31:75:1b:08:37:c7:cf:73:8f:
         9a:b6:89:ba:54:1b:60:19:19:b0:df:0a:c3:13:3d:69:af:54:
         cc:cd:88:0e:88:00:33:56:96:c1:8b:3b:26:1e:1b:03:3d:cd:
         4e:8d:42:e6:a4:d6:ff:7c:b4:24:f5:96:39:de:b9:2f:ac:96:
         95:7e:0f:13:5e:3a:36:44:00:34:21:ba:b1:e6:f6:ef:e7:63:
         43:e2:bf:2e:0f:3c:52:a8:ba:29:37:33:18:ad:70:75:cd:7b:
         9e:cb:f7:3f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDFaTwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwODI0
MDMwMDAwWhcNMjMwODI0MDMwMDAwWjAzMTEwLwYDVQQDEygxYWFkZDQzOWM0YjU4
ZGI2ZGE3YTEwOTRiMTkxMjc4OGUxYzNkMzE2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAohFlmAOIhCGavQKrQOqcLYdommRYaUd3b6aLTCKnFW3TduEG
uJXUtbktSaHPUotPuv9aEwcA6uomOW1atsozhX8Z0Gh+7oBeW4bQnlSISrlfOWmP
C/8sK5j0k31Znkoc3zINaa/ylg0qvE9uDe/l5s7G/vYfOz843xr3jSS25k0wVN1w
2KA00n0kV6851i6NniheDIhykjXWhr+Ax3Ej1L+TklILkMSw/1VhuzTgRrURQRod
g9w2M1SBohbhdql4IqPnbRckIBeY5GcKzf2uqBLH/ChJADZX/gcdL79gRgRjyiar
pLTu2K0KY3b5udEXm04qpVqKAs30DmOR9qBNjQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFNOhHJsdKDUWqzHVN0XalHpK5K0PMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4LzFhYWRkNDM5YzRiNThkYjZkYTdhMTA5NGIxOTEyNzg4ZTFjM2QzMTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABEhhgVDANBgkqhkiG9w0BAQsFAAOCAQEAubxYBH7zcwVw
hgcEEc4DQAzbI3RYg9fNpO07CS7yaspmD4GSvYodFonrPd1VzcPDXhOXO94qAkwk
qDIJTxEWJW2GJYHFOBEAHSgxy8gfNCLqiWTUKiOaEwl42BmvQ+iMcFFIvBqJJYub
PD6JrisqVqxniNsImmLuei3qQgpc4vU8pCRV0l9QIyOyvocjAhVkxDzp6ZZ8y45i
MXUbCDfHz3OPmraJulQbYBkZsN8KwxM9aa9UzM2IDogAM1aWwYs7Jh4bAz3NTo1C
5qTW/3y0JPWWOd65L6yWlX4PE146NkQANCG6seb27+djQ+K/Lg88Uqi6KTczGK1w
dc17nsv3Pw==
-----END CERTIFICATE-----