Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1c92a43fd5b280678f84836c2efbb2354c6595a0.roa
File:                     1c92a43fd5b280678f84836c2efbb2354c6595a0.roa (raw, json)
Hash identifier:          dACMz5HrUUQgHG7jbO1iJUHlbneV3VCgu1NTHFWX7Nw=
Subject key identifier:   27:95:E5:93:32:43:38:BD:36:0E:65:4B:60:7E:97:A3:10:53:52:94
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       150B07
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1c92a43fd5b280678f84836c2efbb2354c6595a0.roa
Signing time:             Wed 18 Aug 2021 17:40:05 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6036::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1379079 (0x150b07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=1c92a43fd5b280678f84836c2efbb2354c6595a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5a:d5:3f:dd:41:86:00:94:7c:03:5b:80:48:
                    86:ab:94:18:db:2a:a9:cc:82:7f:75:bf:f0:7a:4b:
                    80:4e:b4:0b:82:71:d7:01:31:65:2b:18:98:1a:8f:
                    f6:86:48:58:1f:6f:e1:68:34:07:12:82:fb:8a:03:
                    1a:3b:ed:08:48:a2:82:dd:cc:92:30:52:66:68:0e:
                    36:b2:de:f1:ea:cd:57:09:db:48:5f:fd:cd:2a:53:
                    78:c8:1a:2e:1f:82:44:29:ec:77:47:ec:98:b6:5d:
                    60:02:49:7c:f6:5b:b1:2d:2e:f4:12:36:6f:72:9e:
                    88:e3:81:c4:8c:71:3d:9b:04:40:ed:70:7e:fa:8b:
                    d3:24:9c:0c:f3:09:72:a2:31:0c:3f:64:31:4b:f5:
                    c6:fa:5c:0b:d4:81:e7:f1:40:7f:3e:9b:1c:7d:be:
                    b9:08:4d:d2:d1:cf:ec:96:34:84:f5:6c:97:fc:39:
                    aa:30:55:1d:9d:3b:e5:1d:5b:ba:60:08:83:9d:17:
                    d0:3c:e1:88:55:f7:de:95:68:8d:0b:97:6f:bb:1a:
                    7c:04:c6:b5:4c:24:37:a4:f4:d2:15:b4:8b:9b:ca:
                    01:9e:90:35:d1:53:22:a5:7c:38:6c:4a:39:de:1e:
                    ee:f0:51:49:6b:cc:a7:c2:df:54:e9:d8:be:cd:1b:
                    12:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:95:E5:93:32:43:38:BD:36:0E:65:4B:60:7E:97:A3:10:53:52:94
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1c92a43fd5b280678f84836c2efbb2354c6595a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6036::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:be:97:a3:6f:10:b5:de:be:6f:2a:00:08:a2:db:39:af:1a:
         82:65:18:3a:1b:25:54:b9:49:61:ec:c5:d3:69:d9:40:bf:ad:
         37:6c:e3:2c:b8:13:6c:26:07:43:ba:7d:ca:b0:ce:8e:c1:0a:
         be:f0:e9:d8:87:ef:eb:2b:31:7f:f2:30:90:ec:e1:aa:63:23:
         80:29:98:ce:9d:e6:1b:c4:6a:78:c8:50:f2:07:d4:43:b2:09:
         fc:32:c2:19:94:ca:2d:53:da:fd:51:10:32:6a:8b:21:04:2d:
         9e:6e:d7:ba:8f:b4:05:a8:69:10:80:7d:cb:03:82:8a:ba:ce:
         b2:3d:75:6e:b6:69:55:da:35:27:eb:4e:65:62:92:6a:ae:69:
         1b:44:97:42:60:9e:9d:fd:03:63:04:4a:dd:03:03:d9:2e:0a:
         70:72:22:cc:24:37:3f:d5:d9:2f:cc:d2:05:d5:41:aa:5e:c3:
         69:c2:88:ff:4d:f2:ca:9b:72:fa:bb:26:bb:eb:9d:60:cd:82:
         3d:d2:06:cf:92:58:4a:ba:70:77:79:04:2f:94:0b:29:fe:e5:
         99:21:10:33:e6:35:ce:c1:8b:67:8a:56:1a:64:78:cb:5c:50:
         ad:29:f5:ff:35:52:54:39:a4:52:c1:41:34:6d:98:12:21:16:
         2a:1c:69:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----