Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1f9504cfffa063eab9ae3fa4596b10e83c95ec12.roa
File:                     1f9504cfffa063eab9ae3fa4596b10e83c95ec12.roa (raw, json)
Hash identifier:          V40Vn13jY5SXvUquDy+0PlrlI/1DsgFStOydwbROfXQ=
Subject key identifier:   F3:B9:1E:90:02:8C:AD:B0:4A:CF:8D:94:E9:60:05:23:CE:9E:70:DA
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1534B9
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1f9504cfffa063eab9ae3fa4596b10e83c95ec12.roa
Signing time:             Wed 18 Aug 2021 19:26:52 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6042::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389753 (0x1534b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=1f9504cfffa063eab9ae3fa4596b10e83c95ec12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:13:a3:4c:41:5d:80:b4:f9:31:f7:7d:cc:34:
                    dc:86:ad:d9:c2:fe:06:8d:d5:88:e9:72:62:ea:02:
                    c9:b2:02:4b:c0:6e:65:cd:e5:87:8f:87:81:11:52:
                    d2:fb:94:76:18:69:e6:8e:f2:46:90:53:c8:06:c8:
                    c5:59:90:e5:e2:65:54:49:82:84:02:de:ab:47:8d:
                    8f:40:b0:b1:44:77:3d:98:ab:e2:9c:70:27:bd:13:
                    b8:99:1b:38:39:b7:6e:fa:58:2b:ac:6e:2c:7f:98:
                    37:a6:5a:5f:74:36:69:36:45:77:16:0c:f8:92:78:
                    24:e6:6b:70:d3:b4:49:f8:76:d3:d3:d1:9d:da:d0:
                    30:5e:d9:06:70:ce:bf:05:e8:bc:04:92:83:ff:d6:
                    b9:f4:18:d5:b1:0b:05:42:e7:aa:35:0c:0d:90:e5:
                    95:68:86:f0:f6:1e:c4:82:0c:2e:fb:e0:f4:d9:35:
                    ab:fb:47:24:37:04:58:61:f5:ff:8b:93:08:ee:dd:
                    07:57:36:8b:7d:3d:54:6f:a9:e3:40:71:db:e7:05:
                    99:84:96:2e:1a:1f:06:40:14:07:e2:35:78:7f:90:
                    67:9c:90:cf:e6:8d:88:49:16:5e:33:53:04:64:b4:
                    7a:ba:bd:34:3d:83:60:25:6a:56:81:ea:39:15:9e:
                    78:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B9:1E:90:02:8C:AD:B0:4A:CF:8D:94:E9:60:05:23:CE:9E:70:DA
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1f9504cfffa063eab9ae3fa4596b10e83c95ec12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6042::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:ca:67:a0:48:f2:81:fc:4a:c6:aa:d0:99:2a:f7:a8:84:60:
         7d:d4:82:c6:a5:ff:fa:1e:0b:e4:7c:b6:8b:78:fa:51:47:dd:
         ed:c4:9e:74:50:8a:28:e8:19:e8:5f:24:92:f9:76:a4:51:72:
         83:f7:b6:a6:46:21:2f:70:d7:22:e9:01:56:a3:07:f6:0f:06:
         39:29:4f:36:ff:cc:4b:de:64:4f:ef:a7:24:61:78:75:92:13:
         bf:c6:cd:e4:fc:db:19:41:e5:b8:12:aa:c2:b2:8c:a3:85:af:
         49:83:09:9a:d5:33:6e:03:8b:c0:67:d4:40:59:cf:25:b4:d6:
         28:d7:88:63:53:d2:5e:f9:6c:20:3c:d4:bc:ad:eb:8f:5a:d9:
         7e:63:23:5b:34:84:8b:e3:a1:08:ae:d3:a4:90:92:68:4c:75:
         ca:1c:67:dd:02:00:1e:b2:1a:53:34:71:4b:78:e6:64:5e:4a:
         46:71:80:d0:2f:bf:7d:a7:47:39:8b:18:bb:1b:71:b4:46:2b:
         9c:f4:30:c4:6e:2b:c0:bf:7e:09:1a:ae:10:64:3d:51:20:be:
         c0:49:9d:61:86:15:13:81:38:d4:ab:4f:30:15:69:f2:f9:0f:
         09:8b:41:22:62:ab:3c:ef:fa:d4:ed:c1:b4:f1:d2:d8:b6:72:
         72:ed:ac:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----