Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/224b6d9a07c77fda91630dfbdb881e0cfcb6c4b0.roa
File:                     224b6d9a07c77fda91630dfbdb881e0cfcb6c4b0.roa (raw, json)
Hash identifier:          dM+h9g67D2tR0qjdLvwYnq1lXQcPutQlcBb8/8q7GYM=
Subject key identifier:   21:DB:F7:51:90:14:7B:B7:24:12:3F:12:99:17:7E:20:76:7D:8E:A0
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F5570
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/224b6d9a07c77fda91630dfbdb881e0cfcb6c4b0.roa
Signing time:             Wed 24 Mar 2021 14:43:52 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:6001::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1004912 (0xf5570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=224b6d9a07c77fda91630dfbdb881e0cfcb6c4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a3:cb:6d:22:3f:0c:9c:69:fd:a5:3e:5b:ea:
                    42:43:f0:e8:79:6a:33:a2:ef:34:5c:09:a1:98:fa:
                    0e:e3:dd:e3:a1:36:51:20:8c:19:ba:d5:1b:61:a5:
                    ff:8f:3d:3b:08:38:32:58:c5:a1:c4:8c:b1:f7:f2:
                    1a:d7:9c:72:55:70:30:cd:db:fe:69:38:3b:81:ac:
                    f9:b5:1f:53:7e:f6:ee:a2:70:13:c6:a6:e9:73:3e:
                    dc:be:99:94:85:92:15:3d:38:71:f2:4d:49:12:f6:
                    e3:64:4e:24:59:04:f3:88:34:db:83:a3:d9:89:42:
                    56:fe:b0:0a:15:27:90:cb:07:94:cb:be:97:52:83:
                    40:59:6c:3e:89:65:f6:45:10:c4:b2:6b:0e:ca:33:
                    72:9f:a8:92:b3:78:91:43:d4:cb:16:0c:b5:c4:22:
                    8b:b2:7f:2b:28:85:66:a9:54:53:b6:e4:2a:78:b7:
                    37:bb:e1:31:a8:0d:7c:75:bd:fe:3b:4f:98:66:b0:
                    d4:ed:04:78:17:96:69:56:27:73:ae:4a:b5:7d:68:
                    b8:74:58:e3:07:a5:ec:a2:3a:85:7c:71:5f:f5:70:
                    73:b4:52:e2:12:09:37:86:a5:91:65:19:93:ba:e2:
                    e4:13:b2:5f:2a:c7:4f:72:bc:4d:41:8b:b6:db:91:
                    1a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DB:F7:51:90:14:7B:B7:24:12:3F:12:99:17:7E:20:76:7D:8E:A0
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/224b6d9a07c77fda91630dfbdb881e0cfcb6c4b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6001::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:fd:e7:4b:9c:f9:2e:af:78:ad:12:e0:29:42:13:6b:22:7a:
         00:8c:69:b1:1c:2f:50:3e:5d:bc:ef:03:81:45:65:5e:2c:8b:
         e4:e4:84:2d:a0:45:53:95:7e:4b:61:46:4c:b8:99:58:c5:38:
         97:0c:f7:f1:ac:18:ad:ae:b9:f8:80:2a:14:4a:e3:37:26:9c:
         cd:cd:bc:e7:22:da:e6:74:d1:f9:dd:31:08:b9:6f:52:17:c8:
         56:95:77:64:ea:0d:2f:6e:c6:2f:19:1a:24:81:31:3c:32:cd:
         ee:5a:f7:35:ab:1e:cb:d9:57:91:df:2d:60:d2:27:e9:4d:0b:
         e3:50:56:35:72:69:0f:d4:5d:4a:c9:ca:0a:98:08:59:f7:94:
         f0:fe:0b:72:b3:9a:f1:63:f0:5a:46:98:90:83:69:9c:d1:12:
         93:2f:f9:65:14:a3:d4:20:1a:bb:60:95:8a:7f:72:3b:ff:cc:
         5a:9d:f0:6e:5b:c4:99:12:d1:66:83:0f:40:1a:fa:d2:a9:69:
         76:b1:98:ca:74:b1:54:3e:f5:48:1b:b3:e3:23:ef:9e:fd:24:
         a1:16:f0:de:1e:31:f7:a3:3e:9f:f2:b1:f8:a7:b3:ed:91:22:
         05:c0:28:58:f0:aa:70:4d:9f:a5:56:73:bc:52:89:33:3e:18:
         3c:25:d1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----