Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2464538a96d2852e89ee56fbd0ff5235e7127aaf.roa
File:                     2464538a96d2852e89ee56fbd0ff5235e7127aaf.roa (raw, json)
Hash identifier:          uQHc1Kila2eRKxEPNSc/DU+I2YedxNDuPyIxm2TvJPQ=
Subject key identifier:   5E:4A:9D:04:E1:CC:7E:82:57:7F:6D:2B:8B:D7:29:2E:38:1A:70:E2
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       16058D
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2464538a96d2852e89ee56fbd0ff5235e7127aaf.roa
Signing time:             Thu 26 Aug 2021 23:09:24 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:60b9::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1443213 (0x16058d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=2464538a96d2852e89ee56fbd0ff5235e7127aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3d:87:b7:45:cc:63:84:6f:a4:b4:15:46:75:
                    68:04:ca:19:af:c1:6b:73:6a:1e:6a:a0:9a:a7:e5:
                    47:5a:af:fc:de:5e:0b:6b:a6:05:66:16:ea:99:35:
                    21:ab:b6:4a:81:0d:91:0a:73:d5:b4:d7:ab:97:03:
                    13:7b:c8:80:22:c2:b9:6c:00:cc:64:81:29:18:62:
                    92:4d:54:4e:ce:06:73:22:29:cd:7d:29:6a:92:f3:
                    96:83:bb:c6:10:d4:5c:08:88:dc:3e:c1:9b:a1:dc:
                    ce:16:42:1c:eb:0e:cd:d2:64:ef:df:a3:a8:1f:0e:
                    26:5e:34:07:82:a3:49:b5:dc:dd:79:8e:d0:5b:b7:
                    75:bf:19:e0:3a:aa:c5:38:4b:4e:9b:bf:28:c2:22:
                    89:ed:d6:f4:89:bb:ff:cf:ae:82:62:23:03:f4:12:
                    86:da:32:b5:1c:91:dc:0d:4d:d8:2c:26:b1:f7:97:
                    e9:33:99:ea:e9:b7:a5:34:ad:51:69:61:31:d3:2d:
                    0f:a1:e7:ce:23:4d:28:3c:af:a4:9a:3f:07:f7:98:
                    6e:50:3a:2c:4f:38:24:f8:0f:3c:51:9d:bb:68:dd:
                    6f:c6:49:7b:fe:28:f0:06:4e:8d:0d:9a:f2:0d:b5:
                    fd:13:e3:6c:bd:59:bf:74:28:d4:8f:5f:53:56:45:
                    f7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4A:9D:04:E1:CC:7E:82:57:7F:6D:2B:8B:D7:29:2E:38:1A:70:E2
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2464538a96d2852e89ee56fbd0ff5235e7127aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:60b9::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:c0:e3:d8:a7:81:bb:0f:2c:ff:d0:85:82:4b:8e:da:b9:d0:
         c7:55:32:0b:60:e7:4c:32:1b:6d:40:66:49:5f:bf:0b:d9:24:
         bc:19:5e:39:aa:0c:b3:8a:d5:9d:8c:48:c9:28:e8:f1:42:7e:
         9e:57:87:99:a4:ad:73:d1:07:60:7b:bf:99:c2:52:61:66:e8:
         6c:79:80:2a:08:e7:e1:38:9c:88:44:90:ea:11:1e:57:d7:e9:
         6f:f5:ec:41:ae:d1:33:dd:d9:2b:a6:2f:a4:8d:2f:0f:0c:e6:
         5b:64:50:f8:22:12:e7:e2:bc:bb:bf:05:ef:7d:87:63:70:fc:
         e6:6d:51:a0:f1:83:6f:fa:0f:25:fa:fc:50:a6:ed:7f:3f:bc:
         46:c8:c4:9d:c0:f3:aa:5a:a6:14:8f:8f:0f:a7:7a:53:29:da:
         b3:ca:c7:65:ab:2e:ec:f4:54:fd:37:27:7b:fc:3f:cc:3b:9a:
         6d:47:2d:3f:7d:49:2b:da:b2:9f:57:b6:90:3e:84:57:8b:68:
         a9:d5:7b:14:9b:fa:ee:d8:de:1e:f4:70:9a:e6:c0:97:6c:7b:
         63:ee:2f:1e:06:1d:9b:ba:15:d1:b9:7f:c7:35:4e:e1:41:28:
         58:fd:14:9e:67:7b:23:3c:60:35:5e:24:d6:c4:6f:67:05:92:
         e7:bc:98:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----