Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2a01e5776ad622384ef4788070fb1f996bd4756d.roa
File:                     2a01e5776ad622384ef4788070fb1f996bd4756d.roa (raw, json)
Hash identifier:          t7D6Vi/C0Xp7KnW5N0eUCA3HragOpHink1NuBLUJOT4=
Subject key identifier:   DD:DC:D7:FD:D6:EA:D3:42:B0:FC:16:14:D2:1D:31:A3:9F:FC:93:4B
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F7E17
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2a01e5776ad622384ef4788070fb1f996bd4756d.roa
Signing time:             Wed 24 Mar 2021 14:43:52 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:6012::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015319 (0xf7e17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=2a01e5776ad622384ef4788070fb1f996bd4756d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:22:5d:2f:97:3b:0a:1a:ec:b4:2f:ba:20:
                    12:9b:b6:4b:52:ec:aa:9f:8e:38:95:7a:53:1f:81:
                    41:94:01:e8:ed:81:f2:27:62:0b:18:32:b8:40:45:
                    33:80:93:6b:bd:1f:75:db:4d:28:18:c8:63:1f:b5:
                    72:a4:e8:b0:5c:8b:4c:e2:e2:4b:b2:38:53:b9:da:
                    40:1a:d1:f5:8c:11:33:dc:12:a7:76:0b:a1:41:fa:
                    a9:30:4c:4c:a9:79:a8:f2:6a:64:79:21:7b:59:d8:
                    98:9b:8a:ee:c2:01:0a:08:ab:22:57:c9:89:3c:b0:
                    b2:b6:6f:d8:8a:64:80:98:c1:a9:49:60:be:70:83:
                    7d:73:38:67:fe:91:14:17:db:ec:db:3a:25:0d:a3:
                    b3:86:a8:32:30:f0:71:bb:a5:d3:2e:02:d8:7b:4c:
                    b5:36:6d:7b:88:d4:21:04:47:45:fa:4e:21:44:c8:
                    89:ec:9e:34:b9:e0:40:99:de:67:d7:be:6f:51:91:
                    53:7a:89:2c:43:02:d7:d7:be:88:e1:a1:df:c7:b7:
                    df:b9:ea:b3:68:2c:b1:8b:dc:25:24:a8:65:af:df:
                    47:ab:ee:c9:0a:19:11:cb:fa:fb:1d:b5:73:a0:b2:
                    cd:55:39:83:be:18:60:39:c2:78:b6:25:e7:b0:75:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DC:D7:FD:D6:EA:D3:42:B0:FC:16:14:D2:1D:31:A3:9F:FC:93:4B
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2a01e5776ad622384ef4788070fb1f996bd4756d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6012::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:4e:93:4f:2a:80:74:85:11:ce:d8:c1:15:d9:5a:ec:c7:2a:
         ae:69:fd:44:30:34:6b:63:6a:cc:0a:fb:e8:dd:ba:74:e5:4a:
         31:85:10:f0:c0:38:0d:34:11:6d:00:29:e2:b9:3a:57:0e:fc:
         b4:ea:b6:a4:01:a7:ed:90:57:c7:c4:05:df:b7:7f:d8:73:55:
         7e:dd:68:46:a2:a1:f3:89:a5:bf:0d:5a:1d:53:2d:07:22:11:
         b2:6f:e8:72:3a:a2:71:c0:c3:3e:13:6e:f2:03:f3:bf:5a:f0:
         3f:ea:c1:96:aa:52:52:ab:a9:e0:22:55:99:65:d5:b6:40:48:
         9d:a3:e3:dd:4d:fa:2f:58:f9:cb:ee:59:73:eb:6e:44:b4:40:
         35:b6:e9:c1:84:89:14:10:39:55:12:3c:96:45:06:68:4d:29:
         61:73:49:72:1c:f3:2d:12:f0:1a:45:5e:ba:7a:e9:12:eb:f7:
         5f:28:49:3c:42:2d:c8:33:c6:4d:08:3d:ac:33:0d:93:e2:c7:
         6e:57:47:b6:ce:ed:dc:83:01:f6:12:53:c8:f3:46:a1:28:cc:
         f5:2f:bf:62:2a:88:68:9e:d1:bd:44:a4:34:19:13:b3:4b:fd:
         aa:b2:a7:1c:47:c2:0f:a8:86:6e:9e:22:cd:83:e1:3e:7c:51:
         18:e6:26:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----