Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2b4b58e9660596fb161de218e345cde5e8821fcb.roa
File:                     2b4b58e9660596fb161de218e345cde5e8821fcb.roa (raw, json)
Hash identifier:          Izdh9kMlrj9uMay4oe6CNl5zbHXsGl2ifQJxJ6d4qIM=
Subject key identifier:   47:8D:ED:B5:B4:53:F1:AE:99:72:47:D2:3D:F8:EB:CD:F7:6D:AD:72
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1112F6
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2b4b58e9660596fb161de218e345cde5e8821fcb.roa
Signing time:             Wed 24 Mar 2021 14:44:31 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:6000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118966 (0x1112f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=2b4b58e9660596fb161de218e345cde5e8821fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:02:14:ad:f5:26:70:00:63:68:b2:b9:44:07:
                    4b:f8:7f:4c:40:d0:3d:c1:c0:a0:30:c8:5a:36:ac:
                    de:44:10:0a:cf:1c:cb:3b:a5:dc:f9:ce:02:14:b3:
                    33:7f:7f:13:49:91:94:a8:6d:90:dd:c4:2c:c6:2e:
                    f6:bb:f8:9e:3e:7d:e5:1e:e3:31:7e:26:ae:47:d4:
                    ec:d3:94:2f:f2:f9:7a:35:4f:97:c8:84:ea:85:dd:
                    ec:98:2b:f1:4b:a8:f7:37:9a:00:2b:0e:55:c3:69:
                    5e:dd:10:96:94:d4:68:ac:80:c8:a7:e8:a9:e9:6b:
                    fe:c4:4d:a7:28:34:b6:0a:be:50:9c:05:6b:55:df:
                    fc:4e:13:92:92:5e:f0:43:be:4b:59:ad:1a:d9:39:
                    23:4e:77:1f:47:d5:25:b7:d9:31:ac:6a:5a:e5:df:
                    4b:8a:bf:61:0f:87:7c:56:c9:3c:79:67:fe:71:bf:
                    bb:a3:8e:a5:a3:ce:11:17:8c:55:1d:65:53:e6:0a:
                    2c:9d:ec:2b:ff:e1:50:5a:e1:c9:8a:d9:1d:8a:59:
                    ad:2d:52:52:ca:46:1f:50:49:a3:10:47:39:27:95:
                    3a:26:25:52:c4:ea:af:64:43:ca:21:30:76:a4:3b:
                    61:a8:67:93:5b:c8:e1:5d:b7:02:f4:8e:ac:49:20:
                    10:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8D:ED:B5:B4:53:F1:AE:99:72:47:D2:3D:F8:EB:CD:F7:6D:AD:72
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2b4b58e9660596fb161de218e345cde5e8821fcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:2a:74:fa:f5:21:70:72:47:b2:06:ca:14:c0:d3:48:92:71:
         f0:82:27:21:c1:9b:47:90:a5:9f:8f:7c:15:82:9d:9c:96:90:
         9b:f0:0b:6a:21:05:5f:d3:88:db:3f:2d:ab:6b:98:83:fc:1f:
         46:29:3e:4e:b2:b2:52:ce:3d:04:94:b7:f6:c3:35:20:1f:b8:
         6d:30:c6:cf:20:ab:50:67:a2:70:25:13:4f:04:c2:68:16:c2:
         1f:05:c9:94:98:55:f0:4f:32:c1:46:97:19:ad:93:a5:b4:0f:
         ad:13:01:17:11:cb:e1:0c:1d:07:98:ff:1a:69:6b:31:b7:ca:
         cd:d9:04:76:29:96:87:29:b8:4d:43:f2:25:6b:ed:4b:23:1b:
         e5:6f:61:3b:0b:3e:49:19:6b:a9:d7:fb:ea:6e:8a:48:70:67:
         94:ba:3a:5c:66:86:6a:e6:0b:57:b3:34:08:bc:ac:a3:5f:3d:
         41:1b:00:e2:71:4f:f5:f3:72:ce:a1:af:ba:4a:7c:92:a0:57:
         0c:27:45:f4:21:ba:3b:d4:73:94:85:ad:74:7d:92:6e:2e:7c:
         ba:e1:4b:c6:7b:f4:e5:55:a6:82:06:ba:a3:5d:d6:70:1e:46:
         16:a0:9e:ee:a4:2f:c5:98:40:b9:5c:d3:30:7a:89:db:ac:d3:
         f0:06:34:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----