Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/36a8d9a859d2950ad8e020dc3a74af56ebc038c8.roa
File:                     36a8d9a859d2950ad8e020dc3a74af56ebc038c8.roa (raw, json)
Hash identifier:          r3iYHCxcAnpd4oBXFEe49hE009xmbCcbMP7P2Wrpy0E=
Subject key identifier:   68:66:BB:64:95:D8:A0:D7:30:07:9B:C5:3B:94:4F:AA:FA:9D:51:64
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15B40C
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/36a8d9a859d2950ad8e020dc3a74af56ebc038c8.roa
Signing time:             Tue 24 Aug 2021 22:31:54 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6057::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1422348 (0x15b40c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=36a8d9a859d2950ad8e020dc3a74af56ebc038c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:a4:5e:9e:41:c0:11:a1:1b:94:f5:9d:17:
                    32:55:7c:10:3b:85:58:b1:a5:cb:cd:d3:c8:d3:b4:
                    2f:97:27:9a:f4:27:d8:2c:8c:87:72:a3:95:c9:0d:
                    54:03:80:53:d8:22:65:06:d5:f9:8e:07:de:47:c0:
                    86:81:b3:f9:c2:03:78:96:bc:3a:01:6d:d0:b0:d2:
                    cb:8b:77:5c:64:ff:82:92:b4:61:49:93:73:55:da:
                    f9:fb:47:b3:33:0b:a1:d3:ce:54:c7:44:63:0a:9c:
                    ac:c0:c9:60:f2:c8:5b:d9:ce:86:e3:e6:8b:ab:84:
                    6e:5b:dc:4d:20:8c:3f:fc:3f:0a:6c:e0:a6:f2:44:
                    d6:59:07:6a:c6:41:2e:06:ed:dd:1a:37:34:db:81:
                    1e:b3:3d:12:d3:97:ac:43:d8:a6:3d:ae:12:71:66:
                    5a:8f:0b:d7:bc:8c:c4:f9:3c:d1:78:a5:4a:9e:da:
                    3c:b0:04:a3:cf:5a:89:be:0d:9d:17:f7:2c:ca:9b:
                    83:de:5e:21:98:bd:c6:a3:eb:25:64:09:f1:a7:88:
                    e2:5e:ec:02:d2:93:ec:49:9d:5c:ec:57:b4:3d:7d:
                    9b:01:01:55:8f:5a:e4:62:b5:57:dd:db:46:9f:08:
                    7e:0b:65:ce:a1:d1:b3:5a:71:4b:c7:6b:f5:18:29:
                    f8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:66:BB:64:95:D8:A0:D7:30:07:9B:C5:3B:94:4F:AA:FA:9D:51:64
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/36a8d9a859d2950ad8e020dc3a74af56ebc038c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6057::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:ab:ef:15:33:9c:0b:e7:8a:42:a2:bb:bc:c8:99:f0:e6:38:
         a7:4e:f1:99:0d:0b:ac:3b:13:15:a6:f7:83:58:d1:28:59:36:
         87:df:88:30:68:c6:87:66:af:40:16:71:80:ce:83:aa:b2:17:
         ab:44:bb:c4:a0:6a:23:a8:96:26:55:06:da:c6:27:0f:c5:4a:
         48:c1:5e:87:b3:6e:c2:96:ce:69:58:8a:f3:b0:db:89:2c:99:
         78:59:16:32:d3:85:84:46:6d:61:ab:72:f8:43:f0:8a:42:c1:
         77:e7:b8:53:87:c2:fb:52:53:ed:ba:04:7e:d8:21:71:2c:f9:
         36:24:4d:2c:1d:c5:df:09:26:0f:84:14:b8:ce:5f:f0:7d:7a:
         c1:45:32:5a:c9:40:28:9e:f3:15:bf:bd:cb:9c:aa:55:94:5b:
         af:5c:7c:a3:af:a3:e4:69:db:e8:92:a1:a1:84:43:19:a7:68:
         b9:6c:dd:09:1a:b8:5b:aa:8a:5b:c2:b0:e7:1e:12:25:72:51:
         3d:49:33:e4:09:79:d8:ad:72:a5:6e:9c:39:48:49:4d:4c:11:
         9a:9f:fc:a0:ce:65:8c:59:e3:82:3c:96:cb:ab:0d:6f:2a:91:
         3a:a8:bf:70:ac:7a:3c:9a:8b:41:c5:21:85:a9:52:3b:c3:ad:
         08:68:0c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----