Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/37b020752bcbdbb8e45595dde0130df9e18b85d9.roa
File:                     37b020752bcbdbb8e45595dde0130df9e18b85d9.roa (raw, json)
Hash identifier:          h4/jBiwxv2EIO79KhsV0nbgGhSlcKWmP0oz3/huv1rc=
Subject key identifier:   A5:20:7D:BC:07:39:74:36:33:2C:4B:B8:0D:E3:B0:DC:D9:32:C0:06
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1573DE
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/37b020752bcbdbb8e45595dde0130df9e18b85d9.roa
Signing time:             Tue 24 Aug 2021 18:04:47 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6049::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1405918 (0x1573de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=37b020752bcbdbb8e45595dde0130df9e18b85d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3b:02:9c:fe:8a:94:cf:6e:aa:1b:4b:40:17:
                    a8:67:79:f4:7b:c1:7e:ca:90:38:42:93:f8:df:7f:
                    4c:f8:b9:bd:a2:a2:60:24:8f:e9:36:ec:43:72:0d:
                    db:40:69:6f:ae:b9:6a:8e:bc:67:6a:be:9f:27:e5:
                    91:ac:3b:c5:d7:05:96:1e:06:80:eb:1c:a4:2e:78:
                    d2:ee:6e:f1:e2:51:99:c6:94:82:47:7e:27:77:48:
                    5e:2c:5d:15:42:40:a0:06:ef:01:cd:5b:91:a9:fb:
                    c2:f6:0a:bc:da:af:bb:b2:6f:e8:81:0a:16:f9:31:
                    3c:6c:b5:00:ed:79:62:ff:b4:79:6f:c3:a0:ab:25:
                    cf:a3:86:48:0a:e5:0f:b4:38:7d:57:2e:94:ce:23:
                    e1:36:c3:ef:a7:5d:00:26:61:04:bf:7a:a4:c5:f7:
                    ae:2f:28:24:31:4f:78:07:52:a0:26:8f:46:5a:f3:
                    fa:7b:56:05:7e:22:f2:87:c5:da:f1:7f:72:11:f5:
                    6d:69:7a:1c:3d:53:db:85:ac:d4:2d:c6:c8:e3:6a:
                    f3:f5:57:14:81:69:90:b1:3b:6e:20:9d:9a:f7:9e:
                    af:9c:df:70:63:d3:91:56:2d:55:a6:b5:3a:ee:8b:
                    60:9d:dc:40:e6:f2:80:6e:21:1d:d9:f7:cb:23:af:
                    d8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:20:7D:BC:07:39:74:36:33:2C:4B:B8:0D:E3:B0:DC:D9:32:C0:06
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/37b020752bcbdbb8e45595dde0130df9e18b85d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6049::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:c6:4c:3f:6c:66:ce:d3:fd:17:3a:47:7a:ba:94:5f:21:45:
         6f:34:b5:af:86:c9:dc:de:ab:31:55:75:0d:e1:92:f3:4d:5d:
         da:c8:b7:82:5e:03:d4:cc:b8:44:fb:11:b9:4a:5d:19:a3:53:
         9d:8d:f9:2d:c5:b7:8d:d3:9f:e7:e8:51:28:95:43:13:5b:78:
         0c:8c:71:3f:6e:d9:5f:ad:73:49:ed:c7:8e:f6:65:6f:11:0d:
         0a:0b:51:51:b1:25:a5:df:14:d7:f6:db:2d:5b:34:9f:64:12:
         7a:3a:2d:7c:92:f9:48:ba:18:5c:ae:fb:4e:95:cc:12:01:58:
         d4:1e:d4:2f:05:95:67:cb:bd:bd:e7:4c:5c:f9:de:bf:22:a2:
         e3:0e:d0:31:ad:18:03:23:86:c7:fb:54:47:68:3e:0f:3e:46:
         be:a0:a7:fe:53:79:7f:f5:5f:e3:13:52:2e:ca:d2:3f:ea:e8:
         f0:e2:ad:9e:fa:12:b2:7c:70:a7:62:1d:bc:43:ec:eb:a4:f0:
         e1:fc:bc:f1:66:6c:3e:f0:03:06:ec:a0:39:c9:b0:54:d4:c7:
         e6:2b:92:49:a7:82:e4:4e:e8:97:e2:5c:63:4d:0f:ca:63:77:
         44:63:79:cb:0e:e2:be:db:6d:c7:47:92:96:0d:30:7f:9e:17:
         dc:f3:c9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----