Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/394d508a4ce56a64945ddc5a48ff58c00ed27855.roa
File:                     394d508a4ce56a64945ddc5a48ff58c00ed27855.roa (raw, json)
Hash identifier:          rM3DagderiJzzlAQQ/GQfgKvS9A/u92W8pGzQd02Zl4=
Subject key identifier:   AB:A0:1F:A6:3C:E1:CA:F8:76:88:C5:D0:BC:43:05:0D:C9:BC:B8:85
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       136F23
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/394d508a4ce56a64945ddc5a48ff58c00ed27855.roa
Signing time:             Wed 23 Jun 2021 18:06:41 +0000
ROA not before:           Wed 23 Jun 2021 03:00:00 +0000
ROA not after:            Fri 23 Jun 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6025::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1273635 (0x136f23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Jun 23 03:00:00 2021 GMT
            Not After : Jun 23 03:00:00 2023 GMT
        Subject: CN=394d508a4ce56a64945ddc5a48ff58c00ed27855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:47:e2:ef:6c:fb:8d:54:7d:71:d1:5e:16:0a:
                    4e:b0:23:a4:76:d0:e2:e3:eb:1b:a2:3d:96:4b:cc:
                    68:71:3f:a5:93:78:28:4a:cb:db:7b:60:5c:f3:85:
                    ef:eb:ac:4e:b9:81:40:44:d7:6b:f2:63:4e:c9:3a:
                    5d:04:ed:e7:d4:e9:b1:c3:e9:be:9f:ee:9b:ac:99:
                    0b:18:ae:f6:70:00:2a:1c:02:ed:66:97:62:ca:52:
                    f1:91:25:5f:d7:62:4c:49:e0:49:d8:a1:07:a0:04:
                    01:a6:f3:70:dd:0b:6e:15:11:5e:07:b9:b4:3a:ea:
                    e9:a0:27:20:9e:0f:76:99:dc:b1:54:22:3d:fd:bc:
                    d7:99:b7:78:ba:50:65:ca:65:97:44:fa:5f:42:dc:
                    a1:d0:fd:2f:93:30:fe:df:ee:70:b6:a9:5b:28:b0:
                    2c:63:42:d5:b6:02:ef:53:03:ba:96:b8:99:f3:9d:
                    12:2f:b6:ed:6f:49:31:23:ad:39:52:ab:42:a8:bb:
                    63:78:42:a4:54:da:20:07:87:0b:7e:ca:35:c6:37:
                    27:ae:37:e8:3d:26:08:10:c5:f7:a3:57:89:cf:55:
                    6c:6e:36:cb:db:cb:5c:ad:ea:2d:8e:e9:76:b9:28:
                    0a:2c:79:e0:f0:f9:d7:a4:ca:eb:80:2d:53:cf:ba:
                    1c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A0:1F:A6:3C:E1:CA:F8:76:88:C5:D0:BC:43:05:0D:C9:BC:B8:85
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/394d508a4ce56a64945ddc5a48ff58c00ed27855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6025::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:78:5e:d3:60:d9:3e:39:29:ea:da:79:6e:c2:31:92:38:29:
         0f:21:6f:b1:95:a8:b4:d7:e7:a9:9a:20:d1:35:08:e9:5e:b8:
         b0:c1:4c:f0:89:d4:9d:e5:fa:44:74:4b:54:bc:ed:77:cd:85:
         f9:22:3f:6f:89:94:73:ed:97:d3:50:c8:06:1e:b0:d7:ab:5b:
         91:df:38:4f:47:29:82:8c:25:ba:6c:14:44:3c:50:bb:02:9b:
         4c:03:79:49:cc:ec:ae:9e:5b:de:35:95:b2:27:02:39:90:46:
         41:fd:17:f2:f9:92:5d:cd:c9:fe:4a:1f:d5:ec:f4:1b:01:5a:
         3f:dc:41:72:6a:9d:16:24:c8:ac:c6:bb:ba:57:24:e0:d2:5e:
         06:bf:86:b5:95:a4:c6:03:13:1d:c1:2f:7d:87:af:04:b3:74:
         b8:fe:06:02:95:d8:88:cc:77:66:d6:1d:c4:d7:3c:54:e6:46:
         84:88:3c:a3:1a:eb:a1:0d:fe:26:28:37:70:0a:48:1d:d9:1f:
         b5:51:55:2c:cf:4c:61:aa:07:bc:8d:0f:52:b3:78:30:3f:55:
         e8:60:7c:bc:10:1e:7c:a5:fd:db:4b:a6:10:82:f4:84:35:27:
         1e:0a:96:c4:45:41:ce:86:1a:d9:99:35:b8:ad:5c:a9:ea:0f:
         17:77:01:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----