Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3e55525fe382b6acd9a23ef6ec2e564693e50b69.roa
File:                     3e55525fe382b6acd9a23ef6ec2e564693e50b69.roa (raw, json)
Hash identifier:          RpBAGIeohARgKuJ2BucUNPnBZxd0Tp7PJaNKPcZSJvg=
Subject key identifier:   D9:4A:BB:C8:52:E0:FF:D6:DA:4F:25:66:ED:67:5C:BF:C0:81:73:A9
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       159D8E
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3e55525fe382b6acd9a23ef6ec2e564693e50b69.roa
Signing time:             Tue 24 Aug 2021 22:13:44 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6052::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1416590 (0x159d8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=3e55525fe382b6acd9a23ef6ec2e564693e50b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:14:ba:54:8f:08:74:cf:ee:be:de:04:7e:
                    8f:b5:af:4f:ed:4d:9c:09:11:b5:8b:b2:6f:cf:db:
                    f4:a5:81:04:c1:f5:44:67:71:23:a8:a0:b6:af:e1:
                    69:7c:2a:c4:d8:80:d6:d1:3f:f3:71:89:7b:f0:a5:
                    af:77:52:4f:c0:c6:24:fa:61:64:e5:1b:da:e6:2d:
                    ac:f2:6a:d7:7d:55:ff:9f:54:9c:93:bb:f9:23:92:
                    5b:77:72:71:b0:04:3b:5b:f2:c5:d6:fc:b0:ae:aa:
                    c4:f1:ad:55:55:b5:4c:e2:aa:86:79:8f:b1:95:4c:
                    55:76:ff:b6:39:d8:ac:62:07:6b:cf:f5:1c:27:b6:
                    bf:d1:5b:fc:23:a0:73:12:e5:b5:7b:a8:51:0f:13:
                    6e:e7:24:a3:22:7e:d7:93:d0:24:7d:0d:88:b4:c1:
                    cd:48:5c:26:cb:47:7a:5e:60:1c:d9:8c:39:ca:23:
                    c3:7f:9c:aa:a0:dd:de:65:14:a9:0c:70:a5:10:4f:
                    62:76:a7:7b:7d:25:f3:f4:43:1f:76:6b:f7:a5:92:
                    fd:88:66:a5:0e:86:77:b5:67:d0:09:ba:3e:a8:af:
                    78:0d:2f:87:9d:d0:82:06:50:b1:8c:83:5e:65:e1:
                    d8:20:9a:0c:8a:d4:e8:ff:a5:1b:c0:bd:92:a0:ac:
                    ec:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4A:BB:C8:52:E0:FF:D6:DA:4F:25:66:ED:67:5C:BF:C0:81:73:A9
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3e55525fe382b6acd9a23ef6ec2e564693e50b69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6052::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:ae:ee:18:3c:35:65:59:56:4e:f7:77:fe:e4:4f:f5:dc:d1:
         0b:49:7a:ef:3c:9d:49:b4:b9:b3:f3:3e:00:0b:bb:1a:9a:00:
         e6:17:d1:9d:15:61:21:60:67:a6:32:a4:89:c1:29:e0:02:97:
         21:6a:60:c8:9c:cf:d3:ed:1f:19:cc:07:50:81:07:2d:cd:bc:
         3b:e8:87:c3:2f:8f:b0:58:a3:68:f1:93:4a:4c:34:12:4d:5f:
         ed:44:d8:ae:f0:0a:ee:b5:25:57:9c:03:62:8c:9b:84:8b:8d:
         57:c3:ae:16:8e:0f:70:ef:43:a7:0c:22:78:89:b1:6b:63:1d:
         b7:a7:01:26:23:63:aa:e7:7a:1f:b1:5a:6c:8d:09:f8:c4:17:
         eb:1a:88:c9:3d:57:71:91:3f:21:fb:6d:f5:af:3b:36:77:1d:
         fa:ca:86:e6:df:c4:24:39:9d:c7:35:1b:94:66:7f:dc:e1:56:
         e0:02:7f:ee:66:f3:23:56:78:16:61:3b:fc:47:32:3f:28:13:
         0e:ab:18:77:63:d4:ca:f0:d1:91:85:fb:2e:eb:9a:6c:f2:72:
         b2:92:e1:64:13:f3:12:8c:1e:7f:da:9b:23:20:a5:80:dc:71:
         99:bb:72:d0:78:5a:fe:09:2c:a1:72:a8:0b:c6:a9:ef:ac:4c:
         32:15:28:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----