Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3f0597444b8fd3a37205578278af55eb5cba233e.roa
File:                     3f0597444b8fd3a37205578278af55eb5cba233e.roa (raw, json)
Hash identifier:          dHcI06UfamVuhU3jipaNw0VJu1vl1ZA1rQpxoCa+m7w=
Subject key identifier:   94:C0:50:1A:EE:21:9D:5E:FD:91:A1:7B:63:D8:90:B1:6C:AF:79:DF
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       26112C
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3f0597444b8fd3a37205578278af55eb5cba233e.roa
Signing time:             Thu 11 May 2023 08:30:47 +0000
ROA not before:           Wed 10 May 2023 08:30:47 +0000
ROA not after:            Fri 09 May 2025 08:30:47 +0000
asID:                     278
IP address blocks:        2001:1218:601d::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2494764 (0x26112c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: May 10 08:30:47 2023 GMT
            Not After : May  9 08:30:47 2025 GMT
        Subject: CN=3f0597444b8fd3a37205578278af55eb5cba233e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ff:35:e6:02:d9:8f:e0:81:74:4f:2f:56:7b:
                    4b:66:bc:28:bb:d9:90:a8:41:f1:3d:c3:f4:f7:95:
                    75:f2:12:c7:57:00:de:de:a6:f7:76:76:6d:04:27:
                    98:98:c8:cf:1d:39:7b:84:4f:5b:79:4c:65:bd:b9:
                    c8:f0:00:91:05:1f:15:b2:ee:71:70:c0:90:d7:9c:
                    9a:61:42:99:29:61:cf:6c:cf:b9:2a:cf:21:f9:75:
                    bc:cc:f1:b8:28:b8:89:c5:bc:32:7c:c1:8f:48:4a:
                    81:89:17:dd:45:48:1b:b3:eb:ff:47:1e:4e:ad:bb:
                    55:61:92:33:6b:ed:3a:e8:fc:1f:ba:f5:b6:37:e4:
                    6e:79:cd:e0:ad:d8:13:95:b0:6a:82:ea:b4:ec:a5:
                    5d:3d:e2:0f:78:dc:d3:d0:27:02:d2:17:f4:2f:1f:
                    79:c4:58:15:17:47:a3:0e:08:0d:35:ad:7f:57:8d:
                    ae:d8:10:24:08:85:bb:bc:57:29:97:22:4b:0f:68:
                    8c:be:21:36:9b:b3:04:82:b0:5b:5c:21:e1:79:8c:
                    95:15:c2:e4:a0:fc:61:9f:ce:44:9c:43:5f:7f:20:
                    89:68:fc:13:7a:ba:f1:78:ae:31:61:33:d2:56:30:
                    aa:17:f9:84:43:87:2d:f0:42:af:88:51:6e:49:24:
                    e1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C0:50:1A:EE:21:9D:5E:FD:91:A1:7B:63:D8:90:B1:6C:AF:79:DF
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3f0597444b8fd3a37205578278af55eb5cba233e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:601d::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:af:0b:eb:38:7f:3e:82:87:e1:74:ea:4e:07:14:e7:ab:1f:
         93:0f:a9:31:c3:cc:8d:a6:c0:d3:73:7d:16:ec:4d:4d:88:7d:
         1c:45:34:29:1d:2c:22:da:ee:ff:db:b4:36:0a:c5:8b:dc:9f:
         05:28:61:c5:ef:45:3d:d1:ee:ec:6c:ba:b7:0e:4e:16:95:c9:
         82:b7:2d:c8:da:07:d0:df:60:d3:40:58:3c:9f:af:f0:41:53:
         41:1e:cc:ce:dd:96:2f:9e:61:4b:92:06:ee:3e:9c:b4:62:91:
         61:53:1f:97:28:6d:83:b8:f4:99:29:26:2b:7b:94:b4:5b:51:
         26:4f:82:8a:93:ec:d2:9e:e8:01:dc:af:2c:a2:4a:a2:db:64:
         e1:1b:6a:d1:2e:a9:f6:c8:6d:97:d1:ed:7d:fc:58:72:f4:7c:
         e0:1b:42:d6:fb:e9:da:2c:60:bb:f4:37:5a:e7:50:50:c7:09:
         8f:c9:65:f6:56:88:40:7a:68:30:dc:e7:d4:50:ec:9e:de:7d:
         1e:30:82:3f:8d:6c:f0:f2:d5:4e:4b:b2:d4:7f:da:e5:9f:e9:
         ba:c2:9a:f3:c6:2d:80:9f:f0:4c:f9:2e:1f:81:74:d0:b3:f5:
         30:3a:29:37:77:ef:87:3e:a8:3f:bb:54:00:9a:54:5c:c7:9a:
         17:19:20:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----