Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3fe6ad2b6563134d1695b2bc4e331ec78f3f5738.roa
File:                     3fe6ad2b6563134d1695b2bc4e331ec78f3f5738.roa (raw, json)
Hash identifier:          o0s6XntaFdwiTy5BAZS0QdDF75NW7aArP6Jp6U7GICw=
Subject key identifier:   B2:7F:3B:09:BF:8F:27:5C:9E:B3:5F:31:E6:4D:F9:C7:1D:CD:CF:C4
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F7F9E
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3fe6ad2b6563134d1695b2bc4e331ec78f3f5738.roa
Signing time:             Wed 24 Mar 2021 14:43:52 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:6013::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015710 (0xf7f9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=3fe6ad2b6563134d1695b2bc4e331ec78f3f5738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:14:84:24:f2:6f:3f:71:15:05:39:af:f5:5f:
                    ee:41:d5:44:f4:33:92:df:3a:11:19:23:c2:44:43:
                    d2:c0:a9:d0:58:08:64:be:0c:ef:3f:6a:e4:cc:80:
                    da:96:06:0c:66:91:3d:e8:68:67:fa:d3:0d:b0:81:
                    6e:c3:98:ed:a9:49:56:0e:8b:b0:62:c2:a6:e9:80:
                    cf:c2:1d:92:b8:3c:83:42:64:42:14:77:0d:23:ad:
                    fd:76:2b:5b:e2:9e:e5:0d:b1:50:26:a3:92:03:8e:
                    bf:d8:8b:42:2f:1c:9c:b8:6e:af:0c:3b:e4:e6:93:
                    55:81:de:96:22:a1:89:7b:b9:a6:80:75:98:49:d4:
                    d9:02:d5:af:31:1d:34:00:12:80:8d:6f:75:66:b2:
                    5b:2b:59:04:2f:7c:a5:ee:82:d0:2d:43:20:2c:a9:
                    f9:cf:ab:c0:28:16:12:c2:5c:43:59:31:14:d7:1e:
                    13:d2:37:f1:1a:70:28:ec:92:bb:16:80:36:15:c8:
                    cc:4b:c2:de:81:b8:df:14:f4:19:bc:0f:84:62:a7:
                    e6:ab:ae:cb:20:c0:3a:8a:aa:fe:45:d8:7f:ea:ec:
                    0c:70:1f:00:e6:56:12:5c:18:76:20:a0:37:68:49:
                    00:26:4b:ec:18:8c:ba:c4:d0:04:4d:81:dc:b6:ce:
                    fc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7F:3B:09:BF:8F:27:5C:9E:B3:5F:31:E6:4D:F9:C7:1D:CD:CF:C4
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3fe6ad2b6563134d1695b2bc4e331ec78f3f5738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6013::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:43:57:3c:56:07:95:60:30:86:dd:93:f3:40:af:9a:9b:9b:
         01:f9:c4:83:14:9b:f4:ac:1f:39:8b:8e:85:37:96:2d:28:9d:
         95:e6:eb:93:7f:bd:cd:73:59:d0:90:96:71:f5:af:e5:bb:7c:
         4c:5f:18:0e:72:68:bd:f9:15:17:5e:82:ec:27:94:32:cf:bb:
         ec:bd:8c:b2:ba:0f:9e:7c:bb:af:4e:94:6d:f7:bf:42:34:5c:
         f3:1f:59:d9:98:a4:59:31:07:a5:85:f8:8e:ed:f0:8f:15:3e:
         49:ee:2b:e1:50:21:cd:8e:db:73:c0:f7:63:ae:56:18:6a:7f:
         a4:f7:f7:97:1f:83:0e:53:53:eb:fe:58:a8:1e:b4:53:4e:4a:
         0e:78:ef:04:3c:43:8d:dd:94:8b:a5:d6:24:23:f9:1c:9e:96:
         51:b2:ce:52:d9:8c:8b:39:ae:de:6c:d9:8e:74:3d:93:fd:b2:
         0c:18:f8:e0:8b:38:1a:90:dd:89:f3:e6:e0:ce:21:78:62:5d:
         7a:f5:da:bb:e4:9c:a5:4f:40:80:e3:94:a0:7c:58:6b:e2:60:
         04:f0:71:13:f8:af:fe:93:6f:0d:ee:26:7f:53:f8:c4:45:ef:
         bf:e2:a4:ad:fd:a5:77:bb:2b:22:e9:26:02:8f:be:ac:d0:f4:
         13:a4:99:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----