Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/44e4dd3d883b5c3d7917e7da44051f6be22b4243.roa
File:                     44e4dd3d883b5c3d7917e7da44051f6be22b4243.roa (raw, json)
Hash identifier:          SMT9k7i1tuoc32a/cSjNDe+6Y1E3g4vzpM239LKQUyQ=
Subject key identifier:   38:A4:45:56:26:7B:15:C9:95:C8:CC:90:3E:32:98:08:10:3F:31:19
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15C093
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/44e4dd3d883b5c3d7917e7da44051f6be22b4243.roa
Signing time:             Tue 24 Aug 2021 22:43:12 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:605b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1425555 (0x15c093)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=44e4dd3d883b5c3d7917e7da44051f6be22b4243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:60:c8:00:c8:6c:c4:2e:06:36:f0:3c:8a:0b:
                    a8:63:3f:1a:6f:61:72:97:e5:19:a2:0a:a8:23:37:
                    31:da:80:76:5b:32:55:c6:f5:bb:31:32:cb:bf:18:
                    c0:4d:68:4e:90:06:58:a1:8d:e2:73:92:5b:81:e5:
                    54:75:41:f8:a4:2f:cc:0f:12:b9:ad:41:37:a2:58:
                    ec:e5:93:f9:03:1c:50:7d:d1:79:1e:f6:80:cc:45:
                    8b:d0:41:1e:b3:0a:12:8a:00:77:1c:2f:9d:21:97:
                    b2:a2:1b:7e:b3:3e:c2:ae:8f:fb:42:c0:e0:e8:a4:
                    c8:ac:0a:fa:6b:a5:ae:47:1c:8d:23:e3:48:39:5f:
                    95:2c:3d:17:c2:46:4a:96:dd:38:28:b8:dd:c5:4a:
                    4b:6f:d9:76:fa:cc:65:07:7d:77:05:83:a8:43:2e:
                    40:a2:b6:67:f1:49:ef:90:5f:92:57:5f:d0:1f:55:
                    d3:43:6f:d1:ab:2c:d7:84:07:49:33:6e:3e:b6:53:
                    d3:e2:42:87:ba:8b:49:1c:10:1a:42:34:50:46:e8:
                    fa:09:b3:d6:59:9b:70:bc:08:3a:01:92:e6:58:b8:
                    07:33:bf:d3:20:99:69:2a:20:0e:cd:ed:61:7e:11:
                    e4:0d:92:53:90:30:e7:5c:ee:16:f0:de:7c:34:35:
                    30:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A4:45:56:26:7B:15:C9:95:C8:CC:90:3E:32:98:08:10:3F:31:19
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/44e4dd3d883b5c3d7917e7da44051f6be22b4243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:605b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:2a:c3:7c:7c:16:01:d2:e8:7c:20:a8:75:fd:b2:ba:87:ff:
         16:bc:5e:85:03:39:42:f7:d6:07:f6:45:10:4c:07:6a:aa:b5:
         4b:bc:36:be:5a:e9:7d:02:29:a7:ab:0e:99:5e:63:28:c1:6d:
         40:1a:92:12:4a:eb:4f:e4:a4:91:0a:df:17:65:ce:bf:44:10:
         c6:92:c9:67:75:82:bc:37:b2:c8:d6:64:5a:ba:51:61:9d:1a:
         91:3f:c7:ce:7e:9a:ab:12:9e:1b:73:bd:be:5d:54:31:33:5b:
         13:19:72:0b:78:b7:1d:99:d1:ba:3b:e0:17:6a:d9:eb:5c:56:
         4f:51:41:1b:d9:c8:5c:df:9d:b6:ea:bd:03:b1:56:0e:d2:ae:
         39:01:0e:d9:cd:2b:b1:c1:fa:41:4d:45:91:0d:fb:59:5b:43:
         b0:3e:2e:5a:11:db:9b:98:e7:4a:e0:0b:f6:2f:a2:16:cc:b0:
         7b:26:85:35:eb:72:f3:89:37:86:67:09:41:8e:0e:73:6f:20:
         b8:af:b8:48:57:8a:de:b0:f9:d5:4a:72:bc:63:a6:59:ee:42:
         08:b1:4a:45:21:bb:f9:7e:30:a6:b6:05:ba:56:c9:87:71:5a:
         7b:b3:33:bc:78:51:92:b3:75:32:5c:f3:00:3e:c3:24:2e:7c:
         38:2f:f2:fc
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDFcCTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwODI0
MDMwMDAwWhcNMjMwODI0MDMwMDAwWjAzMTEwLwYDVQQDEyg0NGU0ZGQzZDg4M2I1
YzNkNzkxN2U3ZGE0NDA1MWY2YmUyMmI0MjQzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj2DIAMhsxC4GNvA8iguoYz8ab2Fyl+UZogqoIzcx2oB2WzJV
xvW7MTLLvxjATWhOkAZYoY3ic5JbgeVUdUH4pC/MDxK5rUE3oljs5ZP5AxxQfdF5
HvaAzEWL0EEeswoSigB3HC+dIZeyoht+sz7Cro/7QsDg6KTIrAr6a6WuRxyNI+NI
OV+VLD0XwkZKlt04KLjdxUpLb9l2+sxlB313BYOoQy5AorZn8UnvkF+SV1/QH1XT
Q2/RqyzXhAdJM24+tlPT4kKHuotJHBAaQjRQRuj6CbPWWZtwvAg6AZLmWLgHM7/T
IJlpKiAOze1hfhHkDZJTkDDnXO4W8N58NDUw0QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFDikRVYmexXJlcjMkD4ymAgQPzEZMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4LzQ0ZTRkZDNkODgzYjVjM2Q3OTE3ZTdkYTQ0MDUxZjZiZTIyYjQyNDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABEhhgWzANBgkqhkiG9w0BAQsFAAOCAQEAsCrDfHwWAdLo
fCCodf2yuof/FrxehQM5QvfWB/ZFEEwHaqq1S7w2vlrpfQIpp6sOmV5jKMFtQBqS
EkrrT+SkkQrfF2XOv0QQxpLJZ3WCvDeyyNZkWrpRYZ0akT/Hzn6aqxKeG3O9vl1U
MTNbExlyC3i3HZnRujvgF2rZ61xWT1FBG9nIXN+dtuq9A7FWDtKuOQEO2c0rscH6
QU1FkQ37WVtDsD4uWhHbm5jnSuAL9i+iFsyweyaFNety84k3hmcJQY4Oc28guK+4
SFeK3rD51UpyvGOmWe5CCLFKRSG7+X4wprYFulbJh3Fae7MzvHhRkrN1MlzzAD7D
JC58OC/y/A==
-----END CERTIFICATE-----