Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4c41952bc5902d88c369bd2a10943515a3a37f90.roa
File:                     4c41952bc5902d88c369bd2a10943515a3a37f90.roa (raw, json)
Hash identifier:          xdjxIFeBC6A7pMxArjwShKYTIFgQYqnbGMrLk6nhsuQ=
Subject key identifier:   5B:62:3D:45:8D:E3:9D:A6:A3:75:0E:04:64:D3:44:AE:79:25:85:4B
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15C7B4
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4c41952bc5902d88c369bd2a10943515a3a37f90.roa
Signing time:             Tue 24 Aug 2021 22:50:33 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:605d::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1427380 (0x15c7b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=4c41952bc5902d88c369bd2a10943515a3a37f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1f:cf:74:93:f2:2f:ea:87:b5:54:3b:c0:92:
                    e2:ad:a6:f8:59:41:d3:a7:18:24:82:7a:98:c5:f7:
                    8a:ca:7b:bf:e7:26:6d:2c:0d:48:e7:56:35:be:af:
                    68:d5:dd:08:da:37:5f:18:77:fc:c7:1d:3d:40:80:
                    50:44:b1:94:c2:ad:82:2a:f0:e4:b5:0a:86:f7:10:
                    52:d9:ce:f6:c0:2e:ad:e7:37:b7:54:10:03:38:c7:
                    dd:09:92:42:bb:2b:53:2f:be:d6:f3:71:1e:1e:ac:
                    8c:5d:dd:a7:24:c6:0a:1f:04:85:89:1e:e0:bb:a8:
                    9f:13:d4:0f:f7:12:2f:dd:17:51:5c:ac:09:d4:70:
                    6f:b0:74:fa:9c:60:b0:c3:bc:c6:f5:02:e8:00:a5:
                    93:66:d4:55:09:0a:6d:ea:2a:76:34:f8:26:c1:e3:
                    17:ff:d6:4c:ba:d4:31:06:12:20:1c:51:1f:be:71:
                    2c:f2:8e:db:66:e0:b6:b0:21:ac:95:72:92:20:29:
                    23:f7:b6:69:2f:17:70:30:78:bd:b2:a1:5a:13:92:
                    56:8d:9c:5a:e6:60:d2:5d:fc:f7:b0:58:88:1b:a6:
                    46:06:2c:43:44:d7:7b:48:c1:7d:00:c2:d9:3c:75:
                    70:2a:4c:d9:96:dc:89:82:be:83:77:b0:3d:79:7b:
                    e9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:62:3D:45:8D:E3:9D:A6:A3:75:0E:04:64:D3:44:AE:79:25:85:4B
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4c41952bc5902d88c369bd2a10943515a3a37f90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:605d::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:fb:0b:50:4a:dd:49:e1:7e:31:d2:b5:7d:6c:d9:e5:23:53:
         09:ad:6f:78:a4:1a:e7:99:58:69:ee:ef:29:bc:64:e3:08:2a:
         cb:7f:03:ad:1f:43:87:7e:16:17:69:5b:2b:c0:e1:b2:dc:10:
         8e:43:3f:f1:a8:ab:1c:d0:30:a7:9a:2d:ff:1b:67:36:85:3b:
         a1:00:23:77:9e:6f:53:d0:c4:8a:bc:9b:db:a4:2e:db:fb:09:
         7e:a8:e8:12:1f:ca:e3:a5:00:a7:83:2b:6c:c8:18:a7:c7:2b:
         e9:c9:b6:61:f2:3b:1f:f0:15:64:cf:d4:60:e8:89:3f:e8:b3:
         a8:19:01:d7:ba:59:e3:0d:1f:71:a4:dc:d1:18:f6:bc:11:7c:
         98:ec:b7:29:b0:2c:5a:19:8e:98:3a:46:53:c1:ef:35:cb:99:
         84:7e:99:06:9b:f4:ce:3e:f4:23:1a:b3:bd:be:13:74:5b:27:
         69:c5:be:3f:07:5a:60:95:bb:70:b2:0e:60:09:0b:3c:cc:d1:
         9a:a1:f5:71:d7:59:4f:7b:1d:69:82:a7:43:aa:e3:7f:e1:09:
         d7:6e:a0:c2:4a:53:aa:c1:df:2c:60:42:f9:dc:72:b7:e0:e8:
         05:a0:98:92:da:57:e5:eb:e1:aa:9d:e9:6b:29:e3:fa:b4:d1:
         ce:a4:d2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----