Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4eb475c8d063524bc235643d7e07efef5abac140.roa
File:                     4eb475c8d063524bc235643d7e07efef5abac140.roa (raw, json)
Hash identifier:          mPM4J6Tm3btfwZ8HiEU1CigCjs9u0F85lGR26pqVDco=
Subject key identifier:   8F:19:A0:DB:CA:9E:98:12:BE:5E:E9:1E:96:FF:43:B8:DA:63:AA:3B
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F6A9B
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4eb475c8d063524bc235643d7e07efef5abac140.roa
Signing time:             Wed 24 Mar 2021 14:43:52 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:6009::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1010331 (0xf6a9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=4eb475c8d063524bc235643d7e07efef5abac140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6e:06:5a:eb:cf:ca:7a:91:cc:90:78:72:5f:
                    c9:86:36:d0:9a:19:d0:f1:68:b6:05:dc:80:3d:68:
                    a8:48:01:b5:39:dd:b2:e0:d6:d7:bf:51:f9:55:01:
                    01:02:90:6f:d6:79:da:92:1c:1e:da:31:1c:50:43:
                    ae:45:b5:37:b3:54:86:ff:e9:74:b2:ac:b1:9a:ca:
                    93:4e:a5:85:ad:a0:d9:87:11:db:ee:47:02:eb:00:
                    73:00:90:2c:59:16:45:6f:71:f0:63:df:9b:da:3f:
                    a0:1a:c0:69:23:08:67:d3:8e:63:24:2c:33:9c:94:
                    8b:d5:b8:97:66:8a:b0:3d:ba:61:6c:fc:c3:e0:69:
                    9a:2d:e0:71:23:41:c9:be:ad:cd:4f:c4:fb:70:bc:
                    d7:a1:e9:c2:e6:61:8e:59:05:59:ee:5b:3e:4d:d3:
                    3b:be:f4:be:01:99:f7:02:5f:d3:16:61:bb:a7:3d:
                    6c:70:2e:ec:07:a4:c3:f7:25:5d:40:41:68:8c:19:
                    f0:56:4c:88:99:e9:78:99:d3:5e:49:3d:5c:7d:f3:
                    d8:8e:fd:35:70:56:81:65:20:fa:1b:fb:34:27:b6:
                    51:58:28:67:b6:45:08:25:04:bf:17:0e:77:26:a0:
                    3f:46:e4:b8:b5:da:a6:a3:44:34:79:e6:5b:5a:e7:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:19:A0:DB:CA:9E:98:12:BE:5E:E9:1E:96:FF:43:B8:DA:63:AA:3B
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4eb475c8d063524bc235643d7e07efef5abac140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6009::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:98:64:22:b1:95:09:af:97:01:c2:d0:c0:64:ee:7e:ba:24:
         4c:6f:51:c5:27:d9:33:c0:4f:43:52:0f:d1:d9:0a:c3:72:0f:
         a8:f5:79:71:a7:21:f4:ad:ab:3d:31:38:45:f6:83:2b:79:b4:
         ec:e2:08:da:22:ec:f7:5d:20:d7:f6:00:fc:df:1c:50:fa:98:
         74:80:0a:33:27:e0:33:99:06:9a:74:4a:3b:20:97:87:f0:0b:
         e0:5d:66:aa:1d:38:17:c9:1a:8e:7f:8d:a3:3c:23:a4:03:99:
         c5:ea:af:66:57:01:31:b4:83:1a:db:1f:32:2e:19:c6:a0:cd:
         cd:5a:be:82:0b:4f:cc:02:41:e8:d6:84:ed:10:ba:88:44:66:
         bf:4e:6e:94:ae:9c:83:e4:d9:5a:b3:f0:c9:69:b7:5b:a3:eb:
         c5:1f:1e:a4:e2:38:bd:ad:88:88:03:2a:8f:45:09:d7:17:91:
         ef:e6:8f:53:ec:f7:b0:79:8f:37:d5:5c:a0:99:10:5b:0d:66:
         0f:71:6c:94:7f:bc:20:e1:0d:82:bd:8b:11:64:67:2c:b1:a4:
         e1:66:01:b3:12:3d:82:78:a3:2b:be:8d:f1:60:63:27:75:57:
         32:19:c4:7f:61:66:34:7d:0d:06:54:0f:07:a0:40:c4:cb:3e:
         e4:57:38:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----