Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/50f99ee83cb36585a0bea314aae480bc23670ae7.roa
File:                     50f99ee83cb36585a0bea314aae480bc23670ae7.roa (raw, json)
Hash identifier:          bF6bBfe7f8N405iy9DI4XH4Uo6zftvIciYB4J+2jBVM=
Subject key identifier:   7A:DF:CB:1D:D6:2D:AC:02:13:53:4C:35:68:B5:2D:3B:13:5A:9F:29
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       14ED46
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/50f99ee83cb36585a0bea314aae480bc23670ae7.roa
Signing time:             Wed 18 Aug 2021 16:59:00 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6030::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1371462 (0x14ed46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=50f99ee83cb36585a0bea314aae480bc23670ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:3f:9f:7c:ee:55:5e:44:70:ae:83:5c:2b:
                    eb:be:2d:2b:fd:79:4d:0c:96:87:99:04:25:50:95:
                    08:e6:c4:eb:80:a0:56:a7:c5:6f:87:41:41:fa:5a:
                    03:73:fe:df:27:d4:d5:a6:c8:63:6d:bb:01:02:85:
                    85:5c:ad:3d:09:37:66:fa:19:19:b4:2b:40:7c:f5:
                    59:66:ce:85:2e:00:d5:98:56:52:7d:06:d9:00:7d:
                    ef:43:3b:36:80:ed:df:0c:42:ef:78:59:e2:9b:23:
                    2c:cd:4d:6b:1f:f4:8f:4f:8b:bb:ad:e1:64:5d:7a:
                    4f:d1:c7:c0:33:a8:8c:d7:01:45:7e:27:3f:eb:c9:
                    2f:47:61:f4:a3:f1:4e:5f:ac:4e:49:fe:f0:08:bc:
                    cb:45:dc:73:29:86:e4:e6:cc:1c:95:e7:8a:b8:8d:
                    65:53:8e:c3:ae:29:08:3e:f6:d9:c8:2a:67:6c:89:
                    62:2a:f2:3d:6d:1e:10:83:15:08:0b:89:15:3b:37:
                    71:50:ec:15:25:bb:05:ed:da:1b:8b:ab:6b:60:ef:
                    14:84:51:93:77:a1:a6:03:86:50:c9:92:75:ac:0f:
                    37:91:55:e0:f3:07:c5:94:e5:c5:15:73:0a:80:cc:
                    e1:51:95:ca:38:b4:95:61:af:56:e9:c9:a0:8e:8b:
                    df:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DF:CB:1D:D6:2D:AC:02:13:53:4C:35:68:B5:2D:3B:13:5A:9F:29
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/50f99ee83cb36585a0bea314aae480bc23670ae7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6030::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:c9:57:32:0f:1a:fa:ea:dc:7f:6b:be:8f:ec:e7:1d:73:69:
         6e:1c:20:a7:8c:6d:4c:5d:3b:da:a5:1b:8c:90:fb:4d:bc:f9:
         e9:27:07:cc:6d:05:d3:cb:60:39:5d:97:97:4e:f5:7b:72:61:
         a1:72:4c:53:56:6c:c0:bb:5b:d8:ce:f8:0b:07:3f:43:a7:6e:
         65:6e:6d:be:23:c6:3b:b7:a7:82:e6:18:a2:2c:a8:80:1c:64:
         3c:37:13:6a:83:9c:73:5a:6d:be:f1:62:15:09:db:22:11:bd:
         98:61:72:d7:7e:1e:34:ee:17:a4:8e:24:54:7c:69:39:84:20:
         67:3b:b6:cd:a8:0c:18:93:81:a9:4e:0d:4a:9c:70:6a:78:8c:
         fc:49:0a:33:f5:19:2a:3f:84:4f:18:80:d6:be:9f:2d:ab:b3:
         75:0e:68:e8:b1:27:7a:c8:eb:a8:6d:49:e4:22:51:88:c4:38:
         f9:f7:c5:5f:01:d2:5b:cf:88:16:e1:0d:98:41:01:ff:24:90:
         42:41:04:14:24:e0:2e:e1:3e:d4:a5:e3:7e:27:aa:4e:06:b8:
         d3:76:25:d1:99:8b:77:97:75:4c:dc:74:0f:96:59:43:cd:39:
         03:cd:f5:46:49:64:fc:03:53:1e:5c:9f:6d:14:ca:74:55:0d:
         98:ad:e9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----