Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/537cc839d9a11d2a0a90691d8e4bbbb75a90f91f.roa
File:                     537cc839d9a11d2a0a90691d8e4bbbb75a90f91f.roa (raw, json)
Hash identifier:          kuY4YNThmPhUvTpDRg0OzOlD0xRGb8yAKtJHxfvm66g=
Subject key identifier:   47:00:B7:0A:49:AB:18:21:D6:D0:35:A9:50:FE:7D:47:B5:05:B4:96
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       152AC3
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/537cc839d9a11d2a0a90691d8e4bbbb75a90f91f.roa
Signing time:             Wed 18 Aug 2021 18:47:06 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:603e::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1387203 (0x152ac3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=537cc839d9a11d2a0a90691d8e4bbbb75a90f91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5e:6b:f8:81:ff:8e:8c:33:ca:2e:64:da:bc:
                    bd:82:11:d7:14:93:d7:59:6e:d4:f9:ec:35:e1:b4:
                    80:e8:92:7b:0e:4d:9b:6b:9b:38:50:bb:eb:d2:0f:
                    f9:b2:f1:7a:3f:3d:20:ad:f3:9a:77:00:5c:20:26:
                    11:93:63:c3:d0:67:4d:b6:1a:ab:9b:53:95:35:c4:
                    4f:59:f2:49:8e:b3:46:31:80:75:6d:47:d1:fe:2a:
                    13:81:c6:ec:f7:cc:fd:3e:8c:ab:90:d2:76:88:3b:
                    dd:16:50:aa:9e:9a:0d:5f:a2:78:91:67:6d:98:12:
                    b4:e5:2a:e0:98:d7:ca:61:fe:f6:66:c2:af:01:99:
                    55:c1:07:cb:4c:77:f7:ec:96:bc:2c:54:04:be:fb:
                    68:bc:80:46:12:cb:af:b6:2a:1e:67:d4:34:97:09:
                    36:e3:59:1e:b6:1c:1b:91:fc:71:b8:c5:00:ee:98:
                    05:24:f0:44:aa:cd:d7:00:84:c3:55:20:a7:99:71:
                    fe:4b:30:5a:4a:28:f6:85:88:43:65:55:3a:15:70:
                    a7:00:ef:e2:6b:1c:4c:c1:12:83:f2:f0:3d:38:90:
                    e0:1e:b0:9d:a1:36:a6:9d:60:77:ab:17:0e:70:9a:
                    46:2b:af:98:2f:ca:9c:1e:fd:c8:8f:e6:ae:4e:45:
                    15:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:00:B7:0A:49:AB:18:21:D6:D0:35:A9:50:FE:7D:47:B5:05:B4:96
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/537cc839d9a11d2a0a90691d8e4bbbb75a90f91f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:603e::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:8f:1f:4f:82:7b:0a:da:d9:84:68:f3:89:9a:dc:17:01:03:
         5a:f4:b5:43:e2:93:37:dc:40:dc:7f:ff:b6:f0:59:c3:10:c1:
         dc:78:f3:3b:37:53:20:de:1d:cb:3c:8f:37:ed:7f:ed:bf:bc:
         73:9a:b2:45:86:e8:c5:81:24:ed:6b:2b:c0:4b:bf:33:da:f9:
         b3:4e:f6:3a:1a:22:29:af:f8:f2:96:8e:c8:5e:6d:65:bc:ba:
         62:bb:88:01:91:de:e2:17:51:70:1b:ea:f3:4a:97:1d:86:e5:
         5d:fc:94:ec:6d:99:16:97:f4:5c:74:40:e5:e5:5a:03:9a:d1:
         2e:6c:52:97:b2:6c:b2:ea:a8:75:dd:ec:91:36:37:ec:8b:0e:
         32:01:d6:12:dd:6a:89:c6:e7:dc:82:42:df:f0:fb:9d:7b:31:
         70:f9:99:e6:be:07:0f:3c:eb:fe:e9:10:61:31:e7:59:3d:7f:
         19:0a:8a:d9:31:4f:9a:42:6b:61:4e:ac:06:53:32:9b:fc:85:
         54:d1:c2:d6:70:7b:84:6a:09:ec:39:df:ca:20:58:d3:31:d7:
         7c:f5:00:6a:70:52:bf:9e:10:28:42:bd:33:b0:d6:e8:74:d7:
         d4:a8:1c:0f:d5:bb:13:49:39:87:5f:29:26:29:31:11:a7:2a:
         df:06:7e:73
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDFSrDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwODE4
MDMwMDAwWhcNMjMwODE4MDMwMDAwWjAzMTEwLwYDVQQDEyg1MzdjYzgzOWQ5YTEx
ZDJhMGE5MDY5MWQ4ZTRiYmJiNzVhOTBmOTFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlV5r+IH/jowzyi5k2ry9ghHXFJPXWW7U+ew14bSA6JJ7Dk2b
a5s4ULvr0g/5svF6Pz0grfOadwBcICYRk2PD0GdNthqrm1OVNcRPWfJJjrNGMYB1
bUfR/ioTgcbs98z9PoyrkNJ2iDvdFlCqnpoNX6J4kWdtmBK05SrgmNfKYf72ZsKv
AZlVwQfLTHf37Ja8LFQEvvtovIBGEsuvtioeZ9Q0lwk241kethwbkfxxuMUA7pgF
JPBEqs3XAITDVSCnmXH+SzBaSij2hYhDZVU6FXCnAO/iaxxMwRKD8vA9OJDgHrCd
oTamnWB3qxcOcJpGK6+YL8qcHv3Ij+auTkUVFwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFEcAtwpJqxgh1tA1qVD+fUe1BbSWMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4LzUzN2NjODM5ZDlhMTFkMmEwYTkwNjkxZDhlNGJiYmI3NWE5MGY5MWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABEhhgPjANBgkqhkiG9w0BAQsFAAOCAQEAuo8fT4J7CtrZ
hGjziZrcFwEDWvS1Q+KTN9xA3H//tvBZwxDB3HjzOzdTIN4dyzyPN+1/7b+8c5qy
RYboxYEk7WsrwEu/M9r5s072OhoiKa/48paOyF5tZby6YruIAZHe4hdRcBvq80qX
HYblXfyU7G2ZFpf0XHRA5eVaA5rRLmxSl7Jssuqodd3skTY37IsOMgHWEt1qicbn
3IJC3/D7nXsxcPmZ5r4HDzzr/ukQYTHnWT1/GQqK2TFPmkJrYU6sBlMym/yFVNHC
1nB7hGoJ7DnfyiBY0zHXfPUAanBSv54QKEK9M7DW6HTX1KgcD9W7E0k5h18pJikx
Eacq3wZ+cw==
-----END CERTIFICATE-----