Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/542360adb07760706dee2a95c57017bf004a749d.roa
File:                     542360adb07760706dee2a95c57017bf004a749d.roa (raw, json)
Hash identifier:          takvpZCBd9YEy1uNY85plDt7CeAws30JhrVvzpj1RsU=
Subject key identifier:   0A:2B:3E:E9:82:E4:FD:52:48:4F:4F:6A:C4:94:2F:98:26:81:87:E3
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F6FA2
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/542360adb07760706dee2a95c57017bf004a749d.roa
Signing time:             Wed 24 Mar 2021 14:43:52 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:600c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1011618 (0xf6fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=542360adb07760706dee2a95c57017bf004a749d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:48:f1:53:5b:1b:c3:ef:e6:8e:a2:83:62:53:
                    37:77:4c:9b:7a:6c:c8:71:e8:6d:5f:e6:ff:15:8d:
                    82:ed:c3:3a:08:3c:da:f2:e7:e9:9f:06:79:d3:1c:
                    ac:81:83:f5:11:4a:54:f7:13:37:82:2a:a0:e3:ff:
                    35:1c:35:13:89:a1:32:4b:c8:b5:5c:66:3b:90:38:
                    4f:be:ec:99:00:46:d8:ae:3b:b6:83:05:12:86:7b:
                    1f:a2:4e:02:40:38:7c:01:ef:d5:41:1a:d4:8b:c8:
                    99:16:9a:e2:f1:1d:87:c4:c7:80:ce:ee:6b:90:8e:
                    ac:4f:cd:fb:d2:5c:89:22:c2:e9:46:38:b1:53:5d:
                    e0:da:69:87:9a:d1:8d:40:91:88:6a:0c:a1:48:5b:
                    1a:7b:56:9a:47:3c:6e:ff:10:0e:3f:c7:d8:3f:a5:
                    fb:d3:29:fa:11:4e:df:3a:e9:07:d7:8b:76:05:48:
                    4c:b8:49:03:69:b0:49:71:03:e0:86:2a:8a:a3:30:
                    e0:78:06:6a:57:20:9f:6f:b1:ea:3c:ab:2b:f3:30:
                    65:33:19:ba:aa:95:6f:4b:32:fc:75:a8:1f:ba:56:
                    04:35:ef:b5:35:89:5c:bd:24:03:d3:52:de:9e:ef:
                    f7:9d:ef:e1:1e:93:da:1e:eb:f7:51:82:da:42:23:
                    14:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2B:3E:E9:82:E4:FD:52:48:4F:4F:6A:C4:94:2F:98:26:81:87:E3
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/542360adb07760706dee2a95c57017bf004a749d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:600c::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:17:e2:3e:f9:66:1e:19:ca:49:c3:64:af:ad:97:aa:5c:6b:
         43:c5:0c:3e:2c:14:58:cf:f2:bc:9e:e7:b3:71:79:cc:8a:ca:
         12:61:df:ff:66:b4:7e:f2:0c:c7:1e:19:9e:ac:41:6d:69:63:
         61:36:df:bd:05:a5:14:f0:18:b8:61:26:9a:70:91:63:c9:54:
         08:98:76:c1:4b:5f:2d:7c:66:dc:62:a4:f2:1e:fc:77:53:c8:
         63:39:07:d1:82:59:69:ae:b3:cd:93:0b:ce:02:0c:8e:05:9d:
         87:00:71:6b:cc:dd:0d:7a:85:f8:5e:5e:26:49:98:7f:5f:33:
         cb:46:34:79:91:92:e3:2e:c9:64:d3:12:34:5c:91:74:ff:73:
         16:25:15:51:00:e6:b6:90:89:ff:57:bd:ad:35:20:70:29:c8:
         bf:38:ca:b5:ef:5f:44:f7:5e:3a:fd:ee:60:51:7c:68:c1:56:
         8a:54:41:b9:d6:97:3c:d2:73:56:7e:25:eb:32:25:c7:f4:17:
         a4:d3:8d:a9:a3:6e:49:3a:7e:24:37:75:48:90:dc:3f:92:91:
         42:2d:0c:0e:77:44:8e:75:53:71:8e:1f:5c:d8:22:46:27:89:
         c0:e5:2f:0d:05:33:1f:aa:02:8c:32:5d:0b:27:61:7d:64:88:
         f4:e5:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----