Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/57311167c30290e6368e0fe9f5a01d1d92bfafcf.roa
File:                     57311167c30290e6368e0fe9f5a01d1d92bfafcf.roa (raw, json)
Hash identifier:          1m4rVRSjIPLG8fdNFrmxZu5g/CQrVvcNHfWzZ6LByXA=
Subject key identifier:   90:5C:52:58:B8:9A:D0:DD:04:68:44:9C:09:F8:83:CF:84:BE:01:35
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15DDFA
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/57311167c30290e6368e0fe9f5a01d1d92bfafcf.roa
Signing time:             Thu 26 Aug 2021 22:25:51 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6060::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1433082 (0x15ddfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=57311167c30290e6368e0fe9f5a01d1d92bfafcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:51:35:02:ca:9d:89:9b:b4:83:c5:d2:90:
                    1b:03:58:7a:fd:a6:a8:a4:e4:ca:76:0e:3a:e6:f1:
                    2f:12:a9:99:fe:8f:2a:eb:05:3f:9c:c9:f1:d8:97:
                    42:54:9f:9b:a0:0f:7f:82:53:ef:c1:b4:fb:1f:32:
                    3a:dd:e6:73:d9:c4:c7:07:48:63:5c:1b:42:f1:e9:
                    42:82:38:16:55:d0:0b:a7:7c:9d:fc:84:cc:e0:8b:
                    87:aa:0e:6e:6e:93:86:e9:55:58:f4:f7:60:2c:0b:
                    12:79:d4:a3:30:c7:ff:a0:0f:8b:31:d2:b1:47:e6:
                    8c:fd:f9:64:2b:a8:0d:be:56:d7:d7:96:6b:2e:22:
                    2b:88:27:6d:c2:d6:d1:c0:50:b7:e0:c6:f5:fb:ed:
                    2f:96:cd:7d:21:da:ee:cd:32:02:9c:d8:15:6b:9b:
                    dd:a5:58:4d:a0:c2:0e:10:48:89:d5:af:56:79:cb:
                    9e:ad:fb:81:12:c3:2c:e8:51:6e:c1:75:8a:85:b8:
                    e6:cf:ee:b2:ef:76:4b:94:46:0e:7e:ef:f2:08:78:
                    84:91:ec:a6:85:61:be:73:ac:ef:56:0b:af:63:54:
                    85:17:a4:a2:8e:71:74:b4:fb:01:f9:11:a9:7f:97:
                    ba:94:19:da:2e:a6:68:59:60:70:6d:11:69:39:29:
                    72:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5C:52:58:B8:9A:D0:DD:04:68:44:9C:09:F8:83:CF:84:BE:01:35
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/57311167c30290e6368e0fe9f5a01d1d92bfafcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6060::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:03:35:bd:f5:de:1c:bd:d9:08:2a:b4:d8:d2:a5:95:19:c4:
         e0:4e:90:51:7a:cd:3e:a5:bc:a0:7e:f7:8a:d3:f9:43:a1:53:
         fd:23:56:ca:a2:3d:9c:ef:80:08:1b:03:4e:69:60:f1:38:37:
         5c:07:d7:1b:d1:15:b9:7f:e7:2c:c4:e2:af:d3:55:7a:37:a5:
         ec:83:a1:f8:7a:c4:2c:84:48:b2:31:d6:21:d3:6e:79:0c:ef:
         73:cb:f9:1e:5a:2d:b5:01:4f:ec:f6:f6:45:b4:15:de:29:c8:
         9c:bd:86:a7:7e:35:f4:11:86:ed:6b:6b:7a:65:25:e9:02:34:
         a2:15:c0:a1:62:35:ba:08:0b:25:fe:dd:a2:05:3d:00:5b:61:
         e3:70:9f:6e:9a:43:ae:79:c2:0b:93:80:3f:fb:65:4b:a7:7a:
         8a:d6:f3:28:77:d5:52:64:4c:03:68:b6:7c:37:d4:4c:0f:dc:
         db:79:01:93:fa:f8:d5:9d:c9:ec:2f:ee:af:b4:bb:16:a7:ab:
         34:01:cd:c3:56:41:1f:8f:88:c2:17:5f:f3:1f:f1:3d:69:eb:
         bd:67:09:8b:da:07:9d:90:7e:49:7a:65:67:1d:3c:81:9b:07:
         c2:be:72:7d:5b:1b:6b:ad:a9:2a:de:b9:6d:9f:2b:66:ec:62:
         da:df:98:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----