Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/57a625819379c14d8b866657876009487802174c.roa
File:                     57a625819379c14d8b866657876009487802174c.roa (raw, json)
Hash identifier:          qPhnZY4/UG+poe23ojHeSXjTMS83p1lxKQM9J+gElA0=
Subject key identifier:   35:1C:50:63:12:F4:29:68:77:BC:A1:1F:8F:B9:82:58:11:67:46:0D
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       14DC9A
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/57a625819379c14d8b866657876009487802174c.roa
Signing time:             Wed 18 Aug 2021 16:48:39 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:602c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1367194 (0x14dc9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=57a625819379c14d8b866657876009487802174c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3e:cc:31:cc:70:c7:66:df:00:61:aa:70:ef:
                    74:09:b0:bd:43:6d:de:9d:39:f4:0a:02:74:fc:e0:
                    ab:0a:37:90:1c:9b:af:f3:68:28:50:65:44:7b:f7:
                    7f:0f:c9:01:1c:ab:f4:c6:38:81:92:67:5e:33:59:
                    da:6a:0b:a2:79:4d:bc:5d:d2:ba:b3:7e:ed:e9:12:
                    f2:a4:78:44:79:85:13:44:b7:21:74:57:ac:75:62:
                    33:b0:31:6c:36:70:bf:13:1b:3c:9f:6a:70:b6:93:
                    e0:7e:36:6b:aa:86:02:5c:d6:41:2f:74:26:a4:b4:
                    ec:27:44:ad:37:de:af:57:99:48:df:64:a6:3b:45:
                    28:7f:31:d8:c2:5a:0c:91:09:71:36:95:9c:89:ba:
                    7f:40:05:ba:8d:e7:c5:92:96:6d:21:16:0d:80:21:
                    4b:53:05:d9:d9:4f:fc:d9:c1:f7:bf:70:2e:50:34:
                    5e:39:bd:43:b9:0f:91:a6:9b:e2:db:04:42:cc:07:
                    9f:cd:6b:c5:5c:ef:21:86:a1:04:f4:1b:06:f2:98:
                    06:64:87:d9:cf:f5:6d:42:0b:10:a6:50:38:f6:f3:
                    f3:66:a9:aa:7a:0f:00:ed:b1:32:11:cc:0c:bc:18:
                    70:11:e7:9e:bb:89:e2:7b:ae:f4:ff:b6:e8:f7:8b:
                    08:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1C:50:63:12:F4:29:68:77:BC:A1:1F:8F:B9:82:58:11:67:46:0D
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/57a625819379c14d8b866657876009487802174c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:602c::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:40:d0:3e:4f:26:8a:37:70:0d:d1:7b:1c:be:e7:da:27:78:
         91:b3:77:3b:e5:5c:d6:39:3a:c6:e8:f6:c5:cc:01:34:12:4d:
         3a:ff:56:b6:dc:5c:5c:f2:60:f7:e3:78:b5:8d:d8:9e:65:31:
         bf:86:c5:d9:f8:b8:f4:61:bb:95:ba:18:80:6b:31:51:3c:72:
         51:3e:10:c2:41:0b:6c:78:e3:9a:b3:ae:96:b2:18:93:35:ef:
         61:5e:96:5d:bc:87:b7:3b:bc:a1:6b:e5:e1:80:b2:ec:0b:31:
         fb:5e:6c:28:47:0f:75:c5:7b:fb:b7:31:e3:8e:0e:b8:b2:bb:
         6e:db:86:d8:3e:6a:76:39:e9:02:48:2e:57:9e:b6:57:b9:bc:
         c6:f5:69:d9:bc:18:0e:f7:75:f4:7d:b9:55:ea:4b:2b:0f:61:
         c5:8d:91:a4:36:95:8f:7c:e0:43:df:11:7a:8f:7d:89:2e:84:
         68:d1:99:23:36:37:98:48:0b:1c:14:19:30:58:9b:bb:56:d2:
         01:a0:e1:32:ed:67:d4:e5:e4:8a:60:d2:6c:d0:ec:21:de:e5:
         59:ed:f6:41:5d:24:73:13:72:ad:1a:94:84:9f:b6:ab:88:a9:
         99:4a:22:fe:56:c8:ee:90:63:f8:ef:c5:e7:c9:3a:5c:0f:5d:
         b7:12:73:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----