Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/615fdf546e7b6af799c5eaa51946d0ae344c8339.roa
File:                     615fdf546e7b6af799c5eaa51946d0ae344c8339.roa (raw, json)
Hash identifier:          WUKsQquUy3RdBAW4Wa9K5Tw740fehMOAiYWB0F0vkng=
Subject key identifier:   24:C2:1B:AA:6E:1E:2A:0A:A0:7F:14:FC:39:E3:6E:A6:12:A0:78:26
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15C6F2
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/615fdf546e7b6af799c5eaa51946d0ae344c8339.roa
Signing time:             Tue 24 Aug 2021 22:46:08 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:605c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1427186 (0x15c6f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=615fdf546e7b6af799c5eaa51946d0ae344c8339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cc:24:5d:47:1c:20:e2:1c:2d:e7:32:5d:c5:
                    a0:d8:2c:e3:44:17:7b:77:8e:cd:9b:5b:16:35:2e:
                    3b:aa:6b:5d:50:80:a5:b6:7f:18:c3:f5:d2:52:be:
                    03:50:ef:11:57:a2:16:64:cb:30:b1:c2:0f:ca:08:
                    67:a4:0e:f9:27:8b:cd:af:a9:ce:ac:6e:94:7e:51:
                    ca:0a:5f:84:2f:10:40:bd:d8:46:53:c4:f7:64:59:
                    c5:36:9b:91:25:26:ad:b7:20:71:27:ce:ea:bc:ac:
                    a6:a9:cb:f7:9e:3a:d4:73:d2:e1:aa:b0:21:e1:89:
                    8c:6a:11:dc:60:85:7a:92:0f:70:ec:86:40:c5:03:
                    7c:de:ee:b6:dd:0a:bf:e1:40:09:67:90:57:71:b0:
                    f8:90:31:08:d8:28:95:f4:58:ad:b7:b0:10:22:54:
                    f7:5e:05:2e:59:98:bf:c9:7c:72:27:08:3e:3f:55:
                    24:6b:5d:12:da:35:05:9e:21:68:c5:9d:98:1c:7d:
                    dd:29:c9:ea:98:a5:21:2e:dd:8d:76:5f:4d:8f:e6:
                    06:12:3b:79:e4:d9:e1:29:2c:62:88:18:39:d2:f8:
                    a8:b2:91:ab:9c:df:dd:97:80:0d:31:31:c5:74:c9:
                    63:fe:47:10:66:35:9a:ca:9e:01:1f:ea:3c:7e:7a:
                    80:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C2:1B:AA:6E:1E:2A:0A:A0:7F:14:FC:39:E3:6E:A6:12:A0:78:26
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/615fdf546e7b6af799c5eaa51946d0ae344c8339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:605c::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:29:4a:95:a3:17:17:72:0b:87:d8:c2:e1:47:d2:ce:37:8d:
         94:bd:0c:d4:62:13:53:ff:67:d6:1b:7b:2d:b5:7c:d6:5a:37:
         cc:ed:8c:9e:c1:21:f1:20:2d:52:32:2e:2d:fb:4b:e0:de:f8:
         16:f2:52:57:e8:b3:7d:44:90:4a:b5:30:e7:3c:77:87:de:27:
         8d:cf:b2:32:6d:08:a2:52:3d:d9:7b:f6:01:91:27:52:cb:10:
         83:b6:bc:bf:b8:70:75:ec:4c:39:a7:94:34:d5:13:fa:30:12:
         fb:c8:e2:18:7e:aa:5d:55:8f:b0:5d:78:d8:2e:1e:cb:a5:7c:
         f9:ec:6c:d2:99:ec:da:98:13:1e:df:4a:7d:34:4c:ef:0a:63:
         eb:ee:3b:4d:77:a7:9c:23:c1:46:15:35:43:e7:94:49:5f:bf:
         f5:a8:94:67:35:e0:96:f9:95:3a:9b:40:b0:6c:ff:ac:90:f6:
         7b:02:d7:10:03:7f:be:a7:09:1a:f5:d2:12:1c:13:8b:93:3c:
         34:8a:71:62:7a:7f:a4:0c:f0:5f:47:ee:f4:52:eb:3d:5c:7a:
         60:ce:30:58:a6:6e:b0:d3:f7:c8:95:41:b7:b5:95:05:82:4d:
         f4:2b:e3:f9:3f:ea:72:14:63:55:73:95:58:dc:93:82:a2:3e:
         84:8b:d8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----