Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/644bb30cf4629684e4be4fd119bf4137bdfcefa0.roa
File:                     644bb30cf4629684e4be4fd119bf4137bdfcefa0.roa (raw, json)
Hash identifier:          t9nv2ITHNWQLvaofJvTfj+HBPYPVVN++h1Fo3KXBAdU=
Subject key identifier:   B4:EE:60:55:1C:FB:66:AF:3A:49:3F:0E:58:07:F7:5C:B6:1D:97:B4
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       157C56
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/644bb30cf4629684e4be4fd119bf4137bdfcefa0.roa
Signing time:             Tue 24 Aug 2021 18:14:17 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:604b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1408086 (0x157c56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=644bb30cf4629684e4be4fd119bf4137bdfcefa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:40:de:5f:71:48:87:27:a5:66:6b:eb:3b:
                    91:a0:c0:94:4a:10:80:43:c4:b8:a6:87:fc:13:e5:
                    9d:52:e9:03:73:58:92:ee:3f:c2:b0:9e:17:62:c8:
                    50:d8:c8:fc:11:13:c1:91:bf:ff:f5:1b:fc:77:a2:
                    0b:8b:3d:cc:ea:fa:24:99:41:64:26:e0:79:b6:c0:
                    06:33:5e:49:c5:20:4f:fd:75:f9:cf:04:f9:a5:a2:
                    86:f4:65:13:76:bc:32:24:ac:83:53:0a:3f:31:f5:
                    c1:1a:94:9c:ef:b0:78:a8:2f:8a:60:17:0d:9f:65:
                    60:fa:bc:4d:83:ee:27:74:2a:b2:bf:a6:3a:bf:4b:
                    0a:97:90:79:73:14:16:32:4f:b2:45:24:85:e9:cd:
                    f4:5a:17:87:47:39:39:0a:cd:65:7c:96:b0:3f:93:
                    0e:8e:fd:a3:6c:27:39:a0:7a:c4:6a:e4:70:fd:d6:
                    d6:90:2b:05:fc:44:73:fb:a0:33:52:b2:0a:8e:1c:
                    ff:ee:49:8c:9b:64:a4:07:e0:9a:b5:6e:15:8c:39:
                    a3:45:07:fa:55:80:4b:67:7e:c9:45:8c:95:32:d6:
                    71:06:80:a1:df:b6:38:be:d9:d6:df:22:32:5d:78:
                    08:2c:26:c4:26:1a:c4:3d:44:07:95:41:cc:4a:ab:
                    b7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EE:60:55:1C:FB:66:AF:3A:49:3F:0E:58:07:F7:5C:B6:1D:97:B4
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/644bb30cf4629684e4be4fd119bf4137bdfcefa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:604b::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:a3:dc:01:09:a0:33:c2:9f:85:06:13:46:ac:45:80:bb:6b:
         b1:15:36:21:98:6d:99:1c:00:67:0a:86:27:95:b9:a4:c2:41:
         0d:8e:67:1b:32:aa:ce:fc:d2:5c:b2:5b:92:80:91:8f:14:68:
         6f:1f:09:02:b3:26:8e:54:ac:22:7c:f6:11:87:73:5f:51:c9:
         2c:02:17:c2:29:aa:c1:e6:87:af:74:d8:a1:eb:97:5e:f4:99:
         77:1e:e4:cb:90:8d:36:16:a8:da:37:14:fe:c8:91:3d:6c:c7:
         d0:1d:91:b6:e7:10:89:09:4c:6b:60:6f:00:50:74:b9:a8:ea:
         e3:a5:b3:40:a7:f4:96:c3:12:d7:05:14:d4:44:7c:1a:d8:70:
         06:c0:8a:ad:5a:08:86:95:3b:a1:3e:e8:2a:f7:5c:a5:29:70:
         41:18:eb:4f:04:23:60:e2:59:4a:4e:1d:43:6a:39:f3:2b:ec:
         4b:c2:3b:37:6e:24:4e:b7:f4:91:0b:26:f1:27:fe:a0:33:d1:
         0e:b5:40:0b:44:c9:9c:e2:e6:0c:e0:6d:97:e4:ac:8a:0c:f5:
         f5:5d:5c:72:be:c5:d9:d3:be:de:79:cd:22:5b:17:fd:24:d5:
         20:3c:0b:f6:a2:b5:c2:a8:cf:a5:5b:78:cf:32:a1:28:1f:1b:
         0f:57:03:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----