Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/6593fc141b3ad3e2a8b5a245812b3cc64313bb32.roa
File:                     6593fc141b3ad3e2a8b5a245812b3cc64313bb32.roa (raw, json)
Hash identifier:          BqPIjCXXv/tbHB3V/o/DEQniHwJ8sz0Jr9b77D4wi7E=
Subject key identifier:   2A:D7:70:29:D9:DF:AE:3C:9B:65:DB:24:FB:26:D4:64:4C:E4:15:B1
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       14CBE1
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/6593fc141b3ad3e2a8b5a245812b3cc64313bb32.roa
Signing time:             Wed 18 Aug 2021 16:29:36 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6029::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1362913 (0x14cbe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=6593fc141b3ad3e2a8b5a245812b3cc64313bb32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f6:15:b2:1d:33:2b:e5:c3:f3:94:e5:12:e4:
                    e7:63:be:84:17:53:70:a8:13:09:d0:be:9b:c0:8f:
                    08:51:13:f6:d2:04:df:27:7d:28:57:f1:7e:23:3f:
                    d8:29:2b:a0:08:c2:7e:f6:34:43:48:6a:d8:f3:d4:
                    90:c0:80:bb:5a:d2:45:e6:e1:36:14:d3:ef:99:79:
                    e2:81:74:c9:34:ce:42:41:8b:5f:74:4b:37:44:84:
                    5e:71:b2:20:6c:26:8b:93:8e:65:9f:bf:be:ba:21:
                    1b:ea:45:e6:40:1f:20:40:53:81:94:b3:82:77:a1:
                    01:2c:c6:7c:64:73:62:a2:7a:df:95:54:37:29:59:
                    c4:b3:2c:fe:34:a7:e7:ed:12:bb:eb:67:84:29:3b:
                    51:6e:0a:a1:c8:ee:29:7b:5a:b5:09:04:e4:39:06:
                    11:7d:fb:12:1e:17:a4:82:8c:9e:25:59:d7:57:d7:
                    96:78:e4:7d:9c:5f:12:02:a4:d7:bf:9e:a7:0c:3b:
                    cb:ab:86:ec:63:e6:4c:ba:b3:fd:d7:21:63:40:79:
                    a9:21:8f:bf:f3:1a:81:61:5a:8e:1f:93:e1:bf:11:
                    ce:2b:98:69:6d:39:28:29:c1:c9:b5:4d:21:4b:d1:
                    19:b6:d1:c5:66:69:04:1a:92:75:aa:9a:c6:4b:30:
                    e3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D7:70:29:D9:DF:AE:3C:9B:65:DB:24:FB:26:D4:64:4C:E4:15:B1
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/6593fc141b3ad3e2a8b5a245812b3cc64313bb32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6029::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:60:61:04:bf:c5:56:76:b0:4e:9b:4c:58:c1:df:01:c8:5a:
         7d:02:ff:86:e7:06:d6:c6:66:a4:53:ca:8a:7a:85:e8:b8:27:
         c5:5d:05:c5:89:d8:1b:f3:3d:23:07:c5:27:75:d1:3b:e5:e2:
         fc:3e:ea:0c:1e:ab:cc:3f:ad:40:5e:9a:3e:56:f9:12:a0:1b:
         a4:d5:f0:8d:c4:f2:b8:00:75:d2:8f:6a:ed:50:ae:b8:03:31:
         80:7a:14:d8:58:eb:1c:cd:88:14:40:63:05:d2:75:22:10:b4:
         d0:5b:ea:a8:8d:43:bb:d3:8b:ab:4e:4a:42:ba:5a:9e:0f:55:
         13:cd:21:4b:7e:03:fe:26:4b:33:fa:5e:5e:9f:1d:f7:00:1d:
         16:57:63:e2:2e:d5:ae:ad:1a:9b:e0:36:89:af:b2:16:41:60:
         f8:a9:ea:39:39:f2:ae:fc:8e:ea:34:45:1e:65:8c:8f:34:74:
         8e:eb:5f:fe:ab:a4:b0:0b:00:5c:35:ba:5a:7c:86:b0:47:9a:
         eb:ec:52:33:c1:ca:7f:19:7f:62:84:cd:3c:07:ee:91:fa:0f:
         8c:65:91:eb:80:96:10:78:cf:0e:22:78:83:6e:6c:4a:4e:89:
         08:75:57:4c:5e:56:eb:f7:0b:1a:e9:07:6e:25:d9:75:5f:35:
         3c:e0:4a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----