Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/65c90241179c9d0d5d33f536ed4863bdcef89e3c.roa
File:                     65c90241179c9d0d5d33f536ed4863bdcef89e3c.roa (raw, json)
Hash identifier:          agZjzlPfRau/YdpbF7Rt7RPn3J2lPuY1nHkZwQaaLTQ=
Subject key identifier:   4F:2E:6E:1C:BF:D5:09:CA:A1:F7:F2:BD:39:55:67:F7:F3:27:B4:3A
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       150E9A
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/65c90241179c9d0d5d33f536ed4863bdcef89e3c.roa
Signing time:             Wed 18 Aug 2021 17:41:48 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6037::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1379994 (0x150e9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=65c90241179c9d0d5d33f536ed4863bdcef89e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:90:13:c4:fb:3e:6e:51:1a:65:2b:bd:98:f9:
                    47:ff:d5:cf:43:37:68:8a:0e:f7:09:05:67:31:26:
                    0c:dd:c2:ca:4c:20:4e:b4:6e:2b:62:ed:62:a5:3b:
                    83:d7:6e:0f:44:a4:46:75:c1:a4:13:e7:7d:6f:1d:
                    e1:6c:5b:24:ab:fe:a3:09:bb:a5:32:41:54:76:92:
                    88:ed:48:67:bf:35:ed:ca:00:25:0d:74:ce:c1:41:
                    98:23:16:73:b4:48:e7:c9:79:66:74:57:a1:8d:67:
                    db:da:8e:e9:bc:02:1f:eb:3b:fe:5d:0f:f6:e9:38:
                    0c:a5:42:1e:76:3c:aa:e5:4b:6f:7e:96:74:99:4f:
                    02:79:e4:27:1b:9f:55:96:56:bf:b6:46:65:3f:5b:
                    dc:c6:c3:84:7e:49:c8:4f:a2:75:02:1b:80:22:7e:
                    e8:82:66:ce:dc:9b:e6:01:78:8f:78:dd:0d:dd:ad:
                    5a:69:07:22:4a:77:0f:d3:06:90:28:54:d4:d2:a7:
                    62:99:92:40:45:49:b2:19:fd:0e:95:7c:5a:0a:8c:
                    ca:fd:ad:f7:5a:c6:c7:30:c3:b8:9a:ad:24:69:d0:
                    1e:44:18:03:fb:1d:9e:6b:0a:02:bd:d9:9d:50:c7:
                    45:9c:1d:6e:61:f3:60:3a:5d:78:d1:5b:80:56:80:
                    bd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2E:6E:1C:BF:D5:09:CA:A1:F7:F2:BD:39:55:67:F7:F3:27:B4:3A
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/65c90241179c9d0d5d33f536ed4863bdcef89e3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6037::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:a8:f6:f1:55:3c:3d:81:53:c1:ac:8e:f0:af:82:4b:7e:43:
         81:be:0b:c4:b7:3a:66:05:f5:f9:05:73:71:56:ec:62:33:eb:
         69:fc:3b:70:34:47:c5:cf:e1:78:8b:82:65:6c:2f:43:43:d8:
         b7:26:bd:0c:ce:b4:1c:57:5d:7e:be:80:3b:d2:b4:04:ad:cd:
         59:68:8f:aa:1b:1f:06:a8:12:4f:e5:a1:a4:8b:f8:fb:1b:05:
         78:c4:0c:74:e3:d3:60:4f:cf:ad:fb:0a:08:8c:01:97:d5:b6:
         90:62:04:84:7a:47:c9:a4:cc:46:d8:ea:fb:a1:59:e1:60:53:
         2b:14:22:28:ff:47:ad:84:0d:09:11:12:58:7f:fb:eb:cd:bc:
         c2:96:b4:12:99:88:a8:15:9a:4a:4f:3f:a5:4d:b3:4f:4c:73:
         29:8f:a0:15:44:93:8b:ae:8b:99:b7:8e:4e:4a:d5:cd:33:25:
         de:18:5f:9c:b1:03:39:e2:7c:13:2c:33:56:61:ab:81:63:e3:
         04:a4:6a:c2:96:fe:cb:fd:6d:a9:56:80:98:05:0c:5f:dc:f6:
         f2:a4:22:ac:fd:ac:a0:0f:cb:38:1d:6c:0b:a4:6c:a8:a3:70:
         ff:92:1a:12:87:1b:c2:20:8d:69:2d:ed:8a:31:9a:f1:7b:44:
         ba:c7:0b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----