Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/6e235acf79a462d4da3caa72ebf5e77d810b61a7.roa
File:                     6e235acf79a462d4da3caa72ebf5e77d810b61a7.roa (raw, json)
Hash identifier:          cjZTNcVCqaDhgsRGwlfGDIPc2CQkHh9x6u0ehVZmIVw=
Subject key identifier:   B4:4A:85:31:0A:3D:45:B5:79:04:75:86:3C:9F:FC:63:59:6A:66:A0
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F6A95
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/6e235acf79a462d4da3caa72ebf5e77d810b61a7.roa
Signing time:             Wed 24 Mar 2021 14:43:52 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:6008::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1010325 (0xf6a95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=6e235acf79a462d4da3caa72ebf5e77d810b61a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:50:8e:26:37:24:0c:42:5f:4a:92:5b:c3:e1:
                    97:75:f4:92:9b:53:43:22:b4:3c:a0:20:b1:8e:02:
                    d6:32:ab:71:5f:a5:30:65:92:f7:70:41:46:3b:2d:
                    b8:26:67:c3:78:5c:ef:99:47:b9:6b:f0:6d:b5:21:
                    fc:98:d9:97:1d:30:66:f0:d5:6d:74:71:c6:58:b6:
                    64:ad:e4:e0:cf:8f:f3:29:4d:8d:57:eb:d4:c2:6f:
                    ff:3f:3a:98:4f:27:65:b4:9f:39:35:ba:ea:86:bd:
                    61:c1:8e:55:d1:4d:69:e8:42:f8:ed:f4:09:ec:b6:
                    23:5b:0f:86:7d:c4:20:b2:ec:bb:d0:1a:29:29:cf:
                    89:2a:bd:1c:fc:10:65:0d:6e:f5:fe:72:cc:54:8b:
                    f9:a1:37:1a:7c:8e:be:8a:2a:ca:fb:7e:a7:8b:be:
                    70:52:cf:7a:62:25:c4:65:af:bc:98:71:42:7b:b8:
                    b5:a5:79:d7:a3:34:52:b7:8e:bc:67:ac:db:50:44:
                    e8:20:42:75:a4:9b:11:a7:c6:90:13:83:4b:dd:85:
                    1e:4d:84:60:4c:0a:ad:81:bc:d5:69:4d:78:e0:63:
                    95:52:bf:cd:ef:04:1c:7d:bc:90:4a:6d:42:8e:6b:
                    4b:11:c3:bd:47:05:52:97:02:42:4b:b0:34:9d:53:
                    71:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4A:85:31:0A:3D:45:B5:79:04:75:86:3C:9F:FC:63:59:6A:66:A0
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/6e235acf79a462d4da3caa72ebf5e77d810b61a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6008::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:02:21:c0:0c:4a:23:92:1b:11:4c:74:6f:46:b3:a3:9f:04:
         81:f6:4b:75:81:3b:25:f0:37:03:1b:66:31:8a:e5:06:fb:c1:
         09:6c:1a:4a:9f:4e:4c:88:13:2e:68:b9:b1:bf:81:26:83:3d:
         dc:39:31:9f:09:34:25:59:9b:71:19:5b:30:42:29:84:7b:b8:
         1a:5b:b8:54:67:a1:49:a4:88:cf:3f:c2:5d:c0:be:1a:93:ac:
         70:77:fb:4f:9d:34:c4:ce:b3:70:3b:72:a4:2e:66:85:ae:cf:
         42:a0:1f:6d:55:aa:05:d3:b3:97:74:c6:8c:e7:d4:8f:06:e0:
         91:16:79:07:7c:20:bc:d8:0d:1d:2a:d0:22:d2:47:66:30:7f:
         5d:ca:23:47:0c:54:f5:2d:e0:be:ce:3f:2a:f2:14:ad:e6:8b:
         63:fa:75:dc:60:a3:2e:c7:64:61:17:50:b1:12:e4:ea:b1:47:
         a7:54:59:2b:65:5a:b3:43:00:41:bc:86:17:27:94:71:7d:b5:
         94:b5:e0:89:a5:7e:52:9d:bf:91:0c:92:89:e4:c1:fd:4c:aa:
         54:fe:13:65:e2:0e:d5:6d:ce:39:47:69:a1:50:03:1e:ff:8c:
         43:c8:2e:27:31:b4:5f:b3:88:39:01:11:62:c7:ab:3b:5f:c5:
         d8:32:95:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----