Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/71490ed5b9d08b6d97af889575049eb8911f92de.roa
File:                     71490ed5b9d08b6d97af889575049eb8911f92de.roa (raw, json)
Hash identifier:          nkdO6Xv1zwXtkBoIMHOGiOKy8sMl/V/hQNPiZhmhaO4=
Subject key identifier:   9F:8C:50:F5:4A:12:FD:6A:45:E9:85:A9:CE:30:8B:8B:F3:CF:D2:75
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1248BF
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/71490ed5b9d08b6d97af889575049eb8911f92de.roa
Signing time:             Wed 12 May 2021 03:36:17 +0000
ROA not before:           Wed 12 May 2021 03:00:00 +0000
ROA not after:            Fri 12 May 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:601e::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1198271 (0x1248bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: May 12 03:00:00 2021 GMT
            Not After : May 12 03:00:00 2023 GMT
        Subject: CN=71490ed5b9d08b6d97af889575049eb8911f92de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cc:06:50:86:4f:c0:3d:b4:7b:e0:ce:71:00:
                    09:98:1c:9e:c0:89:aa:84:93:b0:da:83:58:94:a4:
                    f8:da:d2:fc:9a:63:78:cf:97:17:6a:fe:24:4d:b8:
                    78:3a:ef:83:09:5a:a4:ec:b5:54:31:3f:ac:0f:84:
                    0a:a8:77:8b:30:39:3a:36:0d:c3:41:bc:94:0b:c6:
                    d7:57:bf:32:2f:aa:63:bb:14:56:ff:ae:96:5c:d9:
                    c6:10:c1:27:9d:ee:ac:ac:75:dd:07:1e:be:a7:63:
                    29:55:20:5a:32:ee:9b:9e:73:3f:7d:94:2b:b9:e8:
                    cc:3a:75:59:5a:02:c0:d9:0b:52:c8:61:41:41:00:
                    ff:21:dd:c8:82:02:25:ed:22:8c:5b:b7:99:0b:94:
                    b4:8e:2c:ab:1f:c2:f2:af:1c:24:6f:54:e2:6f:42:
                    4c:6f:6f:6d:a1:8a:e1:87:05:a1:c3:f9:d1:6c:59:
                    99:15:55:4c:d4:60:78:17:ea:73:31:b0:7a:bd:49:
                    0a:40:c2:ff:e4:11:03:11:37:91:8c:6c:9d:07:d8:
                    dd:e4:90:6f:3b:25:d6:de:ac:8b:89:e4:3f:a4:f0:
                    32:54:a3:36:1f:c5:84:0f:0a:c7:2b:e8:f4:4d:1d:
                    21:d1:bb:7f:93:fa:b8:3f:2a:84:f9:a7:fd:97:1f:
                    d1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8C:50:F5:4A:12:FD:6A:45:E9:85:A9:CE:30:8B:8B:F3:CF:D2:75
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/71490ed5b9d08b6d97af889575049eb8911f92de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:601e::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:81:cd:19:24:87:80:87:ba:e3:42:0d:7a:e2:ab:a1:b0:17:
         cb:eb:23:fb:ca:2b:e6:43:39:ec:37:4b:38:f8:db:2b:be:4a:
         fa:a5:e6:09:54:d3:b9:c7:95:20:56:74:16:11:df:f9:53:87:
         86:b3:cd:26:51:5b:92:2d:92:46:7f:e6:b1:f3:96:40:ab:c5:
         b0:33:5f:5b:cd:2d:5c:25:09:73:83:29:6e:3e:d9:48:59:cf:
         78:ae:d0:33:76:48:0b:08:d0:09:2d:0a:1a:49:ee:7f:9b:c0:
         a2:b4:d1:f4:f2:d6:5d:7a:ac:14:6e:e1:41:5a:40:bb:9f:3f:
         1c:c6:bb:19:b6:54:09:0b:89:ad:30:43:d9:ff:5e:60:df:5f:
         83:94:98:11:92:01:c6:c6:48:62:bc:b0:3f:01:6c:0b:82:4d:
         10:51:26:7f:a1:53:5f:d8:43:c8:6a:84:cd:e1:39:ef:d4:ea:
         fd:70:12:95:05:bf:7d:0e:a8:a5:9c:3e:c9:3e:16:20:51:08:
         88:0f:3c:c4:ee:67:b1:94:f7:b1:c6:47:eb:87:79:5c:97:f4:
         99:76:d3:0d:ef:3b:9a:7f:50:3c:c6:de:d8:39:59:bb:02:b1:
         80:ff:b3:10:d2:f4:a2:5a:d7:b8:eb:22:48:11:47:86:6d:3d:
         43:45:87:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----