Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/739e6ae59683be5acce212215f33dd8448081d59.roa
File:                     739e6ae59683be5acce212215f33dd8448081d59.roa (raw, json)
Hash identifier:          kyOtuvvYoVubZVXzzrM8sg9zPg2f/J1OZaV32PJb7PU=
Subject key identifier:   FA:5C:46:8F:D6:5C:98:70:6F:F6:74:FB:28:06:E6:FF:81:B8:2A:4D
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1625C8
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/739e6ae59683be5acce212215f33dd8448081d59.roa
Signing time:             Thu 26 Aug 2021 23:34:10 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:60d1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1451464 (0x1625c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=739e6ae59683be5acce212215f33dd8448081d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fd:81:bc:3d:c0:67:2f:d3:80:b6:89:cb:91:
                    1a:8c:f0:0c:3f:6a:29:ff:7d:91:30:2f:c7:cb:66:
                    09:76:3b:1e:cc:89:d4:db:51:73:48:ed:19:b6:c2:
                    8f:8b:24:fd:31:10:9c:bf:9b:2b:b3:70:25:d1:99:
                    d3:dd:61:b1:54:dd:2d:01:b7:9a:ec:d1:fd:92:2d:
                    c6:fe:4c:4f:cb:ed:11:dc:1d:aa:69:4d:ad:5a:aa:
                    07:29:ca:da:fb:6b:1b:2d:e2:58:5a:48:ec:98:21:
                    fc:95:20:06:ce:af:85:15:76:39:f8:eb:f7:bd:7e:
                    49:e3:81:85:74:37:8e:45:4d:95:49:d1:74:cb:f4:
                    db:c5:2f:f2:81:b2:a1:be:c1:62:82:38:bd:6f:4d:
                    9b:ea:81:12:2a:23:bb:eb:9e:4a:90:5f:b3:04:b3:
                    bd:d2:fc:51:3c:40:43:1f:dd:30:ae:9b:60:b1:34:
                    75:03:b9:a0:eb:1d:10:38:fb:5f:d6:39:88:4b:7b:
                    7d:eb:88:b6:92:aa:45:9d:a5:62:32:26:76:e6:82:
                    45:fe:c3:30:81:8d:01:71:06:78:48:6e:cd:c8:a7:
                    31:a2:4a:af:82:2f:6a:82:6b:64:39:fa:8e:2e:dc:
                    0f:ac:c5:77:89:99:42:ad:c0:98:55:82:64:75:ce:
                    be:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5C:46:8F:D6:5C:98:70:6F:F6:74:FB:28:06:E6:FF:81:B8:2A:4D
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/739e6ae59683be5acce212215f33dd8448081d59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:60d1::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:1d:de:b5:14:00:88:1b:58:b7:9c:0b:8b:69:33:cc:98:ae:
         68:b8:b4:d9:00:e5:a9:07:1a:4e:68:c0:d5:c0:27:d9:72:bf:
         65:a4:52:5c:94:60:be:58:14:68:b7:43:08:aa:d6:08:b6:1a:
         7c:f0:dc:14:08:e3:87:7b:a2:49:a7:bd:ed:fc:3d:b4:ef:50:
         62:2c:18:d8:d3:b3:9f:2e:17:fd:59:86:a8:1d:f0:f2:bd:ee:
         ee:76:43:36:45:66:42:44:5b:bb:2f:c6:80:9b:60:ec:43:50:
         11:e5:25:53:4f:f2:56:ca:55:a0:cb:95:d7:0e:c3:89:8c:67:
         7c:90:3a:92:bb:66:3e:a5:6c:d0:d3:62:a3:af:a5:dd:0f:54:
         67:e8:9d:92:3b:a0:85:74:54:9f:e6:bd:f6:f0:69:41:68:0e:
         66:bb:2f:ec:7f:33:50:bc:33:0e:f9:99:e0:1d:17:15:71:b5:
         c3:ea:64:89:77:c8:f4:db:12:b2:f9:10:68:8c:a9:9b:26:37:
         74:99:8a:a5:de:16:24:51:05:bf:48:91:f3:8e:d9:4f:37:d8:
         d1:03:35:ab:40:5c:fe:f7:43:58:48:45:16:cc:fb:d6:26:a3:
         e3:3f:38:9d:99:9f:58:90:8d:1c:dc:90:e1:70:75:93:ee:4e:
         a1:c5:55:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----