Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/74351a8117b80781caf8a765cd02ec79a38f44d0.roa
File:                     74351a8117b80781caf8a765cd02ec79a38f44d0.roa (raw, json)
Hash identifier:          RCjOOu32huu1Ik2k2p84bSjE8a9Hip/Wlg0R9ztPDQs=
Subject key identifier:   F0:40:C0:04:E2:6B:E9:52:13:9F:3D:EF:08:C0:8B:9F:17:CD:3A:42
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15CE25
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/74351a8117b80781caf8a765cd02ec79a38f44d0.roa
Signing time:             Tue 24 Aug 2021 22:53:42 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:605e::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1429029 (0x15ce25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=74351a8117b80781caf8a765cd02ec79a38f44d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:66:41:b0:78:3d:17:96:f3:95:05:98:95:
                    ae:3d:c9:10:52:82:8d:8e:75:df:0e:ae:74:72:37:
                    b0:e5:de:d2:c9:06:e7:72:39:3f:46:f7:67:fb:0b:
                    70:14:ba:d5:ac:cf:28:2b:4e:98:7a:13:46:7e:cb:
                    12:82:cd:7f:dc:10:0b:a1:d9:54:f3:66:36:b1:09:
                    42:ba:e1:d1:21:e5:8e:3a:9d:c3:df:35:e6:93:d0:
                    be:4e:37:fa:74:7e:ee:30:36:fc:19:e1:92:83:fd:
                    4a:43:ae:9b:8f:94:77:af:90:36:42:cb:d0:9a:a5:
                    39:1a:1e:30:29:cc:70:14:1d:4d:bf:a2:18:59:1a:
                    f2:e0:55:e1:55:95:9a:80:3b:2c:7e:bd:17:e2:6c:
                    fa:16:48:3b:bd:b0:38:34:79:03:57:91:63:35:44:
                    ca:fd:6c:e9:57:45:f1:f9:e9:51:52:5b:4e:59:e0:
                    33:7d:80:03:7b:9e:16:18:cc:f5:56:b3:58:c9:09:
                    f3:ee:db:ba:b0:3f:28:9f:80:ff:dd:a7:2f:23:cc:
                    9c:24:f3:fe:e3:7a:ae:13:42:f3:3c:ee:4c:fb:3e:
                    8e:c4:42:07:0a:10:8b:ec:6f:9a:a9:a1:54:34:28:
                    25:12:13:e6:96:97:66:0c:2d:63:6d:ab:5b:7a:22:
                    53:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:40:C0:04:E2:6B:E9:52:13:9F:3D:EF:08:C0:8B:9F:17:CD:3A:42
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/74351a8117b80781caf8a765cd02ec79a38f44d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:605e::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:84:d0:cc:de:0b:95:b5:42:13:49:16:e0:9a:23:8b:d5:a5:
         75:7d:e0:54:04:e7:59:82:d3:e4:1d:29:ab:70:fc:61:a9:b4:
         a1:9e:75:58:f8:28:58:9e:04:bc:f9:0f:c4:63:da:53:32:fa:
         c3:c6:0c:b6:04:de:95:d4:93:e3:af:d7:35:d4:e4:b6:a9:60:
         b5:2f:ce:f0:37:4a:54:64:e5:6b:37:ad:6a:bd:26:10:40:20:
         db:70:f3:01:80:32:fa:b4:b2:91:87:52:1b:df:2a:12:63:21:
         ef:00:e2:70:98:40:4b:65:b2:ee:c3:ca:c2:df:f3:fc:de:0f:
         72:cd:8f:3d:7b:b0:d4:0d:ba:dd:ae:22:e9:79:d3:58:40:bb:
         36:5e:f4:1b:df:de:b1:d8:dd:48:17:05:d4:7f:24:52:fd:aa:
         4d:44:44:1b:99:1b:88:5b:33:03:56:92:b5:de:1e:f5:49:58:
         0c:77:f8:92:87:03:9b:ec:a4:db:fb:b6:b7:87:d6:6a:10:0b:
         85:d3:ba:35:38:4b:e4:36:4e:10:23:da:69:fd:cc:4a:54:f3:
         a5:cc:84:41:48:1d:3e:aa:50:d4:b4:dc:8c:2d:04:94:f2:a2:
         d6:35:c4:d5:6d:43:7e:84:ea:f5:66:6c:40:e3:1a:2d:32:93:
         c5:d1:fc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----