Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/7c87560bf9234ebbb8b3fb9f8825ef6a9b4274dd.roa
File:                     7c87560bf9234ebbb8b3fb9f8825ef6a9b4274dd.roa (raw, json)
Hash identifier:          XS66mVTo83BZ4Dm6mOz0WladBPyu3xDq0RPy7TAVYpE=
Subject key identifier:   0F:1C:98:D9:11:7E:D6:1D:BA:52:28:AB:1E:95:E2:48:74:4D:DC:43
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15A69C
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/7c87560bf9234ebbb8b3fb9f8825ef6a9b4274dd.roa
Signing time:             Tue 24 Aug 2021 22:23:14 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6055::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418908 (0x15a69c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=7c87560bf9234ebbb8b3fb9f8825ef6a9b4274dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bc:1e:1c:b3:91:35:11:33:26:c7:76:f8:f5:
                    fe:8b:a1:a2:54:b4:98:b2:c1:46:21:1d:f9:24:e9:
                    68:ce:2e:7b:ba:59:f6:10:63:ca:f2:f4:77:55:91:
                    06:bf:3a:ca:f3:68:44:19:ed:04:7e:1c:d4:09:90:
                    51:75:c7:14:5d:1f:9d:59:83:64:0e:88:08:61:db:
                    d3:40:1e:1e:68:9e:4d:c7:62:c1:94:55:6a:7d:4b:
                    cb:e1:31:f3:77:8d:62:d4:2c:ce:e0:1b:10:34:a3:
                    1f:e5:b4:45:07:d8:a2:6c:43:9e:dc:d4:22:d7:0c:
                    d1:11:f4:f5:15:35:1d:78:04:22:1e:66:27:60:a0:
                    f5:ca:be:d0:13:83:6b:68:e9:91:c3:2e:2f:6e:a6:
                    be:3d:d5:0f:63:08:e7:b6:f7:ee:7c:10:fd:12:f2:
                    d0:04:08:e3:7e:b2:88:0f:c9:c2:68:80:b0:61:b9:
                    08:aa:4b:65:2a:69:b1:dd:45:e9:a8:4e:62:b6:1f:
                    07:b8:d0:70:6d:5c:44:44:84:cd:fe:42:b0:62:4a:
                    04:be:e5:17:51:10:84:54:d0:50:b5:09:3e:e1:3c:
                    38:76:33:a3:22:4c:c8:a4:d8:f7:b5:74:44:4a:a0:
                    58:37:6e:4e:b5:a9:c9:42:5d:2a:b3:3e:ad:9c:1e:
                    4b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1C:98:D9:11:7E:D6:1D:BA:52:28:AB:1E:95:E2:48:74:4D:DC:43
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/7c87560bf9234ebbb8b3fb9f8825ef6a9b4274dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6055::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:59:33:f2:05:19:71:a5:ff:57:08:b6:77:97:41:01:86:fb:
         63:21:c7:d7:33:cc:a9:d6:f5:1f:f7:07:a9:f2:93:8a:ff:14:
         95:3a:38:ef:15:01:47:ff:21:a7:c9:f1:dc:02:38:62:85:90:
         44:93:c9:dd:ac:66:74:70:90:5e:1e:fc:d2:c5:af:22:ba:98:
         fb:73:8e:82:05:63:ff:8f:71:b5:11:46:89:ed:7a:a1:4d:6b:
         45:31:94:7b:f9:88:29:2b:a0:1d:7e:d2:c4:1e:3b:23:c2:54:
         3c:5c:a8:87:d3:13:b3:2d:da:61:e2:a6:73:71:41:d6:60:34:
         8c:99:38:c4:2f:ee:a4:25:ef:7e:6e:c4:e0:95:15:5b:f8:ad:
         83:a2:54:5d:05:e8:7c:3f:ce:66:45:9c:7e:82:3d:f7:7e:36:
         6b:82:70:a6:c2:b8:18:c7:da:99:69:19:a2:bc:35:9b:17:16:
         1d:e1:bb:6e:1a:d9:dd:f4:38:29:78:47:47:2c:14:54:cf:db:
         78:2a:81:c2:ba:0f:50:bf:3a:07:ec:98:5d:10:05:0b:0d:c2:
         24:85:20:df:d3:63:93:95:e3:66:f7:57:fd:07:5b:2b:5a:93:
         a3:9a:2e:e8:a8:0f:64:77:2f:40:3f:6b:09:7e:b3:b5:aa:5b:
         d6:b5:32:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----