Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/7ca2ac2235d7ccbde8247bf81ed163b333b69f3e.roa
File:                     7ca2ac2235d7ccbde8247bf81ed163b333b69f3e.roa (raw, json)
Hash identifier:          PKhNaqWnfiopJ4Ev0BIAAF6IsV8oQd3bSyUW1JvXrPY=
Subject key identifier:   C8:41:FF:68:4E:C7:77:84:30:72:11:E8:39:85:21:B8:46:E1:C3:DA
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F8BA5
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/7ca2ac2235d7ccbde8247bf81ed163b333b69f3e.roa
Signing time:             Wed 24 Mar 2021 14:43:57 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:5002::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1018789 (0xf8ba5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=7ca2ac2235d7ccbde8247bf81ed163b333b69f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:15:19:08:f2:4c:0b:e8:ae:94:3a:5a:36:a1:
                    1a:b0:b4:a8:cb:02:c0:ae:93:1f:f0:00:6c:c4:ea:
                    53:68:14:6f:35:f6:36:a4:28:50:8a:61:30:dd:58:
                    0b:32:cd:a5:4b:6a:34:c6:d3:95:f6:4f:fb:48:72:
                    36:a1:3a:1d:15:a0:2e:9e:d2:24:49:86:2f:3e:f6:
                    03:85:07:0b:cd:f6:50:ac:08:12:57:1e:7d:aa:9a:
                    b8:4c:ea:ab:78:97:29:f4:03:d3:0b:c6:1e:5a:99:
                    11:c0:69:05:97:a9:b6:15:47:8d:32:72:81:f6:fb:
                    a5:23:64:19:13:94:bd:c5:d5:03:6c:70:4a:56:2b:
                    2e:c0:01:97:97:89:b6:23:93:7f:80:bd:ac:b3:f8:
                    85:85:84:5a:e1:3b:e2:74:40:4e:c0:ba:e2:03:6b:
                    40:6c:f7:1f:5a:69:ba:ec:71:a2:87:24:af:57:9a:
                    5c:58:f1:c8:0d:25:b5:5f:5d:31:54:36:98:bc:c9:
                    69:f2:28:50:b9:0c:dc:68:dc:21:6d:6a:49:82:53:
                    cb:b9:08:33:92:59:f7:ac:04:94:b6:44:4f:8f:a0:
                    2d:f8:13:25:e5:2d:9d:d3:af:57:b2:27:17:e6:71:
                    1f:7a:76:fd:38:c7:10:86:f3:b3:73:23:03:a0:2c:
                    80:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:41:FF:68:4E:C7:77:84:30:72:11:E8:39:85:21:B8:46:E1:C3:DA
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/7ca2ac2235d7ccbde8247bf81ed163b333b69f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:5002::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:5b:5a:64:5c:9a:18:e4:14:82:4f:78:38:21:3a:ee:86:89:
         78:4e:f1:de:8d:4b:1e:d4:ed:87:af:3b:d6:33:19:8e:64:e0:
         f8:f2:e7:43:34:df:33:d8:8e:8e:cb:04:c6:d8:f3:9d:01:52:
         f2:95:08:44:56:02:de:9d:17:8b:b5:b5:11:7f:d7:52:d1:93:
         72:79:fc:18:69:52:2a:24:db:29:bd:2d:5d:2c:15:80:89:f7:
         69:08:ee:62:86:bd:50:e7:13:10:fb:cc:f1:f4:e4:50:c4:0a:
         52:dd:ff:c3:b1:81:e5:30:22:14:56:2e:d0:22:73:80:19:65:
         1a:e5:6e:68:88:98:e2:8b:59:53:66:ba:91:9e:7e:4e:c4:ce:
         89:13:b8:c9:57:27:7b:50:b0:74:03:68:59:96:cd:ce:bf:de:
         25:38:1e:5f:46:4b:d4:8d:80:f0:c8:9a:5e:29:1e:6e:ce:26:
         96:f8:8b:cf:ae:a0:cf:56:3e:84:60:7a:55:dd:3e:f0:c5:87:
         1a:5f:52:cf:24:60:db:19:73:70:50:98:34:11:b8:62:d7:5d:
         4a:1a:6d:41:9c:47:ee:43:25:ab:7e:15:f8:ce:54:9b:f5:e9:
         b0:2a:7d:84:fe:be:33:b9:0a:6f:5d:39:64:43:ac:94:67:ce:
         f9:22:15:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----