Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/819d03fde85bfea6322ac83467286df6f45259c8.roa
File:                     819d03fde85bfea6322ac83467286df6f45259c8.roa (raw, json)
Hash identifier:          OE7qSIRiNNzO/C4irE61NLw1vZj64p5MrKcmuZ302VQ=
Subject key identifier:   54:B3:2C:81:78:14:AE:8F:08:F3:9C:43:B5:73:06:E7:59:53:9B:33
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F8DA6
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/819d03fde85bfea6322ac83467286df6f45259c8.roa
Signing time:             Wed 24 Mar 2021 14:43:58 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:5003::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019302 (0xf8da6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=819d03fde85bfea6322ac83467286df6f45259c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:54:0e:62:7f:bd:ca:be:b3:58:1a:d4:b3:
                    c3:3a:fb:3b:0c:55:51:7f:05:68:bb:5f:cb:f4:d6:
                    ea:73:eb:41:3a:91:a8:d7:c1:7f:92:54:08:2f:da:
                    36:4c:02:54:42:2f:e6:ff:0e:43:41:a6:72:16:0e:
                    e5:bf:d5:4a:7a:de:bd:0b:81:e8:1f:1b:9c:a2:26:
                    6b:50:13:37:c3:e3:cb:d2:80:5d:13:8c:74:96:92:
                    71:16:d7:ae:cf:ca:85:27:3d:7b:79:18:d9:28:a4:
                    1c:c6:46:d8:c2:54:dc:51:c5:9f:c9:38:f5:17:a7:
                    83:6f:71:56:9f:24:af:8c:bd:58:e9:b1:ae:38:a0:
                    db:d5:30:23:e8:a5:b4:a0:10:87:fb:e3:06:10:8c:
                    47:ca:61:2d:db:9f:a9:d2:fb:24:3a:5b:2b:02:34:
                    38:04:60:ee:93:c9:23:a6:37:da:59:23:02:18:72:
                    79:72:bd:1e:9e:3c:46:38:2b:c7:39:1a:1d:ec:db:
                    ff:c5:f2:ec:11:8e:32:0f:33:05:d6:b4:75:0f:4d:
                    f2:75:53:fe:c8:b2:53:75:d9:30:b9:a7:8f:53:8e:
                    a8:93:74:de:2d:b8:90:8e:b0:bf:28:ae:35:63:02:
                    e0:17:76:5e:a0:de:d3:26:31:43:21:07:59:c0:da:
                    4c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B3:2C:81:78:14:AE:8F:08:F3:9C:43:B5:73:06:E7:59:53:9B:33
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/819d03fde85bfea6322ac83467286df6f45259c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:5003::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:08:11:b3:0b:9c:59:e0:48:ee:d3:03:cc:34:fb:c9:04:b2:
         b9:19:3c:b0:46:68:b9:06:7e:3b:77:2c:5b:e7:e7:aa:8b:0e:
         e0:e9:c1:ff:7a:9c:14:fb:7d:4b:59:c8:82:1f:a5:97:f5:b6:
         4b:a2:74:80:76:03:3e:a9:28:b9:e7:1f:4d:17:d3:ee:6b:12:
         e5:d8:d1:13:45:eb:de:47:be:2a:7c:81:31:c4:f1:89:9d:ed:
         aa:23:06:bf:5d:6a:2b:cd:4e:a5:b0:4d:1a:be:2f:b8:e6:e5:
         84:91:48:44:36:c5:0c:6d:3a:93:ad:99:c8:65:15:f6:ad:e4:
         89:a1:b7:c9:8a:cd:ac:c9:13:e5:26:df:fc:25:8d:4e:3c:53:
         37:e9:1f:3a:9f:fd:8b:a2:47:4b:15:4b:e4:97:3a:a1:dc:0c:
         73:5c:bc:f4:2c:31:10:09:f1:53:7d:23:6c:97:b7:da:68:4e:
         c3:c3:71:f6:00:95:4e:db:46:a1:da:c4:2c:fe:87:98:75:6c:
         ee:05:01:db:45:d8:42:2d:13:28:de:a2:52:ea:5b:24:b6:33:
         97:5e:eb:2b:26:24:75:dc:02:58:c5:07:0c:b3:4b:ac:b2:3b:
         4c:78:93:c6:28:9f:a9:af:bc:bd:08:fa:61:c9:09:55:99:eb:
         de:07:b3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----