Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/87ddfd084133846a4937e438a69f060880d4dd1e.roa
File:                     87ddfd084133846a4937e438a69f060880d4dd1e.roa (raw, json)
Hash identifier:          iaNC8hsZx44h/OjEPgu/8FC2WlRpl0uiKFUYBdXJUDU=
Subject key identifier:   60:D3:F8:60:7D:08:44:6A:C2:15:C2:2B:62:C0:6E:ED:94:96:F9:25
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       26223B
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/87ddfd084133846a4937e438a69f060880d4dd1e.roa
Signing time:             Thu 11 May 2023 08:33:23 +0000
ROA not before:           Wed 10 May 2023 08:33:23 +0000
ROA not after:            Fri 09 May 2025 08:33:23 +0000
asID:                     278
IP address blocks:        2001:1218:601a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2499131 (0x26223b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: May 10 08:33:23 2023 GMT
            Not After : May  9 08:33:23 2025 GMT
        Subject: CN=87ddfd084133846a4937e438a69f060880d4dd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c7:02:da:ef:ab:15:9a:90:c8:8a:1f:cc:ca:
                    72:63:c4:0a:e8:c6:ba:6e:87:a0:69:43:c4:3e:c2:
                    70:7f:ae:93:6d:c6:c8:fd:e0:82:ef:08:f9:21:01:
                    49:d4:b9:03:ae:05:d1:35:5b:38:97:09:1f:ff:f0:
                    00:60:c2:ba:2f:d8:55:98:1c:93:7c:e6:13:5a:c4:
                    88:fc:29:b9:78:5f:75:97:11:19:b6:c1:51:e2:fd:
                    a9:2e:bf:85:66:e9:4d:fe:d3:54:f3:6b:5d:56:f5:
                    d7:8d:e9:2e:14:ff:24:68:d1:fd:49:fd:49:af:57:
                    cd:e6:4f:2a:00:e6:f5:d2:5b:10:ae:27:de:7f:b2:
                    b6:3f:5e:37:b8:41:52:2a:d9:76:6c:46:2b:6d:8a:
                    66:72:64:93:6b:e0:b7:27:0e:05:e6:13:5b:94:0a:
                    50:5a:f4:ba:d5:bb:3c:cf:52:8c:8e:9c:1b:75:c9:
                    33:f9:f8:0f:70:47:ef:25:f9:e4:2f:8b:51:99:22:
                    fa:c6:e6:1e:48:41:28:98:c9:9c:90:7a:2d:43:a5:
                    44:18:9f:2c:f3:81:b3:5b:83:0f:24:c9:4b:dc:fb:
                    42:e9:93:e7:ab:70:33:bf:0a:6f:04:68:1d:ef:ba:
                    06:99:3a:dc:c3:2f:ef:a1:c9:58:3d:51:92:fc:ab:
                    1d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D3:F8:60:7D:08:44:6A:C2:15:C2:2B:62:C0:6E:ED:94:96:F9:25
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/87ddfd084133846a4937e438a69f060880d4dd1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:601a::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:ae:16:b4:cb:45:82:5e:7b:28:ef:df:c5:cb:10:48:97:4b:
         e1:61:37:24:ab:23:f7:cc:3f:4e:99:84:1d:9c:2f:55:82:f9:
         c3:c8:a3:0a:23:ce:9b:2e:c1:c3:62:39:c5:8d:d1:05:9d:f8:
         c8:aa:e4:cd:ac:14:7b:91:d2:20:27:ae:12:e5:52:5d:46:fa:
         f0:82:c6:83:37:23:75:01:92:a4:e1:5a:db:3d:2a:ac:f7:fd:
         27:e3:ef:aa:17:78:b2:83:ed:a0:e4:b1:1c:8c:16:7b:35:20:
         23:10:3b:7e:0f:03:c7:9c:f9:a2:9c:90:47:86:8c:ab:28:79:
         85:62:48:b9:2b:62:84:c1:50:e3:09:3e:93:d9:9d:73:79:bd:
         4d:f2:51:bb:e7:85:fc:22:29:22:dd:23:02:09:d4:9c:ce:97:
         f7:30:64:2c:40:da:0d:d5:2e:20:1e:ed:b1:59:12:61:30:2f:
         13:ec:e1:31:cf:ba:84:60:16:5f:9e:57:70:d7:76:0f:be:07:
         1f:ed:8f:ca:b6:2d:6c:f8:a2:07:d0:7c:d7:76:a6:86:97:67:
         ac:5d:1b:9d:02:f2:8d:7d:c4:e6:9e:b4:4a:36:ea:69:42:e8:
         b0:2e:a2:c7:11:24:bc:31:9f:2b:5e:95:c8:8d:7f:a7:14:ff:
         3d:72:d7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----