Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/8890b255e1f2e410a62039b3efaa545ead56dab9.roa
File:                     8890b255e1f2e410a62039b3efaa545ead56dab9.roa (raw, json)
Hash identifier:          ed5DM7//Dei18qPcbyBIOaLpVBAfiIQhtdTHN5zU7Sg=
Subject key identifier:   4F:8D:4B:C9:23:6A:BD:25:BA:11:91:02:60:A3:82:E7:B9:39:97:A7
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F788A
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/8890b255e1f2e410a62039b3efaa545ead56dab9.roa
Signing time:             Wed 24 Mar 2021 14:43:52 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:6010::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013898 (0xf788a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=8890b255e1f2e410a62039b3efaa545ead56dab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:9b:e7:35:df:75:df:9a:03:fc:d2:0a:11:
                    e0:e6:1a:da:ba:29:05:01:90:4b:08:3a:b0:99:43:
                    dd:2a:78:fe:5c:84:67:ab:18:01:b7:5f:97:d6:e3:
                    e3:46:ad:a0:27:57:83:33:27:cd:84:2b:bf:29:a9:
                    79:0b:e0:83:95:bf:8c:cb:17:91:b7:cb:8e:64:0f:
                    3b:23:d1:fa:53:c8:cf:f5:1a:62:ec:13:1b:78:a8:
                    90:62:1c:2b:31:9b:be:40:d7:fe:33:ed:74:6f:91:
                    c2:6f:b4:20:24:eb:39:22:f3:88:c5:5c:2e:a7:09:
                    65:d6:3a:45:7a:82:44:b7:5c:2a:24:81:5b:cc:f3:
                    2d:7e:ba:79:b6:6d:dc:0d:b4:da:6b:6c:bd:00:41:
                    e1:a1:5f:36:fb:5a:43:12:c6:60:b7:08:ce:b0:0f:
                    eb:dc:6e:0a:b3:e7:6b:ed:94:ba:e7:3d:a9:65:c8:
                    2c:eb:aa:ef:f7:f2:2d:bb:b8:75:99:64:26:ab:52:
                    f4:ab:3a:c9:cf:8f:91:08:a8:e6:09:aa:19:b7:f8:
                    e9:e3:72:91:7f:16:ad:78:b1:4c:4e:a9:8a:96:d2:
                    1e:90:53:32:e4:2d:b6:b5:28:42:40:3b:96:1b:1a:
                    5f:ce:0e:5f:81:fb:8c:2c:ab:03:89:21:82:e2:11:
                    a5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8D:4B:C9:23:6A:BD:25:BA:11:91:02:60:A3:82:E7:B9:39:97:A7
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/8890b255e1f2e410a62039b3efaa545ead56dab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6010::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:fd:89:29:3b:5e:f7:68:61:1b:b5:8c:80:6c:9e:22:26:b0:
         09:31:7b:b7:5b:3e:56:c4:76:53:6f:85:b4:bd:41:35:a7:8f:
         35:a6:4b:b8:f8:45:e2:23:cc:33:95:e6:91:e2:2d:23:5f:a3:
         2d:db:5f:c1:a2:5d:9c:50:e9:e5:4c:a3:2a:99:47:e2:f3:86:
         2b:56:2b:7a:23:fd:b7:f6:93:88:ea:b3:58:29:0f:b6:dc:fc:
         52:79:ab:42:35:8a:3c:24:ca:18:8e:59:16:d0:c5:70:19:02:
         72:9f:7b:c3:3e:9e:5e:76:9f:c4:ee:a8:87:ea:14:1e:b7:c8:
         68:58:52:44:88:8b:6a:e0:43:c2:24:06:98:8f:7e:3e:1e:d2:
         36:6e:5b:b5:2a:05:ec:2a:09:13:af:44:a2:cf:ea:e3:55:17:
         d6:c8:0f:25:ad:f8:6a:60:14:e4:68:82:8a:76:17:7d:26:f5:
         11:30:12:97:34:d4:26:87:88:e7:d1:64:71:d3:fa:c3:63:53:
         8d:e2:04:9c:42:fb:a0:02:89:94:5b:e6:e1:94:4f:6f:0d:63:
         8c:4f:17:72:dc:a8:1c:a8:ec:68:b9:95:5a:06:fd:50:8f:a2:
         51:bc:e6:ae:08:d0:cb:ac:f7:01:ab:b8:32:8f:cd:16:40:2c:
         69:2f:53:53
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDD3iKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEyg4ODkwYjI1NWUxZjJl
NDEwYTYyMDM5YjNlZmFhNTQ1ZWFkNTZkYWI5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArMub5zXfdd+aA/zSChHg5hrauikFAZBLCDqwmUPdKnj+XIRn
qxgBt1+X1uPjRq2gJ1eDMyfNhCu/Kal5C+CDlb+MyxeRt8uOZA87I9H6U8jP9Rpi
7BMbeKiQYhwrMZu+QNf+M+10b5HCb7QgJOs5IvOIxVwupwll1jpFeoJEt1wqJIFb
zPMtfrp5tm3cDbTaa2y9AEHhoV82+1pDEsZgtwjOsA/r3G4Ks+dr7ZS65z2pZcgs
66rv9/Itu7h1mWQmq1L0qzrJz4+RCKjmCaoZt/jp43KRfxateLFMTqmKltIekFMy
5C22tShCQDuWGxpfzg5fgfuMLKsDiSGC4hGljQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFE+NS8kjar0luhGRAmCjgue5OZenMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4Lzg4OTBiMjU1ZTFmMmU0MTBhNjIwMzliM2VmYWE1NDVlYWQ1NmRhYjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABEhhgEDANBgkqhkiG9w0BAQsFAAOCAQEANP2JKTte92hh
G7WMgGyeIiawCTF7t1s+VsR2U2+FtL1BNaePNaZLuPhF4iPMM5XmkeItI1+jLdtf
waJdnFDp5UyjKplH4vOGK1YreiP9t/aTiOqzWCkPttz8UnmrQjWKPCTKGI5ZFtDF
cBkCcp97wz6eXnafxO6oh+oUHrfIaFhSRIiLauBDwiQGmI9+Ph7SNm5btSoF7CoJ
E69Eos/q41UX1sgPJa34amAU5GiCinYXfSb1ETASlzTUJoeI59FkcdP6w2NTjeIE
nEL7oAKJlFvm4ZRPbw1jjE8XctyoHKjsaLmVWgb9UI+iUbzmrgjQy6z3Aau4Mo/N
FkAsaS9TUw==
-----END CERTIFICATE-----