Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/964535e495b185b22bbf3ad57f62cbcd5cd1e469.roa
File:                     964535e495b185b22bbf3ad57f62cbcd5cd1e469.roa (raw, json)
Hash identifier:          I8YcuEZ9Vrjl8Dvv4rfnVrTki5/CTpsvLrReJUs0qmY=
Subject key identifier:   32:DF:2D:D9:42:9C:C0:73:56:8A:C2:A8:C3:DD:09:24:61:13:3F:41
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       14FE48
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/964535e495b185b22bbf3ad57f62cbcd5cd1e469.roa
Signing time:             Wed 18 Aug 2021 17:35:34 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6034::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1375816 (0x14fe48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=964535e495b185b22bbf3ad57f62cbcd5cd1e469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7d:80:b3:ab:9d:42:56:01:69:b6:c6:ac:2a:
                    11:d1:e6:1f:40:82:5f:73:66:9a:97:38:a9:58:dc:
                    50:55:2d:ff:fd:0d:41:3a:dc:ab:bc:72:fb:a1:51:
                    48:94:c2:34:17:89:d5:91:7e:46:6e:62:69:a1:a6:
                    18:ba:8f:b1:c1:ee:47:aa:e6:ba:ad:21:12:bb:63:
                    91:63:25:45:c8:e5:ee:6e:82:b9:e0:61:07:4f:6b:
                    b6:b4:9e:78:f7:c5:09:fc:eb:fa:21:2d:d4:90:c1:
                    40:e8:eb:1b:08:2d:5a:7e:82:10:07:ec:5c:d7:46:
                    fd:ad:47:69:88:15:f4:a8:d9:fe:d5:0e:cb:1a:de:
                    58:92:56:bf:14:c6:07:e1:9d:d1:f0:a9:56:26:b8:
                    4b:fc:f6:b2:d2:70:ef:1e:fa:c5:9e:fc:1f:07:bc:
                    52:5c:e2:9e:a4:d6:a2:eb:8b:11:a3:9e:e1:1b:f0:
                    61:22:9b:cb:c6:9a:d3:99:b7:f5:d4:5f:67:c1:3a:
                    95:e8:25:72:80:92:0e:e4:cc:8b:8b:42:0b:bb:09:
                    a4:1a:bb:00:ae:66:89:62:20:7e:43:45:18:a8:00:
                    c8:54:ab:8b:22:18:44:93:4b:aa:55:06:72:5d:40:
                    6a:1c:34:6c:4f:5f:07:75:a3:ca:de:7f:e3:32:86:
                    97:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DF:2D:D9:42:9C:C0:73:56:8A:C2:A8:C3:DD:09:24:61:13:3F:41
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/964535e495b185b22bbf3ad57f62cbcd5cd1e469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6034::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:ae:76:1e:d5:66:ca:22:09:78:bd:08:7a:e2:a8:4b:f4:ac:
         31:44:97:02:2f:1a:f8:d5:34:60:23:29:d5:95:29:da:c2:0c:
         b6:93:c4:ff:9e:83:ad:48:ed:a9:6e:b9:de:ed:a0:b0:45:ba:
         2c:57:62:b6:82:6d:66:76:00:05:c8:77:72:b7:c3:72:92:f0:
         8d:d7:1c:49:db:f9:65:f3:78:93:9d:50:c8:43:bb:b7:82:fc:
         48:8a:b0:cd:26:4d:21:17:25:91:8b:a3:45:86:3a:09:8b:5f:
         14:b4:e7:2c:ef:c0:a2:c0:31:d7:3e:f4:ff:91:70:09:f8:88:
         f1:10:02:7f:06:fb:c5:e6:28:5b:e2:65:5a:28:bb:67:04:b7:
         b3:05:c2:70:1b:42:1d:b8:69:15:28:10:0d:31:6a:90:f8:5b:
         07:d6:61:8d:ca:b9:cc:f8:d7:32:91:93:69:38:11:71:15:b4:
         fc:b3:fa:bd:41:4f:5f:72:8e:11:b0:59:f9:7b:e4:5c:65:24:
         4e:13:76:02:02:d2:e2:fb:3c:94:96:20:3b:0b:5c:d1:81:10:
         8a:e8:81:a0:11:be:f7:21:49:f8:8b:a9:1f:a2:62:2a:8a:18:
         a5:a9:d2:74:40:46:65:3f:a1:50:bb:fc:8b:13:73:4c:5f:43:
         b7:e6:ea:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----