Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/967c6f8490e4c4f1884065047bea7a95b99f953d.roa
File:                     967c6f8490e4c4f1884065047bea7a95b99f953d.roa (raw, json)
Hash identifier:          7/jt4CQ0K2qpqwLbhJJSRSH6bL9185WX8Ls18Verp9Q=
Subject key identifier:   A5:4B:44:82:08:7C:73:50:05:05:98:5A:B1:C1:08:18:96:DE:2C:5E
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F8333
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/967c6f8490e4c4f1884065047bea7a95b99f953d.roa
Signing time:             Wed 24 Mar 2021 14:43:52 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:6015::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1016627 (0xf8333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=967c6f8490e4c4f1884065047bea7a95b99f953d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:44:36:24:1d:76:88:e7:ba:f9:bb:d6:ac:4c:
                    67:f3:ce:07:61:33:3b:28:33:76:b8:58:7a:b5:3b:
                    1d:54:f8:6c:ee:83:4d:68:fe:6a:bc:a2:d0:84:16:
                    a0:7c:1d:ee:ff:f4:01:0b:b5:71:e2:a1:da:1a:8f:
                    7e:b1:93:76:56:1f:70:2f:a2:5e:e1:db:81:95:00:
                    48:bc:ae:f8:31:42:9b:9f:60:d3:1f:12:37:55:84:
                    f9:64:6d:e7:82:00:e7:92:ac:cd:f3:98:b6:ab:42:
                    f8:0e:3e:f0:1b:c2:d9:67:60:6e:c8:36:2c:48:a6:
                    af:d5:ca:db:42:9d:7f:a9:1a:b2:a5:b1:8a:4b:e2:
                    ea:c6:08:78:b4:8a:de:ce:32:6c:ee:9b:f9:28:f3:
                    92:1d:39:55:08:8b:c0:01:d3:df:5a:b0:10:51:7b:
                    f1:77:0f:dc:ff:08:7e:11:3b:64:86:3a:b4:49:8f:
                    5b:a0:96:4d:cf:ee:e9:1c:80:d4:1e:cb:89:44:98:
                    a7:0f:4f:e4:31:5a:60:1a:87:8c:b8:91:9d:b3:f2:
                    54:e8:a8:ed:c9:63:16:f1:b4:52:f0:3d:76:92:d2:
                    51:80:ca:62:b9:d4:cf:47:43:df:0c:7c:c6:1e:82:
                    91:40:6f:b2:fe:16:a6:cb:e1:d5:f1:9f:63:fa:2c:
                    07:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4B:44:82:08:7C:73:50:05:05:98:5A:B1:C1:08:18:96:DE:2C:5E
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/967c6f8490e4c4f1884065047bea7a95b99f953d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6015::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:2a:89:bb:cf:d1:38:6a:08:48:7b:81:53:ba:52:f2:fe:c7:
         62:39:18:3c:a6:5b:87:10:78:dc:57:ce:61:a6:83:01:3b:a3:
         b8:5f:38:a8:5f:23:96:f2:e5:66:b4:33:99:fb:a8:0e:27:96:
         6b:5a:ad:83:01:41:5d:eb:90:d7:a8:95:1a:34:87:65:8d:2a:
         f6:5a:84:9d:92:38:97:46:71:95:dc:3d:db:c2:6c:81:14:97:
         e2:f0:1f:69:b1:de:a5:0b:16:ee:2e:73:c0:41:06:b3:d8:dc:
         05:18:b6:7e:cc:81:ac:6d:5b:55:ab:42:6c:b8:85:62:ca:9f:
         5e:28:7e:ed:bc:be:c6:4c:0e:2a:20:93:36:d8:72:6b:28:72:
         7e:52:53:f7:82:10:fc:11:45:ae:3d:30:09:51:75:bb:ca:ac:
         65:59:05:0a:ae:62:e2:4a:15:a7:22:72:c0:1a:de:7b:d8:d4:
         35:42:ba:aa:f3:79:e8:5f:87:1e:3f:0e:6f:08:42:22:f3:59:
         f9:7a:f6:ae:68:28:2e:7f:50:ed:bb:af:6e:d2:93:64:08:f4:
         cb:29:4d:c7:a9:8d:cb:70:c7:3d:53:4e:0d:70:a7:5c:cb:a8:
         ed:81:ca:91:e6:6e:d4:8a:5c:c2:76:c2:8e:43:97:9b:f7:6d:
         85:49:e9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----