Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9960fb5aeb63ed57ff4419dcb7de10b3494ce9f1.roa
File:                     9960fb5aeb63ed57ff4419dcb7de10b3494ce9f1.roa (raw, json)
Hash identifier:          +R0G40Up1GgRJvedtzrj6sjmPi9Mqm8Zdp992MwT7B0=
Subject key identifier:   03:09:BD:C0:A9:41:E5:CC:00:C7:BA:8D:0C:D1:BD:61:7C:7F:5E:0E
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       14FB01
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9960fb5aeb63ed57ff4419dcb7de10b3494ce9f1.roa
Signing time:             Wed 18 Aug 2021 17:33:03 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6033::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1374977 (0x14fb01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=9960fb5aeb63ed57ff4419dcb7de10b3494ce9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4b:1a:f7:df:d4:42:02:87:e5:27:86:a4:ec:
                    ad:dd:35:c7:4b:28:09:b1:1e:10:ec:b9:2c:62:35:
                    78:9b:91:46:0d:13:6b:e0:56:90:30:c5:62:9d:b8:
                    42:b9:5f:dd:ce:fa:d0:4e:8d:47:53:b1:05:dd:b6:
                    70:d3:e2:ed:7e:10:e5:9c:7c:48:07:e2:e9:b8:48:
                    cd:92:47:54:44:6e:7b:2d:e0:8a:f7:a2:08:9e:49:
                    5f:d5:d5:a7:34:eb:6b:83:ca:a9:5c:ec:a9:d3:33:
                    cb:c5:20:84:40:12:46:c4:0a:07:a9:2c:17:f7:a6:
                    f9:c6:61:4d:5a:cf:e4:98:67:9a:d7:ef:f4:6c:14:
                    90:c4:d3:29:e6:9b:3d:05:52:cf:bb:c1:52:ab:13:
                    e8:97:87:07:2c:ae:e5:c1:3e:24:99:7d:8f:27:bc:
                    7d:28:e7:28:6f:04:41:46:93:3d:ff:3b:9c:74:dc:
                    27:c2:d7:c5:66:08:3c:e3:0d:16:34:e0:18:76:e2:
                    36:2a:23:17:7b:15:a9:b6:94:47:a1:5d:e2:13:bd:
                    83:2f:eb:60:01:9f:97:98:e1:f0:ef:93:26:67:d1:
                    79:e9:db:bb:45:f8:db:62:0f:4a:35:b3:77:ec:19:
                    30:18:58:ec:cb:75:6c:a3:a5:19:2a:33:70:5c:84:
                    0a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:09:BD:C0:A9:41:E5:CC:00:C7:BA:8D:0C:D1:BD:61:7C:7F:5E:0E
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9960fb5aeb63ed57ff4419dcb7de10b3494ce9f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6033::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:b1:8d:f8:3f:94:d2:44:fb:d8:2b:81:07:52:66:f7:41:9b:
         c8:f1:83:8d:e1:a5:2c:95:bf:13:ff:88:86:c7:02:17:64:7f:
         10:87:41:f7:23:39:17:e9:4a:9e:02:6e:79:26:2b:a1:e2:c5:
         28:2a:9b:75:08:d6:36:81:c9:1b:7d:13:e5:9d:58:b0:cd:87:
         25:e6:a8:0c:09:cc:49:0c:50:ef:b8:cc:9c:ac:a8:89:05:a2:
         a1:31:1a:76:eb:76:b4:b6:6d:2a:90:f7:32:97:a3:62:a2:49:
         29:b3:e9:08:28:77:a8:3a:db:01:76:ef:81:89:9c:d2:54:b1:
         ea:97:6e:60:6b:fe:2c:af:23:4d:94:13:94:f5:b1:30:84:72:
         cf:4c:52:48:39:5e:5b:8f:22:9c:bb:a1:ea:b3:49:e8:79:d3:
         04:5e:13:35:f5:39:fd:fe:8d:5e:47:78:9e:52:85:00:fc:b5:
         38:d9:ee:4f:47:e4:58:47:41:3d:1a:ad:11:51:2c:ec:86:3b:
         97:cc:7e:5e:da:6d:eb:70:c1:31:ca:2d:83:41:2f:25:ba:76:
         14:66:33:20:b7:be:05:f5:c2:f7:7c:eb:07:71:4c:08:32:88:
         98:e9:1a:f0:88:a3:f9:22:be:8e:fd:47:79:20:45:19:f3:84:
         5b:90:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----