Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9b937e67aa275a9da36635290cb831b0fd75cc3d.roa
File:                     9b937e67aa275a9da36635290cb831b0fd75cc3d.roa (raw, json)
Hash identifier:          cflUy3Qil9+firN6zIRF58gBuJEXliC8tEsyp0gBzo0=
Subject key identifier:   E5:FC:29:4E:81:AB:CC:A9:B9:1B:9B:00:0D:BD:2D:38:E5:EA:C1:B1
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       17F119
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9b937e67aa275a9da36635290cb831b0fd75cc3d.roa
Signing time:             Wed 03 Nov 2021 23:58:06 +0000
ROA not before:           Wed 03 Nov 2021 02:00:00 +0000
ROA not after:            Fri 03 Nov 2023 02:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6021::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569049 (0x17f119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Nov  3 02:00:00 2021 GMT
            Not After : Nov  3 02:00:00 2023 GMT
        Subject: CN=9b937e67aa275a9da36635290cb831b0fd75cc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:02:a9:d1:df:50:a5:1f:22:33:18:df:d6:a9:
                    c8:ba:55:f5:61:3f:38:b3:a9:e7:91:5a:fb:de:34:
                    eb:bb:ca:c1:c4:d3:d7:e6:53:71:11:cc:60:f8:25:
                    da:8b:5a:2d:e0:69:f1:ce:5f:4f:45:17:61:ad:67:
                    18:24:33:fa:bc:60:f8:a7:38:54:bd:1c:1c:f7:33:
                    30:cd:9d:6b:28:5d:45:c1:4c:ef:c5:d5:b5:f1:af:
                    d3:10:e2:91:c8:cf:88:cd:2d:6a:aa:f5:02:a8:32:
                    59:2a:4a:24:8a:b0:95:0f:40:84:0a:8e:0a:f9:52:
                    ee:68:f9:f5:70:d5:4f:c7:1a:d6:28:a9:15:03:9e:
                    af:b9:93:10:eb:ab:19:d6:e0:71:08:e7:cb:f8:d3:
                    53:5f:89:16:3e:64:90:cb:57:16:ac:ef:2c:69:38:
                    86:15:35:01:0d:e8:85:df:4b:75:c0:21:64:12:20:
                    d2:51:88:52:88:67:9d:4b:ff:42:5e:c4:bd:e0:08:
                    78:86:b5:94:b9:72:9e:69:91:b8:34:e2:25:af:d0:
                    06:91:60:91:1b:7e:d1:9f:ac:87:75:7d:a5:b4:c7:
                    57:73:d4:06:c8:7d:28:86:df:ee:b8:38:44:8d:3d:
                    d0:84:d2:19:a4:33:00:a7:8d:69:90:95:2d:d4:92:
                    be:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FC:29:4E:81:AB:CC:A9:B9:1B:9B:00:0D:BD:2D:38:E5:EA:C1:B1
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9b937e67aa275a9da36635290cb831b0fd75cc3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6021::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:94:41:64:cc:88:d6:de:ca:3c:8f:da:2f:c6:34:8e:0e:04:
         95:b8:ee:64:a4:ec:bf:c1:3e:62:92:34:14:b6:e8:0a:ed:9b:
         91:28:37:ae:ee:16:86:92:81:63:00:60:5c:95:67:1b:0f:2a:
         80:07:9a:91:75:87:09:b5:81:00:90:4e:58:7a:83:79:f6:cc:
         23:b5:7a:f7:3a:ef:e8:1f:0c:e1:81:87:14:e5:e5:98:a2:97:
         78:3e:83:a4:10:bf:e7:b6:b9:09:56:81:65:1b:f8:e1:be:c8:
         0b:01:72:e3:59:8a:c5:86:54:62:79:60:94:f7:7e:91:8f:f0:
         98:5c:cd:dc:8c:13:e0:5c:d9:a2:84:1f:7a:a1:c8:5a:91:99:
         67:df:7e:f4:52:f6:36:1b:e9:2a:f8:81:1a:55:ef:e7:33:fd:
         53:52:13:a4:ac:7b:e6:ed:e8:4d:a7:bd:6c:06:df:d8:09:97:
         36:3e:d3:20:28:98:a6:bd:08:de:28:83:fa:25:17:71:ad:e6:
         37:6a:74:03:35:2f:de:96:17:2f:1b:9b:b9:aa:8a:3f:4a:17:
         a0:fa:33:65:8d:ef:77:e9:66:7a:60:c0:ba:08:82:cc:8e:f5:
         6e:23:70:47:c1:64:30:ab:22:da:3d:5f:09:ef:84:51:70:b1:
         33:a7:91:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----