Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9cf93945ff16810f20a614db9c10e64f17f13973.roa
File:                     9cf93945ff16810f20a614db9c10e64f17f13973.roa (raw, json)
Hash identifier:          blFAOazTgZ40Tk3oGnQniVjJJTqDDXgVoUF4DvLneJU=
Subject key identifier:   61:A1:74:03:F3:65:DF:56:64:1B:9E:76:CA:6F:8D:80:A2:47:B1:53
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F7B0E
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9cf93945ff16810f20a614db9c10e64f17f13973.roa
Signing time:             Wed 24 Mar 2021 14:43:52 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:6011::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1014542 (0xf7b0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=9cf93945ff16810f20a614db9c10e64f17f13973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:02:d4:e8:c4:86:7e:2d:81:b0:45:c3:c4:
                    cb:92:f9:d5:eb:db:6d:bb:72:dc:32:f9:af:32:d5:
                    99:2f:46:2f:30:c6:5d:b7:0c:f3:ba:c3:4b:46:fd:
                    65:62:18:8a:0e:bb:86:4a:90:04:ff:47:af:95:99:
                    32:5e:61:be:bb:96:36:02:e5:75:34:43:a4:64:fa:
                    30:5e:6d:21:61:d4:d8:d8:03:e4:bc:a3:b0:2c:00:
                    93:86:ea:8d:c5:c1:92:3c:f8:17:ad:a9:6b:6d:fa:
                    da:c9:7a:fa:65:5a:9b:3c:2e:d7:a3:50:9a:61:19:
                    f5:c4:f8:ff:e7:c8:1d:b2:bb:07:94:e9:4e:1e:db:
                    55:01:18:4a:86:e2:3a:1a:69:9f:41:70:94:41:eb:
                    44:74:27:d1:9b:da:91:5e:37:2d:63:6f:4b:8f:db:
                    12:15:cb:68:b6:38:f0:01:63:7a:52:9a:45:ca:be:
                    49:eb:3c:4e:7e:b8:46:75:af:9b:76:86:66:35:d7:
                    41:b7:75:9a:69:1e:be:b8:8a:c2:50:d8:1c:09:e4:
                    63:45:3d:03:81:0b:a5:e3:86:be:59:fa:59:a1:02:
                    ed:6f:2a:fa:08:cf:41:2d:80:7e:88:0c:92:25:f5:
                    96:6b:e1:fa:13:e6:60:c4:49:1c:65:1f:02:5b:c5:
                    e0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A1:74:03:F3:65:DF:56:64:1B:9E:76:CA:6F:8D:80:A2:47:B1:53
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9cf93945ff16810f20a614db9c10e64f17f13973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6011::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:32:71:10:90:30:8e:27:27:6c:42:36:cd:eb:ed:00:86:09:
         10:34:ba:b9:b7:ac:08:1e:54:35:b1:0e:c1:7b:dc:b4:0d:0f:
         3a:c8:6f:f1:f7:59:67:24:bd:de:b5:f9:a8:df:70:ba:bc:82:
         ec:09:84:77:4b:2a:5f:c4:fe:31:67:33:a4:97:f1:16:25:de:
         3d:ab:c7:0f:33:7c:bc:0d:fb:1f:5d:21:98:69:fe:71:2a:ac:
         61:f9:a9:d5:90:70:2a:ea:e2:bc:06:4d:c5:95:93:fd:f1:30:
         c2:5f:88:98:ca:95:48:2a:a5:15:fa:c9:8e:b9:07:af:0c:88:
         e6:5d:4c:d8:bd:8e:e7:cf:ec:5b:b5:22:77:55:11:bb:ff:0a:
         b8:d3:ed:cd:fb:46:68:d3:df:a2:6b:d0:15:41:bf:bf:7c:9d:
         79:36:74:1f:ed:0d:10:d2:0d:ba:0b:09:b9:b7:8a:35:52:d3:
         5d:ea:5e:7d:d9:4e:b5:63:37:22:a8:82:62:52:07:df:3e:74:
         70:42:28:d6:a4:f9:1b:e2:63:43:75:22:a9:12:e2:86:ab:de:
         5a:03:a6:92:dd:04:56:79:d5:00:a3:ab:1c:f5:f0:c7:9f:54:
         3c:1e:f1:65:fc:41:2a:20:7a:65:a3:cc:24:b2:cd:8b:5d:87:
         1b:55:d1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----