Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/aaa51357b496b65dfe8120413b2d68cb19679850.roa
File:                     aaa51357b496b65dfe8120413b2d68cb19679850.roa (raw, json)
Hash identifier:          rhAcF6eWYf0K4E37DA5tH5GnWC/fF7AbKGk8wSsePEM=
Subject key identifier:   96:94:03:55:B9:3F:47:98:F5:48:6A:A1:2D:3D:FB:29:04:35:82:FD
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1362C2
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/aaa51357b496b65dfe8120413b2d68cb19679850.roa
Signing time:             Wed 23 Jun 2021 17:55:11 +0000
ROA not before:           Wed 23 Jun 2021 03:00:00 +0000
ROA not after:            Fri 23 Jun 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6022::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1270466 (0x1362c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Jun 23 03:00:00 2021 GMT
            Not After : Jun 23 03:00:00 2023 GMT
        Subject: CN=aaa51357b496b65dfe8120413b2d68cb19679850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8d:eb:b0:f3:69:c5:c5:6b:ad:50:f9:9a:8d:
                    34:7b:59:1e:95:7f:48:5e:8a:7d:fb:af:59:37:90:
                    6c:6a:47:a1:2b:c6:c1:0c:66:e5:30:70:79:0e:05:
                    04:12:8a:85:0a:c8:11:5d:2c:a1:3f:b9:e6:30:85:
                    7a:e7:a9:ee:e2:d0:38:ce:7d:ce:c4:a2:bf:10:e0:
                    4c:80:70:ed:45:72:07:46:e7:3a:02:36:ea:c0:21:
                    99:ce:c3:cf:b8:4a:94:af:0d:30:a7:ca:6d:e0:e3:
                    fa:ad:5d:e5:38:12:73:30:e7:4d:e9:d3:6f:40:ed:
                    16:39:b2:f9:f0:96:e4:dd:13:92:54:48:eb:c5:8e:
                    5a:5c:e1:9e:a1:2d:81:47:08:32:88:0b:3b:11:8f:
                    b5:4c:c7:b1:9a:92:c1:c8:d1:58:4a:7b:c1:c0:8f:
                    8b:b9:b6:2f:08:b9:25:c9:61:f9:da:16:f5:e8:99:
                    7c:7e:74:0c:e3:1d:97:72:26:85:d3:e5:ef:8f:bb:
                    7f:af:99:35:a6:63:b6:81:b6:1d:fa:d8:8f:6b:a7:
                    60:fd:13:93:37:04:87:d2:ab:bf:11:52:9d:33:85:
                    b9:7f:dd:01:98:fe:0e:69:2e:20:ce:ed:9b:08:14:
                    1b:b5:b0:64:13:5b:de:b2:a7:e0:cd:33:3b:72:1b:
                    5c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:94:03:55:B9:3F:47:98:F5:48:6A:A1:2D:3D:FB:29:04:35:82:FD
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/aaa51357b496b65dfe8120413b2d68cb19679850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6022::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:3f:11:d5:7a:b2:bf:41:fa:e7:46:e3:08:a4:21:ff:08:03:
         3f:6b:44:f0:83:83:d3:32:61:4e:a8:a6:43:73:a0:3e:25:9b:
         67:c5:06:2b:25:92:ff:4e:89:4c:b6:52:1d:50:ce:61:8d:23:
         ec:e0:f0:8a:74:5d:ef:be:fe:e5:d2:f5:89:79:c6:fb:4b:54:
         d8:20:c0:28:a2:27:64:9c:61:a1:ad:be:11:f6:d7:53:c2:82:
         05:4b:66:2c:c8:d6:cd:2b:f7:18:a4:1d:a1:57:a4:cf:94:64:
         34:b1:3c:b3:d4:bb:64:3b:5f:19:cb:15:63:f8:f0:d3:f3:76:
         dd:76:8c:06:18:49:51:bb:36:ef:bd:96:63:af:23:3d:c9:1e:
         6b:9b:c4:f5:60:57:e1:48:df:1a:d5:68:5d:0c:ce:30:bf:fb:
         7b:5e:17:50:f7:3f:24:28:2c:66:59:9c:d4:ef:4e:0d:7f:82:
         fc:ee:09:17:46:b3:4f:91:29:4c:13:cd:02:28:d0:59:60:24:
         5e:b2:56:dd:0f:5a:80:e3:38:96:6e:63:fa:48:ad:92:b5:99:
         a0:4c:49:2b:71:dd:09:43:ee:a8:93:99:86:43:8a:af:d4:fd:
         75:40:86:40:55:6e:f2:93:f6:b9:80:3b:e4:60:cf:e7:c7:bd:
         45:ca:45:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----