Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b5a82ed65c360aeac7ea4ab1d312c93955c8aafc.roa
File:                     b5a82ed65c360aeac7ea4ab1d312c93955c8aafc.roa (raw, json)
Hash identifier:          g0gz8nQHbQ01HQqT51hmZrkJ3UX4GlOI8ickILLTZcg=
Subject key identifier:   B1:29:F3:A8:0F:28:FF:81:7C:AC:49:F0:B3:17:E8:E3:52:90:F7:9F
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       152E06
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b5a82ed65c360aeac7ea4ab1d312c93955c8aafc.roa
Signing time:             Wed 18 Aug 2021 19:13:09 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:603f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1388038 (0x152e06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=b5a82ed65c360aeac7ea4ab1d312c93955c8aafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4a:34:e0:b9:12:f9:e5:39:07:65:3e:29:4d:
                    1e:e3:15:7e:e8:fc:6e:48:51:39:98:9b:19:44:0d:
                    0f:12:16:3a:69:63:8d:18:45:81:02:81:39:54:a7:
                    b5:12:cb:8e:9f:87:1a:19:29:a9:34:e7:24:09:99:
                    2d:75:f4:5a:d9:32:d9:22:96:13:63:24:bb:49:66:
                    43:dd:2c:1c:5c:ab:96:2d:ae:10:04:11:57:3d:b6:
                    ba:c5:e0:a3:64:d5:3a:f3:11:be:03:20:5d:67:e5:
                    24:22:f6:87:41:bb:0c:27:8a:53:eb:36:90:5a:74:
                    f5:2b:bf:a1:69:af:54:0a:e4:d9:b6:1a:47:35:fc:
                    ec:c0:f1:2a:a7:7d:4c:be:ec:f5:a9:3d:fa:73:07:
                    73:96:53:90:9c:38:a3:10:67:e0:48:da:e9:c1:0c:
                    d5:ff:17:53:10:59:5a:29:18:d2:e0:0d:78:4d:72:
                    75:5e:d1:ea:b5:1b:ae:7e:2f:2a:8c:c8:90:b2:77:
                    e9:43:29:a0:af:66:0c:96:32:b4:89:84:60:b9:6e:
                    e6:49:24:1f:be:6c:4f:1c:56:df:88:57:11:a7:bd:
                    23:5b:af:a7:d2:23:4c:34:ac:54:21:8f:ef:af:29:
                    83:cc:28:bd:55:97:54:8c:18:b4:db:d0:44:06:4f:
                    7c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:29:F3:A8:0F:28:FF:81:7C:AC:49:F0:B3:17:E8:E3:52:90:F7:9F
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b5a82ed65c360aeac7ea4ab1d312c93955c8aafc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:603f::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:24:11:de:c0:3a:d8:39:8e:83:81:ca:9e:1e:d4:96:db:45:
         45:64:f1:ee:e9:08:56:0e:1e:ae:0a:61:70:e9:bb:74:01:92:
         e0:c8:29:8d:94:a0:ff:91:90:1e:08:37:54:b9:4e:a7:4e:02:
         6a:34:08:16:77:d2:9b:21:28:1f:c9:4c:e6:9d:a9:63:3a:21:
         54:76:a8:14:b1:f4:99:e6:25:1b:02:24:11:b2:a7:79:e5:ea:
         21:64:11:b8:fe:f6:2c:bf:36:af:ca:d5:dc:13:6e:10:c5:cd:
         29:51:81:49:27:ec:51:42:8c:fa:bf:00:5e:72:79:bf:32:40:
         08:f0:4b:bc:e7:23:a6:43:a4:7b:72:4e:e4:48:02:c8:9f:8b:
         19:97:3c:4f:82:f7:29:2e:0d:32:a1:a1:71:96:09:a8:21:ce:
         45:1e:c3:8c:d5:16:d2:f0:56:95:03:a9:87:8e:c2:d5:2c:b4:
         8d:49:86:13:db:7b:b4:7b:96:72:90:03:1a:b2:06:4a:12:c5:
         8a:59:e7:dd:d2:11:dd:04:d8:a9:d1:0b:c9:a2:a7:ed:8d:75:
         2d:2e:3e:70:ca:27:4f:fd:a6:1d:79:0b:e1:34:09:39:83:69:
         97:ba:74:7b:8b:73:f3:3b:27:40:b4:ba:83:77:7f:24:8f:cd:
         09:9b:c1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----