Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b8d7d337de6574e7061836c5b2b301de8b688737.roa
File:                     b8d7d337de6574e7061836c5b2b301de8b688737.roa (raw, json)
Hash identifier:          b0SLqu4CtuqaNhvgTb2cYev2HCsbtFLwwQsgV0o55Y8=
Subject key identifier:   4C:DC:8A:C0:38:55:56:52:0D:AF:AD:F2:94:2F:77:75:A0:22:F0:F1
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       14E924
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b8d7d337de6574e7061836c5b2b301de8b688737.roa
Signing time:             Wed 18 Aug 2021 16:55:36 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:602f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1370404 (0x14e924)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=b8d7d337de6574e7061836c5b2b301de8b688737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:17:fb:b0:c7:a2:e2:89:1e:0f:44:c8:b4:ba:
                    f3:30:6f:e4:cf:af:25:60:3a:6b:dc:c0:79:7a:3f:
                    59:2d:33:c8:33:12:04:9f:39:fa:b0:63:e7:b0:db:
                    80:82:a9:21:80:cf:f0:a8:12:9b:ee:69:e0:3f:b2:
                    48:29:d6:30:1d:03:cc:93:db:4c:d2:47:91:c8:02:
                    7c:84:17:a5:58:a5:4e:a6:08:47:f6:b4:b9:88:6f:
                    e6:e1:ba:45:73:8f:33:ca:f2:2a:eb:2d:14:1e:71:
                    e8:b8:be:03:aa:ea:58:c7:b4:cf:d8:04:5c:e3:e1:
                    c0:fd:b5:cb:b3:a9:de:af:e5:3d:79:40:8a:34:24:
                    72:9a:34:28:3d:40:5a:f4:d4:d9:ca:25:8a:79:15:
                    13:a0:a6:16:a6:a1:ed:38:bf:88:c8:f3:ee:fb:27:
                    4c:a0:45:56:a5:e1:c2:8e:ea:66:90:f4:9f:79:8c:
                    76:9f:9b:e1:ed:49:b2:10:57:20:b2:ea:77:2d:34:
                    a9:86:6a:18:be:eb:a9:25:e3:c2:34:8d:83:0a:ba:
                    a4:17:07:72:4a:68:44:16:67:9f:35:a6:53:bc:e0:
                    d6:58:8b:7b:9b:aa:76:cf:74:da:58:ce:0c:03:2e:
                    8b:02:a0:b8:36:8e:f9:61:a0:a1:ec:8a:74:51:8a:
                    a1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DC:8A:C0:38:55:56:52:0D:AF:AD:F2:94:2F:77:75:A0:22:F0:F1
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b8d7d337de6574e7061836c5b2b301de8b688737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:602f::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:fc:9d:bb:40:31:fb:24:d7:ee:01:2e:51:82:05:04:a9:97:
         41:93:04:64:ca:aa:20:f8:b5:37:5e:eb:1b:1c:29:52:86:6e:
         26:56:2c:2c:e9:3c:0f:73:c7:86:c1:19:2c:86:de:31:50:9d:
         5a:78:98:ae:85:80:77:e0:30:27:e5:b8:07:c5:80:38:50:f6:
         02:f1:c1:33:a2:d8:71:c8:ee:3f:ce:0d:4a:f4:8e:c9:59:91:
         42:01:3a:b6:a3:1e:f5:ab:d6:00:20:37:26:ed:ec:02:32:91:
         ff:dd:cd:31:59:d0:04:03:96:23:04:c9:b8:e9:2b:d7:3b:40:
         87:89:50:ea:4e:f1:94:5a:61:e6:af:8f:52:b1:1e:37:b0:0b:
         35:28:ef:eb:2a:99:9f:99:c0:4f:1b:b9:5b:79:6d:99:61:c3:
         80:25:02:3a:6c:fc:36:09:63:74:50:83:64:11:fa:9e:f2:7f:
         ae:d5:ba:eb:a7:de:84:ef:00:6b:d2:90:9c:6a:57:2b:64:cb:
         57:55:c5:97:73:e1:83:3a:57:75:1d:ee:4b:9f:70:ec:57:74:
         f5:fb:f5:11:01:5d:6c:50:83:98:4c:ef:d4:4b:ec:3a:f5:f3:
         ed:ea:15:51:ed:5c:9b:2f:22:60:82:1b:06:4e:b9:ff:cf:3e:
         71:74:dc:ad
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDFOkkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwODE4
MDMwMDAwWhcNMjMwODE4MDMwMDAwWjAzMTEwLwYDVQQDEyhiOGQ3ZDMzN2RlNjU3
NGU3MDYxODM2YzViMmIzMDFkZThiNjg4NzM3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnBf7sMei4okeD0TItLrzMG/kz68lYDpr3MB5ej9ZLTPIMxIE
nzn6sGPnsNuAgqkhgM/wqBKb7mngP7JIKdYwHQPMk9tM0keRyAJ8hBelWKVOpghH
9rS5iG/m4bpFc48zyvIq6y0UHnHouL4DqupYx7TP2ARc4+HA/bXLs6ner+U9eUCK
NCRymjQoPUBa9NTZyiWKeRUToKYWpqHtOL+IyPPu+ydMoEVWpeHCjupmkPSfeYx2
n5vh7UmyEFcgsup3LTSphmoYvuupJePCNI2DCrqkFwdySmhEFmefNaZTvODWWIt7
m6p2z3TaWM4MAy6LAqC4No75YaCh7Ip0UYqhjQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFEzcisA4VVZSDa+t8pQvd3WgIvDxMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4L2I4ZDdkMzM3ZGU2NTc0ZTcwNjE4MzZjNWIyYjMwMWRlOGI2ODg3Mzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABEhhgLzANBgkqhkiG9w0BAQsFAAOCAQEAFvydu0Ax+yTX
7gEuUYIFBKmXQZMEZMqqIPi1N17rGxwpUoZuJlYsLOk8D3PHhsEZLIbeMVCdWniY
roWAd+AwJ+W4B8WAOFD2AvHBM6LYccjuP84NSvSOyVmRQgE6tqMe9avWACA3Ju3s
AjKR/93NMVnQBAOWIwTJuOkr1ztAh4lQ6k7xlFph5q+PUrEeN7ALNSjv6yqZn5nA
Txu5W3ltmWHDgCUCOmz8NgljdFCDZBH6nvJ/rtW666fehO8Aa9KQnGpXK2TLV1XF
l3PhgzpXdR3uS59w7Fd09fv1EQFdbFCDmEzv1EvsOvXz7eoVUe1cmy8iYIIbBk65
/88+cXTcrQ==
-----END CERTIFICATE-----