Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/bca2eaa700df63f97684a2a43a1f1e7bfd6ce966.roa
File:                     bca2eaa700df63f97684a2a43a1f1e7bfd6ce966.roa (raw, json)
Hash identifier:          3LlVYy9D3jn1Pb1U3JflL5S5737C3Q8ecHlpHIgLOio=
Subject key identifier:   24:5A:49:C5:49:1E:8B:CA:48:B3:00:E2:FC:B9:3B:4A:25:BD:6C:A2
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       151A66
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/bca2eaa700df63f97684a2a43a1f1e7bfd6ce966.roa
Signing time:             Wed 18 Aug 2021 17:50:38 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:603a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1383014 (0x151a66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=bca2eaa700df63f97684a2a43a1f1e7bfd6ce966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:51:e8:74:3d:43:c3:6d:e7:70:d3:21:df:7a:
                    97:3b:f6:42:48:a9:3b:2f:b6:86:3b:bf:21:1d:a6:
                    c1:79:bb:fc:9f:ca:1d:28:cd:2c:cf:27:63:bd:16:
                    a8:c9:73:fd:fe:46:a4:ea:f4:1e:90:1b:74:c3:4b:
                    9d:52:f2:b9:46:80:ac:1b:eb:94:8d:1b:34:ce:6d:
                    49:df:28:fc:1b:9b:b2:36:7b:bd:bb:0c:4a:85:91:
                    a3:43:42:e8:30:5e:18:29:d7:e5:3e:47:03:a6:f0:
                    0a:e0:36:a8:ec:1f:21:8e:08:9e:c9:3b:5e:58:a7:
                    ae:43:bf:25:63:52:83:fc:be:48:e4:c1:80:ec:6b:
                    45:a6:44:4c:2a:0f:cb:bd:f7:c7:27:d4:1e:96:f1:
                    5e:46:e7:8c:eb:1f:0a:46:d6:a2:2d:7e:c8:03:96:
                    be:e5:17:cd:95:17:28:03:44:fd:15:e2:fd:d1:53:
                    d0:d7:2c:5a:4e:88:52:fa:73:bb:c0:b5:9a:25:04:
                    16:5a:71:dc:bb:36:8e:55:37:0f:6b:3a:64:0f:07:
                    29:7f:d1:11:45:08:25:21:8a:46:82:cd:c2:8e:d2:
                    36:57:79:c2:b8:42:3f:32:cc:be:b4:50:4c:f2:34:
                    fe:8e:63:ba:1b:ef:23:d9:20:3c:8d:15:0a:e6:42:
                    9b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5A:49:C5:49:1E:8B:CA:48:B3:00:E2:FC:B9:3B:4A:25:BD:6C:A2
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/bca2eaa700df63f97684a2a43a1f1e7bfd6ce966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:603a::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:db:05:02:65:b4:3d:f0:8d:29:79:ae:a9:49:02:71:f5:c0:
         28:6c:a7:b2:8a:e6:aa:12:25:53:f1:e1:a3:d2:b9:ad:19:c8:
         42:58:84:af:a6:3f:72:63:33:1d:a4:78:11:60:4b:e5:86:fd:
         b1:85:a8:42:d0:48:05:45:1e:9b:ac:5f:14:1f:31:8f:66:9d:
         97:92:3e:32:49:8e:65:82:22:47:16:24:2c:19:d6:51:09:38:
         51:30:fb:2e:ae:26:14:e5:65:3a:ce:c8:c2:67:7d:16:02:7c:
         1c:99:cb:0b:ff:4c:f6:92:42:1f:13:65:a2:8a:c4:08:b8:a6:
         d5:6a:ce:69:ae:24:c4:ed:f9:46:be:71:99:09:bb:82:8a:04:
         fe:df:07:c5:28:82:e6:5b:36:35:89:f2:b1:16:5f:ef:c6:c0:
         ab:1b:0f:ae:c9:3d:ce:b0:a9:37:3c:c2:37:c3:df:94:97:57:
         60:ea:6a:46:2b:2c:b8:40:83:f0:c7:a2:70:8b:5b:af:00:0d:
         53:50:db:9e:14:25:3d:81:8c:6b:e8:f3:32:9a:a9:28:8f:c0:
         24:4c:1a:3b:e4:e6:8b:fe:56:3a:8d:d8:91:c4:8a:1e:8a:fe:
         ab:b5:41:4a:b6:59:44:12:59:2f:3a:b5:76:7f:3e:87:fc:f0:
         ea:37:9b:d4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDFRpmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwODE4
MDMwMDAwWhcNMjMwODE4MDMwMDAwWjAzMTEwLwYDVQQDEyhiY2EyZWFhNzAwZGY2
M2Y5NzY4NGEyYTQzYTFmMWU3YmZkNmNlOTY2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhFHodD1Dw23ncNMh33qXO/ZCSKk7L7aGO78hHabBebv8n8od
KM0szydjvRaoyXP9/kak6vQekBt0w0udUvK5RoCsG+uUjRs0zm1J3yj8G5uyNnu9
uwxKhZGjQ0LoMF4YKdflPkcDpvAK4Dao7B8hjgieyTteWKeuQ78lY1KD/L5I5MGA
7GtFpkRMKg/LvffHJ9QelvFeRueM6x8KRtaiLX7IA5a+5RfNlRcoA0T9FeL90VPQ
1yxaTohS+nO7wLWaJQQWWnHcuzaOVTcPazpkDwcpf9ERRQglIYpGgs3CjtI2V3nC
uEI/Msy+tFBM8jT+jmO6G+8j2SA8jRUK5kKb0QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFCRaScVJHovKSLMA4vy5O0olvWyiMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4L2JjYTJlYWE3MDBkZjYzZjk3Njg0YTJhNDNhMWYxZTdiZmQ2Y2U5NjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABEhhgOjANBgkqhkiG9w0BAQsFAAOCAQEAHdsFAmW0PfCN
KXmuqUkCcfXAKGynsormqhIlU/Hho9K5rRnIQliEr6Y/cmMzHaR4EWBL5Yb9sYWo
QtBIBUUem6xfFB8xj2adl5I+MkmOZYIiRxYkLBnWUQk4UTD7Lq4mFOVlOs7Iwmd9
FgJ8HJnLC/9M9pJCHxNloorECLim1WrOaa4kxO35Rr5xmQm7gooE/t8HxSiC5ls2
NYnysRZf78bAqxsPrsk9zrCpNzzCN8PflJdXYOpqRissuECD8MeicItbrwANU1Db
nhQlPYGMa+jzMpqpKI/AJEwaO+Tmi/5WOo3YkcSKHor+q7VBSrZZRBJZLzq1dn8+
h/zw6jeb1A==
-----END CERTIFICATE-----