Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c082eaad8fc8f39aebac96675907a1a55285aa2c.roa
File:                     c082eaad8fc8f39aebac96675907a1a55285aa2c.roa (raw, json)
Hash identifier:          PrSXd4QgM+v9lsLUEOR2xwbniF9bR3HeXRExL2tka2k=
Subject key identifier:   66:1F:E8:EE:23:27:14:56:8B:14:FF:BC:CC:62:D1:9F:0E:31:5C:F9
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15ECD7
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c082eaad8fc8f39aebac96675907a1a55285aa2c.roa
Signing time:             Thu 26 Aug 2021 22:47:11 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:60b3::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1436887 (0x15ecd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=c082eaad8fc8f39aebac96675907a1a55285aa2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7e:fb:f5:51:06:ec:c6:ae:b4:c3:b1:70:88:
                    3b:9e:35:ae:c5:ac:f8:a5:06:4c:46:6c:0c:47:61:
                    b3:fe:97:8c:f0:3c:06:04:10:0f:ff:b0:3f:f2:14:
                    5d:51:93:a2:d4:3b:1c:10:39:86:43:33:b7:ee:1e:
                    5e:e6:a4:bd:8e:a2:ca:79:21:af:f2:b8:c2:a8:e8:
                    5e:45:04:72:ef:20:5a:af:94:6f:5e:8d:d9:f4:b4:
                    b8:06:ff:0d:ef:60:94:28:75:16:89:99:81:ee:d0:
                    f0:f6:5e:d3:e0:40:7e:98:e5:32:76:61:5a:cf:58:
                    92:16:05:3e:82:7f:eb:10:0b:82:0e:af:f1:3c:3b:
                    1a:19:59:97:db:64:92:db:8f:c4:df:99:cb:66:f8:
                    12:b4:4f:0e:62:9f:9c:ba:a2:35:32:32:8a:93:2b:
                    69:9b:69:aa:48:7b:57:5f:76:f2:ae:87:a9:19:09:
                    63:47:86:c2:5f:86:ee:94:cf:f0:bb:95:18:61:f0:
                    7e:3b:84:06:dc:de:dd:c3:da:b2:17:16:5a:91:1a:
                    8c:b6:36:05:66:e6:1c:df:7a:28:2e:b4:b2:47:db:
                    d9:5f:4c:42:90:77:d1:e7:c3:f6:6e:88:87:d8:f2:
                    10:3c:95:8d:af:3b:c3:d7:2b:64:f5:fe:40:c1:31:
                    71:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1F:E8:EE:23:27:14:56:8B:14:FF:BC:CC:62:D1:9F:0E:31:5C:F9
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c082eaad8fc8f39aebac96675907a1a55285aa2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:60b3::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:76:16:b9:e7:f1:ec:76:88:32:11:b8:dc:2f:6e:8c:c6:39:
         80:3b:5d:b7:8e:55:4c:ec:36:a7:24:1f:c3:5d:21:3c:4c:7a:
         41:24:37:25:b8:10:23:66:10:e3:ef:ae:18:0f:7c:e1:d9:52:
         63:c1:b2:11:b1:47:15:c8:6f:53:5e:f4:92:5f:21:1c:46:0c:
         99:74:08:05:9d:65:f1:3b:b9:49:59:fb:35:0f:90:34:7a:ef:
         25:96:40:34:60:41:18:60:67:d9:e9:7a:31:ac:14:e5:fb:fa:
         de:f0:58:70:6c:a9:e9:4e:08:14:5e:56:6e:35:c1:b2:69:49:
         5f:47:b8:34:67:60:41:9d:4f:b0:c2:53:27:14:f5:6b:cf:b2:
         d8:cd:65:42:2b:70:b6:07:e2:6c:8c:2e:fa:55:2a:f8:91:9d:
         b2:b0:91:34:70:ad:1b:cb:b9:ba:44:70:60:62:91:42:fe:71:
         dd:44:67:18:6e:80:65:99:c8:2a:e5:e9:47:75:94:79:8a:b8:
         4c:f8:90:62:a7:23:16:ad:5b:16:45:fe:82:62:8c:b8:50:f0:
         e6:a5:b3:30:87:1f:67:95:77:de:c1:b2:ec:fc:c2:04:30:90:
         70:dd:30:51:4c:22:a1:bb:e3:16:9a:02:d7:33:13:b4:fd:10:
         41:37:d1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----