Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c70f4034d9d5b8edd07d058cdaad156c9017863a.roa
File:                     c70f4034d9d5b8edd07d058cdaad156c9017863a.roa (raw, json)
Hash identifier:          iGWM1RseCQmd/MYeWWjB+64kTwJvmlZbKHM1f6Nz4QM=
Subject key identifier:   6A:E7:94:F0:6D:DF:51:38:5B:FF:82:E3:7C:DA:49:8A:91:C6:04:AE
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15E17B
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c70f4034d9d5b8edd07d058cdaad156c9017863a.roa
Signing time:             Thu 26 Aug 2021 22:28:45 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6061::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1433979 (0x15e17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=c70f4034d9d5b8edd07d058cdaad156c9017863a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:10:26:48:d5:6a:e5:da:31:9d:db:2d:ab:
                    6e:bb:64:24:0a:f1:d3:88:aa:7f:09:a6:30:61:42:
                    fc:44:fa:0d:fb:34:aa:52:65:b1:0f:25:ff:fa:e7:
                    66:25:be:be:b7:d2:f7:ab:eb:f0:6b:fb:b5:3b:31:
                    67:e4:ed:37:c4:6c:80:b8:4b:e8:57:85:d9:ec:47:
                    4d:de:b5:1f:d3:de:f3:8c:1d:f1:a0:ca:12:fd:74:
                    fe:bd:c6:94:b1:39:2c:e6:a6:f3:22:01:c5:d5:07:
                    26:b1:b7:77:aa:28:5b:d1:42:7a:77:bf:af:a4:a9:
                    fe:48:fe:15:55:f5:6b:6d:3c:94:60:2c:0b:09:6f:
                    d0:11:17:c4:8f:87:d6:23:ac:6e:3f:ac:69:69:14:
                    21:a5:70:46:da:7d:f9:5f:86:3b:7d:91:99:62:2c:
                    67:1a:65:e9:a8:00:da:90:9a:90:4d:08:68:c0:d2:
                    30:e9:c7:62:0e:03:3e:f3:75:6d:83:b1:f4:31:23:
                    25:c1:62:b2:3b:56:3d:95:69:a3:79:eb:77:bb:1d:
                    91:9f:a7:c0:5a:88:2f:6c:05:c4:96:81:8f:71:b8:
                    16:b8:ab:0c:ff:31:ed:8c:2e:69:6b:51:76:37:13:
                    1c:2b:7b:bf:70:2f:50:81:3e:d7:68:05:3e:39:7e:
                    93:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E7:94:F0:6D:DF:51:38:5B:FF:82:E3:7C:DA:49:8A:91:C6:04:AE
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c70f4034d9d5b8edd07d058cdaad156c9017863a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6061::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:7d:e5:3e:0e:7b:83:2a:5a:12:ef:b5:54:30:ed:c0:a2:24:
         d8:9f:6f:65:65:6f:eb:3f:1c:f0:7a:e7:de:bf:ac:69:2b:47:
         05:23:09:8d:f5:94:33:1e:25:05:6b:f6:de:15:51:bb:01:2c:
         72:f9:07:6f:1a:01:7f:81:ee:d6:dd:ae:7a:d7:de:44:9d:24:
         8e:ec:5a:31:a9:8d:3d:28:c6:e8:72:4d:08:bd:a9:b4:fe:d5:
         16:dc:2a:68:25:4d:a5:d7:8e:b7:c9:1a:b0:a4:a1:8b:35:b9:
         45:94:50:c5:8c:51:cc:3e:41:78:ad:9b:81:f2:23:0b:dd:dd:
         f3:08:f5:5c:1c:41:a8:a4:17:13:69:e9:6f:c9:33:c0:76:14:
         10:7f:78:27:3c:aa:d1:ad:60:14:50:9a:a5:ff:47:67:1c:64:
         98:58:2b:60:40:93:6d:59:e9:ac:8b:02:4e:8b:8a:30:83:d8:
         8b:1e:23:11:af:23:cd:1c:37:10:ff:16:08:9b:e0:ec:e6:7d:
         0e:c5:3a:29:43:ea:34:66:e3:57:19:ee:29:98:14:06:3c:0f:
         02:87:00:90:36:6b:88:8c:4a:33:41:6a:95:21:2a:ce:63:6d:
         2e:a2:8a:f0:9f:b2:63:72:3b:72:47:50:0d:cc:9d:5b:ec:11:
         c8:db:25:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----