Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/cffe29da3d814e859613ac0ba45853acea75366c.roa
File:                     cffe29da3d814e859613ac0ba45853acea75366c.roa (raw, json)
Hash identifier:          pp0OK6Z2yIcspsRSwI/j9CB9IyV1bCTFybWuAZ5QdSM=
Subject key identifier:   44:19:28:96:41:DB:38:DB:D5:F6:88:DF:EF:21:9D:BA:08:B6:84:30
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       151171
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/cffe29da3d814e859613ac0ba45853acea75366c.roa
Signing time:             Wed 18 Aug 2021 17:44:08 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6038::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1380721 (0x151171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=cffe29da3d814e859613ac0ba45853acea75366c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:83:16:f7:b7:e6:57:b3:ea:1a:ae:3b:e5:
                    34:72:89:e0:3c:5f:92:3b:f6:38:51:ef:aa:26:69:
                    20:26:2c:65:e7:29:38:d0:aa:1b:fe:ba:56:ba:c5:
                    39:fc:06:0f:28:3a:3c:f8:ca:72:53:c9:40:27:e5:
                    77:2f:13:16:5f:e4:dd:45:a5:01:de:17:29:b1:7e:
                    d1:41:5b:32:6a:19:cc:a1:37:5a:42:9e:68:a2:ac:
                    4f:c2:71:fc:e4:72:0a:80:a8:3f:64:a7:8f:50:01:
                    ab:90:8a:a9:1f:3b:74:0c:10:a3:c6:02:f5:d1:d1:
                    5c:b4:06:c9:f7:94:4d:09:6b:92:06:ea:dd:1b:ca:
                    aa:66:3f:f9:b3:e9:04:bf:90:3a:a4:43:13:74:8a:
                    6d:fa:18:f2:75:6b:7e:d7:e3:cc:ae:d2:8e:27:e9:
                    a0:c2:af:99:d1:6e:a2:bb:c7:8a:f9:48:bb:cf:f2:
                    60:41:35:d3:4a:1a:a1:87:f4:ae:38:eb:54:d7:4f:
                    85:ed:92:ef:89:bd:60:b5:3e:f9:6d:2b:50:ee:20:
                    ba:9b:ba:88:7f:4f:ca:02:3f:a9:4c:72:64:41:98:
                    6e:e3:91:53:f8:93:cc:96:41:3f:dc:a3:28:76:90:
                    66:6d:1c:cb:14:95:21:7e:b5:96:98:5c:5b:d3:f0:
                    44:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:19:28:96:41:DB:38:DB:D5:F6:88:DF:EF:21:9D:BA:08:B6:84:30
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/cffe29da3d814e859613ac0ba45853acea75366c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6038::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:37:65:9e:61:97:55:2c:96:d0:e5:bf:52:0f:ad:6d:37:fc:
         10:5f:1a:0f:ac:7d:a2:1a:48:07:c5:18:0a:65:cf:c6:1f:75:
         f0:71:4f:32:8e:30:d4:01:8c:7c:b6:13:32:cc:ca:0e:da:61:
         e7:ab:8f:62:d7:61:f6:7d:9d:a5:f1:5e:f6:05:cd:cf:a6:25:
         3c:13:9a:ec:aa:e1:2b:bd:02:b0:f0:c5:94:d6:50:22:48:4a:
         ca:98:81:0a:c5:23:e6:dd:59:d3:fa:4e:20:26:2f:14:c8:5f:
         3a:a8:0d:91:9d:a1:98:da:5a:18:9b:a3:82:d3:1d:cf:91:79:
         5f:fb:e1:9b:0a:7d:53:51:1b:15:71:9a:4a:56:e9:91:9f:0c:
         d4:25:55:1f:9c:89:24:0c:82:16:6e:b7:6c:7b:0b:48:8b:b7:
         a6:88:e0:45:ee:91:32:8a:c0:2f:75:fb:7c:0a:c3:9d:19:99:
         f4:19:8f:7f:c9:ca:31:05:68:77:2b:c7:0c:85:a8:39:01:74:
         96:ce:c2:39:5c:c0:d0:93:f0:16:99:af:e7:5f:33:85:c0:fb:
         30:23:bc:00:ae:2e:be:7b:14:c1:74:c0:0a:b7:8f:07:6f:ba:
         42:17:11:c1:cb:1d:45:c7:f3:f7:f1:d9:5b:5f:b9:d2:f3:1d:
         99:e8:52:3a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDFRFxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwODE4
MDMwMDAwWhcNMjMwODE4MDMwMDAwWjAzMTEwLwYDVQQDEyhjZmZlMjlkYTNkODE0
ZTg1OTYxM2FjMGJhNDU4NTNhY2VhNzUzNjZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsOODFve35lez6hquO+U0congPF+SO/Y4Ue+qJmkgJixl5yk4
0Kob/rpWusU5/AYPKDo8+MpyU8lAJ+V3LxMWX+TdRaUB3hcpsX7RQVsyahnMoTda
Qp5ooqxPwnH85HIKgKg/ZKePUAGrkIqpHzt0DBCjxgL10dFctAbJ95RNCWuSBurd
G8qqZj/5s+kEv5A6pEMTdIpt+hjydWt+1+PMrtKOJ+mgwq+Z0W6iu8eK+Ui7z/Jg
QTXTShqhh/SuOOtU10+F7ZLvib1gtT75bStQ7iC6m7qIf0/KAj+pTHJkQZhu45FT
+JPMlkE/3KModpBmbRzLFJUhfrWWmFxb0/BEVQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFEQZKJZB2zjb1faI3+8hnboItoQwMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4L2NmZmUyOWRhM2Q4MTRlODU5NjEzYWMwYmE0NTg1M2FjZWE3NTM2NmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABEhhgODANBgkqhkiG9w0BAQsFAAOCAQEAmTdlnmGXVSyW
0OW/Ug+tbTf8EF8aD6x9ohpIB8UYCmXPxh918HFPMo4w1AGMfLYTMszKDtph56uP
Ytdh9n2dpfFe9gXNz6YlPBOa7KrhK70CsPDFlNZQIkhKypiBCsUj5t1Z0/pOICYv
FMhfOqgNkZ2hmNpaGJujgtMdz5F5X/vhmwp9U1EbFXGaSlbpkZ8M1CVVH5yJJAyC
Fm63bHsLSIu3pojgRe6RMorAL3X7fArDnRmZ9BmPf8nKMQVodyvHDIWoOQF0ls7C
OVzA0JPwFpmv518zhcD7MCO8AK4uvnsUwXTACrePB2+6QhcRwcsdRcfz9/HZW1+5
0vMdmehSOg==
-----END CERTIFICATE-----