Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e33cdfa5d151df263e2b39cf2292094809683b8a.roa
File:                     e33cdfa5d151df263e2b39cf2292094809683b8a.roa (raw, json)
Hash identifier:          zg4Nh63ss8Vo1Fg4pkZI5OnRg9gt6mx3LbvuabM9aMA=
Subject key identifier:   F1:1E:80:87:12:BC:F7:4D:FA:45:18:05:E6:F9:62:D5:1A:E0:EA:9D
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       154068
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e33cdfa5d151df263e2b39cf2292094809683b8a.roa
Signing time:             Wed 18 Aug 2021 19:40:52 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6045::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1392744 (0x154068)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=e33cdfa5d151df263e2b39cf2292094809683b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:13:ca:ef:3e:d5:91:09:78:d3:ef:15:c3:6c:
                    f3:14:ec:8f:3b:2f:0e:75:43:e2:06:67:db:5e:3c:
                    3a:cf:ef:94:ae:86:c7:68:fd:0c:3e:fc:23:bc:d5:
                    fa:ae:51:24:3c:7b:e3:d2:70:6a:c9:80:5a:91:3d:
                    f9:6b:a2:38:3c:ef:29:07:d9:b5:42:bc:0e:37:95:
                    62:7e:ec:32:03:dc:c0:19:af:aa:e4:6b:fd:47:8b:
                    4f:00:79:55:40:98:68:65:38:35:30:42:2d:d5:6a:
                    f6:68:74:f7:08:aa:6d:1a:9e:14:e1:9c:2c:61:2b:
                    af:9a:da:d2:cb:32:e0:02:95:30:9f:cf:72:69:f4:
                    34:84:08:a1:86:aa:90:06:88:ac:7b:18:ff:d6:3f:
                    be:ee:09:bc:5a:74:91:86:34:2b:00:c0:32:26:4b:
                    dd:92:75:04:85:dc:b1:9d:bf:ea:d1:bc:d8:f0:81:
                    25:e2:50:89:19:39:f8:38:20:be:62:a5:52:38:d4:
                    cd:c7:e5:4f:5b:c6:e2:2c:9a:4f:a8:4a:71:fb:b7:
                    74:97:0e:5b:92:c4:37:8d:6f:70:2e:76:37:9b:3d:
                    8b:36:f6:99:0f:48:8b:b4:39:96:a5:d1:ea:58:4f:
                    44:d3:36:af:0b:4f:a4:8c:e2:61:98:4c:10:45:4d:
                    e6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1E:80:87:12:BC:F7:4D:FA:45:18:05:E6:F9:62:D5:1A:E0:EA:9D
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e33cdfa5d151df263e2b39cf2292094809683b8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6045::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:67:f5:9a:e4:be:1c:1c:30:d3:96:13:72:b5:ef:5a:0a:d8:
         3b:49:99:1a:d8:89:5f:73:3a:cb:23:21:2c:4e:74:0e:0e:f7:
         1f:49:5e:9a:1f:e9:e4:1b:4e:3d:e4:30:58:24:82:b2:54:d0:
         f7:60:ca:fb:0c:41:37:38:9c:dc:1f:38:fc:73:3d:1c:64:b5:
         f2:3f:85:a3:cc:70:8f:7d:7a:38:4c:55:e9:9f:fb:aa:02:74:
         6b:8a:01:18:c8:29:5b:31:b8:f4:29:87:90:8e:64:0b:ed:48:
         2e:08:51:3f:ab:06:bd:eb:aa:21:01:b4:a5:11:5e:53:69:f7:
         5c:b0:4a:ed:b8:fc:1e:49:10:f1:35:81:3b:87:83:78:fa:19:
         80:fd:f0:aa:f9:56:fb:2a:2b:f5:33:e0:cf:2d:55:89:c1:41:
         06:a8:eb:f3:4a:e8:57:4d:3b:f5:b8:c8:d2:64:ec:16:e8:40:
         db:a0:4b:0a:1d:17:ee:25:69:6f:1e:55:2a:73:53:fd:8a:07:
         d0:07:87:80:a0:d3:db:a5:53:0c:71:93:13:79:c9:0f:0b:c9:
         d1:a3:ca:d1:03:f5:8f:0e:a4:0c:7b:62:12:14:17:1c:0e:1b:
         98:e2:97:1b:e8:69:12:b0:18:0a:67:66:03:36:bb:88:e8:21:
         6c:dc:71:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----