Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ea18456b857fbccc6e41ca60757dae3213345e35.roa
File:                     ea18456b857fbccc6e41ca60757dae3213345e35.roa (raw, json)
Hash identifier:          QGCTWBAdG71R8gayKgyDFJHDq4X/r7PL1ik4wGk4fQg=
Subject key identifier:   BF:28:C2:4D:76:F3:2B:C2:8C:4A:3D:10:85:78:B0:3E:31:A9:87:5E
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       260B39
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ea18456b857fbccc6e41ca60757dae3213345e35.roa
Signing time:             Thu 11 May 2023 08:30:24 +0000
ROA not before:           Wed 10 May 2023 08:30:24 +0000
ROA not after:            Fri 09 May 2025 08:30:24 +0000
asID:                     278
IP address blocks:        2001:1218:601c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2493241 (0x260b39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: May 10 08:30:24 2023 GMT
            Not After : May  9 08:30:24 2025 GMT
        Subject: CN=ea18456b857fbccc6e41ca60757dae3213345e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a4:0b:b6:9c:72:ef:04:e5:62:1c:d7:aa:62:
                    09:37:eb:a2:cc:0d:eb:af:cc:20:b4:cd:15:91:81:
                    40:16:0d:f2:90:46:f7:07:a9:13:ac:df:c6:ab:6c:
                    2d:bd:2a:59:7c:8b:c8:67:01:29:32:e8:67:69:53:
                    68:2b:84:10:94:2d:86:db:4d:fa:ba:c9:e1:60:9e:
                    74:c7:cc:80:a7:44:71:27:87:59:b2:34:4b:2a:f7:
                    2f:97:fb:5a:61:e8:a7:75:10:c4:1f:a3:ba:7b:e7:
                    6c:66:79:2d:f9:ce:5f:73:85:2d:36:08:d5:5e:4d:
                    59:18:cf:bc:96:eb:97:16:5f:7c:95:0b:b2:85:65:
                    14:bf:2e:63:66:c2:41:ec:fd:a5:ea:1a:26:82:59:
                    55:23:a3:9a:37:dd:1f:51:9f:2f:c5:1d:37:06:14:
                    b3:0f:b1:71:5c:c2:2f:19:f6:91:eb:c0:70:2e:35:
                    7d:95:1f:2e:e9:53:82:c5:11:e6:e2:50:b7:2b:1b:
                    68:54:8d:be:41:58:3d:e5:f8:b4:cb:51:0a:90:b6:
                    c0:4f:23:96:ae:fd:b3:c7:45:d4:c5:93:b6:9b:47:
                    7a:8c:d2:1c:79:b8:71:e1:04:dd:13:4e:79:38:cf:
                    ca:71:58:7c:65:34:5f:12:dd:4c:36:98:ab:6a:9e:
                    9f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:28:C2:4D:76:F3:2B:C2:8C:4A:3D:10:85:78:B0:3E:31:A9:87:5E
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ea18456b857fbccc6e41ca60757dae3213345e35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:601c::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:66:5f:1c:5a:fa:b1:9b:1d:e2:92:8c:3e:1a:db:79:ba:3d:
         a7:79:bc:10:4e:e4:5a:d7:be:70:f7:d9:bd:09:62:94:80:71:
         42:a6:bd:15:6e:18:b5:15:5d:16:2d:5e:a2:96:79:06:87:b7:
         b5:b1:a2:f7:c8:83:75:fe:9a:42:ed:bd:29:f1:1d:7b:7e:a8:
         9d:d8:26:e1:24:8d:27:99:60:cf:38:e2:78:4e:04:77:35:ad:
         02:4c:33:d2:f6:cb:28:d5:e5:18:39:91:d7:e5:e4:16:c2:56:
         60:7a:3f:43:ee:46:51:36:ca:fa:41:32:3a:7d:4f:5f:22:3b:
         35:97:92:ba:e5:8d:e9:95:3b:31:02:e2:62:f8:a3:14:a3:15:
         09:20:70:aa:3f:83:de:a6:84:17:9e:f4:b5:d7:b0:e9:24:85:
         2e:f2:a7:52:66:59:52:5e:ac:31:df:2f:7a:bc:cc:74:62:69:
         91:e7:4a:e5:32:ea:03:38:38:8e:ff:f4:15:2d:23:62:5c:c9:
         71:bd:cb:78:87:7b:da:f5:d2:57:f4:14:55:49:0a:fd:c7:ad:
         52:20:dd:54:c0:c1:ea:91:5b:b7:85:18:fe:f4:1a:08:21:11:
         6b:4d:0e:13:24:82:5c:75:25:bc:4e:63:40:4c:88:e4:a0:52:
         e1:ae:73:b4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDJgs5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjMwNTEw
MDgzMDI0WhcNMjUwNTA5MDgzMDI0WjAzMTEwLwYDVQQDEyhlYTE4NDU2Yjg1N2Zi
Y2NjNmU0MWNhNjA3NTdkYWUzMjEzMzQ1ZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkKQLtpxy7wTlYhzXqmIJN+uizA3rr8wgtM0VkYFAFg3ykEb3
B6kTrN/Gq2wtvSpZfIvIZwEpMuhnaVNoK4QQlC2G2036usnhYJ50x8yAp0RxJ4dZ
sjRLKvcvl/taYeindRDEH6O6e+dsZnkt+c5fc4UtNgjVXk1ZGM+8luuXFl98lQuy
hWUUvy5jZsJB7P2l6homgllVI6OaN90fUZ8vxR03BhSzD7FxXMIvGfaR68BwLjV9
lR8u6VOCxRHm4lC3KxtoVI2+QVg95fi0y1EKkLbATyOWrv2zx0XUxZO2m0d6jNIc
ebhx4QTdE055OM/KcVh8ZTRfEt1MNpirap6fxwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFL8owk128yvCjEo9EIV4sD4xqYdeMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4L2VhMTg0NTZiODU3ZmJjY2M2ZTQxY2E2MDc1N2RhZTMyMTMzNDVlMzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABEhhgHDANBgkqhkiG9w0BAQsFAAOCAQEAm2ZfHFr6sZsd
4pKMPhrbebo9p3m8EE7kWte+cPfZvQlilIBxQqa9FW4YtRVdFi1eopZ5Boe3tbGi
98iDdf6aQu29KfEde36ondgm4SSNJ5lgzzjieE4EdzWtAkwz0vbLKNXlGDmR1+Xk
FsJWYHo/Q+5GUTbK+kEyOn1PXyI7NZeSuuWN6ZU7MQLiYvijFKMVCSBwqj+D3qaE
F570tdew6SSFLvKnUmZZUl6sMd8verzMdGJpkedK5TLqAzg4jv/0FS0jYlzJcb3L
eId72vXSV/QUVUkK/cetUiDdVMDB6pFbt4UY/vQaCCERa00OEySCXHUlvE5jQEyI
5KBS4a5ztA==
-----END CERTIFICATE-----