Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/f8c349a96cdc8c4692c023b6e043699975e2f2fa.roa
File:                     f8c349a96cdc8c4692c023b6e043699975e2f2fa.roa (raw, json)
Hash identifier:          nkIL2yfbw6zmmWq9e3fcDzZqnSNVJKxwV5FbM8NhS2A=
Subject key identifier:   0C:BD:4A:D7:58:C7:93:56:A7:AB:1B:69:1B:20:6C:F4:1A:B0:9C:57
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       17FBF2
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/f8c349a96cdc8c4692c023b6e043699975e2f2fa.roa
Signing time:             Thu 04 Nov 2021 20:12:48 +0000
ROA not before:           Thu 04 Nov 2021 02:00:00 +0000
ROA not after:            Sat 04 Nov 2023 02:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6051::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1571826 (0x17fbf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Nov  4 02:00:00 2021 GMT
            Not After : Nov  4 02:00:00 2023 GMT
        Subject: CN=f8c349a96cdc8c4692c023b6e043699975e2f2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:60:fd:83:cb:20:6b:80:3c:29:3a:fa:3b:75:
                    86:dc:2d:2a:32:6d:76:36:77:de:b6:b9:ee:5b:79:
                    2f:f2:04:e1:1b:aa:f9:04:ee:91:31:c9:0f:4a:aa:
                    81:ad:d1:35:3f:da:70:9d:86:6b:2b:7f:c4:ef:ec:
                    1d:df:4e:bc:f5:89:b3:ad:dd:98:22:75:19:7e:de:
                    cd:54:91:6c:d5:07:62:6a:3f:61:12:94:b1:ae:8d:
                    a0:a7:bd:10:10:3d:82:03:7a:7f:f1:6f:68:3c:c4:
                    61:b1:9e:05:9a:ab:1f:3b:59:b9:25:b3:84:70:ac:
                    cf:55:ee:e1:fd:f1:7c:2a:b1:7f:d4:ae:da:b9:53:
                    00:2a:a2:2f:c2:cb:db:90:1c:34:1c:d1:f2:cf:a2:
                    38:0f:3a:ac:85:82:18:33:06:a5:01:96:40:fc:c2:
                    dd:e3:f2:9b:fb:5a:db:fc:4a:06:a3:5a:93:06:8e:
                    3b:23:4c:1b:6d:ca:59:22:94:1d:5f:e2:28:08:d7:
                    d4:f4:3d:5c:9f:44:c7:fc:ab:13:1d:a4:86:8e:d6:
                    dc:46:92:74:71:49:a6:d1:e7:f9:e3:4a:70:5f:20:
                    5c:2e:30:d8:59:8e:6a:fe:3a:5d:40:ff:02:25:79:
                    56:f6:31:31:2b:14:b2:76:d1:52:42:19:84:08:5b:
                    15:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BD:4A:D7:58:C7:93:56:A7:AB:1B:69:1B:20:6C:F4:1A:B0:9C:57
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/f8c349a96cdc8c4692c023b6e043699975e2f2fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6051::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:4c:8a:df:14:b8:ff:38:c9:58:9f:8b:6a:b6:ab:73:c4:ba:
         70:3a:53:5e:34:30:5c:ad:69:7d:5a:b7:c1:bd:d6:c3:5f:d4:
         c5:66:62:53:6e:8b:5e:dc:8c:38:aa:86:eb:d0:bd:6b:8f:b2:
         8a:46:d3:18:a8:bf:2f:29:dd:4e:b5:f3:e2:09:65:08:7d:ec:
         22:2e:b7:8d:af:bf:64:b9:a2:95:cd:95:ad:1b:64:e0:62:35:
         df:5e:9d:26:19:69:67:0c:38:4e:cb:ab:9a:9c:d1:72:a5:88:
         29:d7:99:f4:08:2a:7b:46:b1:5b:71:d2:72:e8:b0:df:17:fe:
         41:70:a8:da:54:b9:38:d2:b4:1f:1c:36:e4:02:7e:6b:e1:bb:
         5f:f6:b5:24:ed:21:c4:0e:8f:cc:b2:ab:e4:b9:8e:c3:c9:6d:
         c5:51:97:04:96:2d:71:25:79:f9:51:d3:62:32:71:d7:ec:83:
         16:6e:7d:38:89:85:ea:9c:4a:96:c5:c5:8c:04:b7:e8:dc:5d:
         75:e6:65:d6:da:96:af:ea:e7:12:ca:19:60:f5:18:be:b5:6d:
         18:ba:31:7e:4a:d1:cd:25:af:5a:45:4c:0c:1d:7b:6a:2e:9e:
         c4:1b:f6:37:1e:a1:75:88:f1:bd:c3:49:52:08:ed:93:8b:b6:
         1c:48:ed:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----