Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/efb6b0456aa64228b5024e8d0759b3bc5d97d95c.roa
File:                     efb6b0456aa64228b5024e8d0759b3bc5d97d95c.roa (raw, json)
Hash identifier:          Jcu5wOjyCZd08s2EXoTSjbo0FyFIon7B/5SdkkqZx1M=
Subject key identifier:   0E:1C:8D:21:88:58:96:94:C2:79:93:50:A8:75:3D:47:36:B0:96:45
Certificate issuer:       /CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
Certificate serial:       055539
Authority key identifier: EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/efb6b0456aa64228b5024e8d0759b3bc5d97d95c.roa
Signing time:             Tue 31 Aug 2021 10:38:34 +0000
ROA not before:           Tue 31 Aug 2021 03:00:00 +0000
ROA not after:            Thu 31 Aug 2023 03:00:00 +0000
asID:                     27775
IP address blocks:        190.98.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349497 (0x55539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
        Validity
            Not Before: Aug 31 03:00:00 2021 GMT
            Not After : Aug 31 03:00:00 2023 GMT
        Subject: CN=efb6b0456aa64228b5024e8d0759b3bc5d97d95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:66:bf:41:3f:ad:ae:a2:0a:71:a1:d9:ac:
                    9d:ad:44:0c:d8:39:04:71:28:78:09:83:a9:05:14:
                    ee:4c:4e:46:a4:f8:21:d3:bd:28:0d:08:ed:51:98:
                    32:4e:7c:72:c6:29:89:63:35:30:dc:04:f9:33:d6:
                    87:c1:63:c4:ac:37:89:8d:56:b6:7e:b6:e2:33:eb:
                    64:d3:43:75:fa:b0:02:3e:e1:12:33:9d:de:23:3b:
                    86:d8:49:02:b1:92:cf:01:86:55:21:b2:86:ab:f9:
                    67:cf:53:9e:78:88:81:c0:8e:7c:82:6e:49:91:d1:
                    7e:c5:97:54:64:c0:d9:c7:6d:c9:fb:42:a3:c1:d1:
                    cd:bc:a1:fa:a4:58:61:48:94:94:f0:55:93:e5:89:
                    0c:75:86:26:a1:81:b4:d2:77:8a:37:30:72:d0:03:
                    02:6c:f2:65:ff:1b:e4:4f:b7:7a:8b:e3:08:78:c7:
                    d0:97:4a:fc:da:f0:83:43:91:59:14:10:b4:e4:84:
                    3a:2c:6e:32:41:ab:c1:47:61:9c:d1:e1:0f:5e:11:
                    cd:96:d8:b3:67:d4:21:d9:37:1a:95:33:de:3b:42:
                    d3:44:d5:61:3b:64:84:e3:99:f3:2e:13:43:cd:7e:
                    3e:60:97:80:d2:e9:24:32:1d:cd:35:48:f4:cd:b8:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1C:8D:21:88:58:96:94:C2:79:93:50:A8:75:3D:47:36:B0:96:45
            X509v3 Authority Key Identifier:
                keyid:EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/efb6b0456aa64228b5024e8d0759b3bc5d97d95c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/5f073dc50d388f5e4b8416173329e5c9fb55bacc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:a2:4f:a3:88:af:f2:89:46:ba:cb:42:f7:3d:44:03:86:ab:
         1c:9b:01:75:e1:b7:5b:9a:e1:a8:f0:96:26:df:bb:0c:5b:a1:
         2e:a7:2c:93:0f:49:fb:cf:7e:19:d1:65:8c:71:50:74:b7:85:
         e6:01:61:87:75:34:b7:e8:53:9e:45:18:8c:ae:77:b0:79:0e:
         fa:dc:bd:13:81:77:92:34:5f:8c:f1:60:30:8d:d0:27:67:e6:
         47:5f:7a:5e:35:bf:6e:6f:02:73:de:2c:6b:0f:eb:75:ba:dc:
         0a:64:05:67:8a:f9:25:83:b8:64:32:b3:f4:d0:59:27:8d:36:
         f3:d4:fa:0c:15:df:67:76:fc:fc:1c:86:4d:9b:86:4b:8b:a8:
         c9:86:fe:d1:9f:1a:d1:ad:19:1d:c6:e6:30:d6:90:c2:77:fb:
         d5:70:d7:0e:9a:7a:e7:d2:dc:26:24:8d:3f:0c:0f:6c:a0:9e:
         7e:24:74:c1:75:3f:0b:70:e3:61:e7:f2:66:b5:66:bf:e2:f7:
         3c:01:a9:5a:25:61:87:36:29:c7:b9:c8:cb:93:64:1d:c3:4a:
         fd:38:0f:5a:4d:37:db:88:1c:6a:35:23:54:2f:32:77:8a:44:
         7e:3a:90:7b:d2:b6:06:c7:cf:d2:de:aa:23:ea:2d:95:48:50:
         bb:ef:8d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----