Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/b76fd1e367fd73c243db733f2520e793cb5e783f.roa
File:                     b76fd1e367fd73c243db733f2520e793cb5e783f.roa (raw, json)
Hash identifier:          bO175BeJovlnRAm2H2vrK+5X4ZlJ4n0ma+FhivBKkuM=
Subject key identifier:   59:89:3B:5D:B6:44:5B:9E:23:99:90:E0:72:35:BA:2D:11:3D:8A:04
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       153069
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/b76fd1e367fd73c243db733f2520e793cb5e783f.roa
Signing time:             Wed 30 Mar 2022 14:24:49 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52468
IP address blocks:        181.119.87.0/24 maxlen: 24
                          181.78.0.0/19 maxlen: 24
                          181.119.64.0/24 maxlen: 24
                          181.119.66.0/24 maxlen: 24
                          181.119.67.0/24 maxlen: 24
                          181.119.68.0/24 maxlen: 24
                          181.119.69.0/24 maxlen: 24
                          181.119.70.0/24 maxlen: 24
                          181.119.82.0/24 maxlen: 24
                          181.119.83.0/24 maxlen: 24
                          181.119.84.0/24 maxlen: 24
                          181.119.85.0/24 maxlen: 24
                          181.119.86.0/24 maxlen: 24
                          181.119.88.0/24 maxlen: 24
                          181.119.89.0/24 maxlen: 24
                          181.119.90.0/24 maxlen: 24
                          181.119.91.0/24 maxlen: 24
                          181.119.92.0/24 maxlen: 24
                          181.119.93.0/24 maxlen: 24
                          181.119.94.0/24 maxlen: 24
                          181.119.95.0/24 maxlen: 24
                          181.119.96.0/24 maxlen: 24
                          181.119.97.0/24 maxlen: 24
                          181.119.98.0/24 maxlen: 24
                          181.119.99.0/24 maxlen: 24
                          181.119.100.0/24 maxlen: 24
                          181.119.101.0/24 maxlen: 24
                          181.119.102.0/24 maxlen: 24
                          181.119.103.0/24 maxlen: 24
                          181.119.104.0/24 maxlen: 24
                          181.119.105.0/24 maxlen: 24
                          181.119.106.0/24 maxlen: 24
                          181.119.107.0/24 maxlen: 24
                          181.119.108.0/24 maxlen: 24
                          181.119.109.0/24 maxlen: 24
                          181.119.110.0/24 maxlen: 24
                          181.119.111.0/24 maxlen: 24
                          181.119.113.0/24 maxlen: 24
                          181.119.114.0/24 maxlen: 24
                          181.119.115.0/24 maxlen: 24
                          181.119.122.0/24 maxlen: 24
                          181.119.124.0/24 maxlen: 24
                          181.119.125.0/24 maxlen: 24
                          181.119.126.0/24 maxlen: 24
                          181.78.120.0/24 maxlen: 24
                          181.78.121.0/24 maxlen: 24
                          181.78.122.0/24 maxlen: 24
                          181.78.123.0/24 maxlen: 24
                          181.78.124.0/24 maxlen: 24
                          181.78.125.0/24 maxlen: 24
                          181.78.126.0/24 maxlen: 24
                          181.78.127.0/24 maxlen: 24
                          181.78.64.0/20 maxlen: 20
                          181.78.64.0/24 maxlen: 24
                          181.78.65.0/24 maxlen: 24
                          181.78.66.0/24 maxlen: 24
                          181.78.67.0/24 maxlen: 24
                          181.78.68.0/24 maxlen: 24
                          181.78.69.0/24 maxlen: 24
                          181.78.70.0/24 maxlen: 24
                          181.78.71.0/24 maxlen: 24
                          181.78.72.0/24 maxlen: 24
                          181.78.73.0/24 maxlen: 24
                          181.78.74.0/24 maxlen: 24
                          181.78.75.0/24 maxlen: 24
                          181.78.76.0/24 maxlen: 24
                          181.78.77.0/24 maxlen: 24
                          181.78.78.0/24 maxlen: 24
                          181.78.79.0/24 maxlen: 24
                          181.78.88.0/22 maxlen: 22
                          181.78.88.0/24 maxlen: 24
                          181.78.89.0/24 maxlen: 24
                          181.78.90.0/24 maxlen: 24
                          181.78.91.0/24 maxlen: 24
                          181.78.92.0/23 maxlen: 23
                          181.78.92.0/24 maxlen: 24
                          181.78.93.0/24 maxlen: 24
                          181.78.94.0/23 maxlen: 23
                          181.78.94.0/24 maxlen: 24
                          181.78.95.0/24 maxlen: 24
                          181.78.104.0/21 maxlen: 21
                          181.78.104.0/24 maxlen: 24
                          181.78.105.0/24 maxlen: 24
                          181.78.106.0/24 maxlen: 24
                          181.78.107.0/24 maxlen: 24
                          181.78.108.0/24 maxlen: 24
                          181.78.109.0/24 maxlen: 24
                          181.78.110.0/24 maxlen: 24
                          181.78.111.0/24 maxlen: 24
                          181.78.112.0/21 maxlen: 21
                          181.78.112.0/24 maxlen: 24
                          181.78.113.0/24 maxlen: 24
                          181.78.114.0/24 maxlen: 24
                          181.78.115.0/24 maxlen: 24
                          181.78.116.0/24 maxlen: 24
                          181.78.117.0/24 maxlen: 24
                          181.78.118.0/24 maxlen: 24
                          181.78.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1388649 (0x153069)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=b76fd1e367fd73c243db733f2520e793cb5e783f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e4:86:83:30:7d:94:0d:6c:76:aa:9d:95:80:
                    2c:85:d0:0e:05:b2:35:57:18:e0:35:27:4f:a7:3b:
                    13:f9:1f:06:33:dd:94:db:ac:95:df:91:22:00:c5:
                    ad:1e:eb:38:45:99:aa:0e:17:bc:16:0b:7f:04:a3:
                    af:ab:67:34:aa:69:d3:f9:21:26:0a:f6:ab:d5:63:
                    a3:16:22:0b:f8:27:d5:fe:5a:9a:71:cb:52:27:8e:
                    60:23:d4:ba:13:ec:c8:5d:2d:d9:ac:7f:56:77:61:
                    2e:a9:a4:a8:3c:57:2b:7a:3d:7d:f2:c2:f6:1a:26:
                    1c:01:c5:a3:8f:a0:2d:70:42:1d:97:e3:5c:d4:92:
                    34:f4:74:dd:67:b2:23:ce:d7:44:bc:af:94:b1:ad:
                    d2:76:4a:24:fb:3a:ed:cf:2a:1f:07:09:c0:d2:f8:
                    f9:a1:c0:10:b2:9e:9d:d3:09:a0:9a:08:52:7a:00:
                    d5:5e:e2:9a:87:8e:8d:5c:db:e9:3d:7e:f6:75:04:
                    98:27:78:98:61:c0:2e:a6:6a:c9:9e:12:5f:40:84:
                    cd:0e:17:ef:0f:7d:eb:67:40:07:e2:7d:7f:ff:0a:
                    23:04:ef:a7:7c:9b:76:ae:27:f7:5a:5d:f4:6d:93:
                    bc:53:a9:df:76:4e:1a:aa:38:de:62:f5:6f:b7:f6:
                    f1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:89:3B:5D:B6:44:5B:9E:23:99:90:E0:72:35:BA:2D:11:3D:8A:04
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/b76fd1e367fd73c243db733f2520e793cb5e783f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.0.0/19
                  181.78.64.0/20
                  181.78.88.0/21
                  181.78.104.0-181.78.127.255
                  181.119.64.0/24
                  181.119.66.0-181.119.70.255
                  181.119.82.0-181.119.111.255
                  181.119.113.0-181.119.115.255
                  181.119.122.0/24
                  181.119.124.0-181.119.126.255

    Signature Algorithm: sha256WithRSAEncryption
         80:4d:29:03:25:27:1b:2c:49:1f:4c:11:f1:80:b8:0d:a0:01:
         05:66:76:31:fd:5b:72:6f:cf:5c:fc:46:2f:b3:be:ad:db:81:
         d9:70:2c:49:21:79:e5:bb:36:b9:79:f6:35:62:1f:1b:c9:50:
         ca:11:82:6d:f0:f9:c1:bd:ff:5c:a4:7b:44:35:c8:d9:09:b3:
         f1:9c:6c:63:d9:ef:33:50:14:45:42:4a:cf:2c:e7:03:27:41:
         a9:72:3d:5e:aa:91:54:f8:6b:26:04:06:86:07:b0:ce:56:6e:
         d6:4b:c9:51:0f:a7:9a:60:30:0a:1d:96:2b:e1:e5:bb:b1:fb:
         73:35:22:89:40:e7:81:51:ca:b4:88:f4:06:87:85:ff:0d:42:
         53:ad:68:25:40:ba:69:1b:08:99:35:1e:b9:d6:c2:70:2f:9c:
         b8:7b:ca:af:da:a7:d4:00:ec:ab:c3:9c:e8:5b:ed:f9:7f:64:
         2c:26:76:0f:63:e1:10:dd:f4:e3:60:c4:54:3c:72:35:30:41:
         d1:fb:b4:73:9d:ca:ee:63:2d:71:d5:66:e2:d0:fa:7f:95:64:
         3b:a4:7f:3e:e0:54:1b:27:e8:6a:6a:d6:71:d5:aa:91:2b:a0:
         7b:61:63:8c:0d:de:ec:b1:42:e4:e9:b9:9d:45:1e:71:be:2c:
         45:a1:2e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-ams.rpki-client.org