Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/1cab91d1711c69864f2bed20d283bec8aecd10a9.roa
File:                     1cab91d1711c69864f2bed20d283bec8aecd10a9.roa (raw, json)
Hash identifier:          cDlGIby1/zFKD5dBxDrulJo5eTYgtUHDG+mIvhrQmBA=
Subject key identifier:   AD:1A:53:25:6D:CD:CA:F9:D3:1A:E4:E4:09:F3:82:A7:BF:02:F1:F6
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       120CDD
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/1cab91d1711c69864f2bed20d283bec8aecd10a9.roa
Signing time:             Wed 08 Dec 2021 04:24:19 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     397423
IP address blocks:        181.215.242.0/24 maxlen: 24
                          181.214.133.0/24 maxlen: 24
                          181.215.47.0/24 maxlen: 24
                          181.215.49.0/24 maxlen: 24
                          181.215.243.0/24 maxlen: 24
                          191.96.30.0/24 maxlen: 24
                          191.96.32.0/24 maxlen: 24
                          191.96.101.0/24 maxlen: 24
                          191.96.155.0/24 maxlen: 24
                          191.96.166.0/24 maxlen: 24
                          191.96.186.0/24 maxlen: 24
                          191.101.166.0/24 maxlen: 24
                          191.101.172.0/24 maxlen: 24
                          179.61.194.0/24 maxlen: 24
                          181.215.244.0/24 maxlen: 24
                          191.101.58.0/24 maxlen: 24
                          191.101.30.0/24 maxlen: 24
                          181.214.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182941 (0x120cdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=1cab91d1711c69864f2bed20d283bec8aecd10a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:32:15:4a:ce:5a:7b:bc:f3:89:48:50:c8:cd:
                    09:6c:84:f7:4b:bf:7f:6d:74:4d:aa:4f:7b:cb:e1:
                    1e:22:21:33:d9:67:70:a2:4f:74:b2:ab:c5:75:96:
                    26:eb:9a:b6:a2:3b:5d:8c:0c:cc:52:50:ba:5d:b3:
                    6b:5f:79:13:92:40:aa:35:c3:1c:90:c6:8c:66:f2:
                    37:df:04:4e:1b:ca:3c:d4:38:3d:66:e1:cd:74:9e:
                    a9:4f:51:ac:20:a0:04:26:2f:0d:81:52:eb:17:4e:
                    56:34:0c:0b:da:37:d0:35:04:1e:be:4f:7a:74:1f:
                    23:82:b7:e1:86:4c:a5:9b:2e:5c:f4:10:4b:24:a5:
                    75:36:75:53:b5:61:30:b2:fd:cb:31:8a:ad:f2:af:
                    f6:29:5d:31:e0:f1:e5:fc:67:c0:4d:08:f3:79:0b:
                    08:f6:2e:b8:f6:49:2e:7f:7c:ed:c0:c5:52:1d:99:
                    2e:48:80:99:e6:a5:51:60:44:24:8c:7e:be:97:72:
                    49:7b:2b:55:94:e8:d1:16:95:2e:34:15:67:f8:d9:
                    79:1c:df:f9:49:92:46:8c:10:c2:82:0f:3d:e3:73:
                    a4:8e:a3:c5:5d:42:20:0a:6e:83:28:41:59:55:d4:
                    4d:9b:29:1a:c3:0b:2c:ea:ad:2b:c8:3a:53:7a:72:
                    b0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1A:53:25:6D:CD:CA:F9:D3:1A:E4:E4:09:F3:82:A7:BF:02:F1:F6
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/1cab91d1711c69864f2bed20d283bec8aecd10a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.194.0/24
                  181.214.133.0/24
                  181.214.152.0/24
                  181.215.47.0/24
                  181.215.49.0/24
                  181.215.242.0-181.215.244.255
                  191.96.30.0/24
                  191.96.32.0/24
                  191.96.101.0/24
                  191.96.155.0/24
                  191.96.166.0/24
                  191.96.186.0/24
                  191.101.30.0/24
                  191.101.58.0/24
                  191.101.166.0/24
                  191.101.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:50:4d:5d:38:3f:55:11:4b:23:67:65:42:10:9c:93:e5:e8:
         a0:95:3d:67:a5:8b:d5:bc:eb:76:8b:61:7a:19:a3:bc:6d:f3:
         12:d7:38:4b:f5:da:2a:ae:32:6a:18:f2:41:75:b4:24:2a:db:
         bb:13:ac:40:9c:46:e2:3f:c9:af:22:ea:d4:8f:e9:e1:81:6b:
         ba:41:fe:fc:09:69:bb:0f:42:76:b4:6a:d9:98:20:e4:91:5f:
         3d:91:3f:da:5a:09:4c:68:6b:27:ab:1b:ca:b3:f4:f4:f9:d9:
         40:ad:51:9d:dc:3f:fa:7c:94:13:b2:5f:69:19:e9:76:f8:fd:
         c9:3e:52:4f:22:e9:db:12:2a:b2:40:c7:f8:6e:9c:07:da:53:
         42:6e:d2:72:5f:5d:dc:98:96:5b:5d:ba:1f:31:26:42:d1:7e:
         70:aa:21:6e:26:c2:a7:b3:1d:cc:c6:38:ad:2a:ca:38:18:59:
         ab:f6:5a:17:fd:d8:2d:39:9d:00:8b:67:af:0a:1e:2e:8f:8a:
         d3:7f:8f:1b:37:8b:5a:6e:77:3a:18:29:ac:8d:86:0c:00:5d:
         dc:f5:18:12:b2:1c:f9:22:35:dc:b9:b0:ab:c0:69:13:e3:42:
         d2:2a:6b:0a:c7:7f:73:74:cb:32:fd:6c:45:68:09:76:61:2a:
         ed:c2:3b:53
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIDEgzdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygxY2FiOTFkMTcxMWM2
OTg2NGYyYmVkMjBkMjgzYmVjOGFlY2QxMGE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAljIVSs5ae7zziUhQyM0JbIT3S79/bXRNqk97y+EeIiEz2Wdw
ok90sqvFdZYm65q2ojtdjAzMUlC6XbNrX3kTkkCqNcMckMaMZvI33wROG8o81Dg9
ZuHNdJ6pT1GsIKAEJi8NgVLrF05WNAwL2jfQNQQevk96dB8jgrfhhkylmy5c9BBL
JKV1NnVTtWEwsv3LMYqt8q/2KV0x4PHl/GfATQjzeQsI9i649kkuf3ztwMVSHZku
SICZ5qVRYEQkjH6+l3JJeytVlOjRFpUuNBVn+Nl5HN/5SZJGjBDCgg8943OkjqPF
XUIgCm6DKEFZVdRNmykawwss6q0ryDpTenKwEwIDAQABo4ICvjCCArowHQYDVR0O
BBYEFK0aUyVtzcr50xrk5Anzgqe/AvH2MB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzFjYWI5MWQxNzExYzY5ODY0ZjJiZWQyMGQyODNiZWM4YWVjZDEwYTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBgQYIKwYBBQUHAQcBAf8E
cjBwMG4EAgABMGgDBACzPcIDBAC11oUDBAC11pgDBAC11y8DBAC11zEwDAMEAbXX
8gMEALXX9AMEAL9gHgMEAL9gIAMEAL9gZQMEAL9gmwMEAL9gpgMEAL9gugMEAL9l
HgMEAL9lOgMEAL9lpgMEAL9lrDANBgkqhkiG9w0BAQsFAAOCAQEAE1BNXTg/VRFL
I2dlQhCck+XooJU9Z6WL1bzrdothehmjvG3zEtc4S/XaKq4yahjyQXW0JCrbuxOs
QJxG4j/JryLq1I/p4YFrukH+/Alpuw9CdrRq2Zgg5JFfPZE/2loJTGhrJ6sbyrP0
9PnZQK1Rndw/+nyUE7JfaRnpdvj9yT5STyLp2xIqskDH+G6cB9pTQm7Scl9d3JiW
W126HzEmQtF+cKohbibCp7MdzMY4rSrKOBhZq/ZaF/3YLTmdAItnrwoeLo+K03+P
GzeLWm53OhgprI2GDABd3PUYErIc+SI13Lmwq8BpE+NC0iprCsd/c3TLMv1sRWgJ
dmEq7cI7Uw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org