Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6684fedf-05a2-478e-bd9d-40c5d454a6bd/632ab7c8dd9230832979b407f40b9926c13ad1a0.roa
File:                     632ab7c8dd9230832979b407f40b9926c13ad1a0.roa (raw, json)
Hash identifier:          9tzZn949xDTd+eOL2CQczH31BtkzMK3iXYC22iZc4K4=
Subject key identifier:   16:74:6D:D6:B0:1A:C1:48:C0:09:93:2B:1E:95:7F:43:42:52:0F:B0
Certificate issuer:       /CN=cbd944bf8c1af6b82a2220e086ccf759b7b6767c
Certificate serial:       045B
Authority key identifier: CE:F3:61:FB:73:DE:9F:AF:29:D0:CF:9F:B7:C5:75:C8:AC:B4:41:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbd944bf8c1af6b82a2220e086ccf759b7b6767c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6684fedf-05a2-478e-bd9d-40c5d454a6bd/632ab7c8dd9230832979b407f40b9926c13ad1a0.roa
Signing time:             Tue 31 Aug 2021 01:51:38 +0000
ROA not before:           Mon 30 Aug 2021 03:00:00 +0000
ROA not after:            Wed 30 Aug 2023 03:00:00 +0000
asID:                     52485
IP address blocks:        132.255.132.0/22 maxlen: 22
                          138.122.192.0/22 maxlen: 22
                          168.90.96.0/22 maxlen: 22
                          168.196.236.0/22 maxlen: 22
                          190.123.208.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1115 (0x45b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd944bf8c1af6b82a2220e086ccf759b7b6767c
        Validity
            Not Before: Aug 30 03:00:00 2021 GMT
            Not After : Aug 30 03:00:00 2023 GMT
        Subject: CN=632ab7c8dd9230832979b407f40b9926c13ad1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:63:f9:39:08:70:d2:bd:62:d6:b9:d2:30:5b:
                    2e:4a:d4:c9:9a:1c:08:e9:45:dc:13:a6:54:fb:25:
                    55:91:43:92:e9:84:8b:b7:31:64:35:b5:14:65:6c:
                    53:a8:4a:bd:2a:d5:95:a3:1d:1a:27:1d:9f:a1:db:
                    5d:12:9e:14:24:df:78:9f:29:af:e0:49:35:89:d0:
                    d2:a1:9a:81:86:e5:30:ae:d3:bf:15:d0:c6:c9:ea:
                    ab:dd:ae:f8:22:41:d8:a8:01:b4:10:b6:76:fb:1e:
                    f0:10:e1:1e:93:9a:80:61:80:3b:49:0f:f0:69:f5:
                    d4:ee:89:57:97:8d:c1:fa:6b:32:b6:ae:32:ef:22:
                    7a:cb:1a:3b:d2:cd:4a:f6:4c:e4:3a:14:bd:11:af:
                    a9:b9:43:0d:20:82:ea:a4:e0:64:6c:13:53:7a:95:
                    22:5f:a8:d8:fc:4b:b3:f4:1e:a7:09:83:22:b9:a9:
                    05:67:38:c9:fc:d2:29:80:29:26:c4:c7:49:a2:1a:
                    e5:21:7e:e9:c6:da:86:fd:04:d5:e8:c1:98:65:5b:
                    80:2b:21:29:c9:9c:0b:70:26:95:3a:a0:09:a8:49:
                    a3:c4:cb:91:95:86:2b:a4:90:13:1f:90:b5:88:26:
                    d1:36:79:5b:eb:70:7c:fc:39:7e:c0:22:7e:3a:46:
                    9e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:74:6D:D6:B0:1A:C1:48:C0:09:93:2B:1E:95:7F:43:42:52:0F:B0
            X509v3 Authority Key Identifier:
                keyid:CE:F3:61:FB:73:DE:9F:AF:29:D0:CF:9F:B7:C5:75:C8:AC:B4:41:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbd944bf8c1af6b82a2220e086ccf759b7b6767c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6684fedf-05a2-478e-bd9d-40c5d454a6bd/632ab7c8dd9230832979b407f40b9926c13ad1a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6684fedf-05a2-478e-bd9d-40c5d454a6bd/cbd944bf8c1af6b82a2220e086ccf759b7b6767c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.132.0/22
                  138.122.192.0/22
                  168.90.96.0/22
                  168.196.236.0/22
                  190.123.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:5d:18:b3:db:ff:eb:4c:32:ed:8e:bd:13:ad:ef:95:43:17:
         94:ff:68:d5:6c:18:10:ae:fe:d6:d9:6a:5a:3c:d1:1e:0e:21:
         9c:9e:f6:ae:d6:c7:82:00:c6:f9:63:9b:74:62:48:34:ce:ab:
         cc:bc:e9:73:30:d2:ab:85:9e:01:f4:8e:68:eb:24:e4:15:0e:
         46:da:1e:7a:87:8e:28:ea:1f:33:a0:91:09:1c:65:d4:50:1d:
         49:64:bc:a6:d4:e1:5f:56:95:4c:70:21:62:b2:4e:3d:6d:7c:
         7d:bc:a3:fb:cd:65:ca:39:75:64:f1:74:59:e7:1f:e4:74:bf:
         d1:3c:26:3d:af:b9:8d:52:92:81:51:81:87:17:ea:51:32:d4:
         ba:c8:7d:76:86:8f:b1:02:85:2a:5f:4f:2b:18:37:cc:62:b9:
         7f:aa:36:7e:1b:61:c8:bf:56:6b:37:5f:de:31:76:73:13:b5:
         27:0d:b3:20:e9:89:cd:00:3b:d6:ff:d0:0e:04:3a:95:ea:27:
         e6:6e:13:9b:5e:fb:d7:69:2a:dd:f9:31:f9:6a:11:c8:a2:fe:
         62:a2:a3:db:f7:b4:93:63:29:77:a2:06:7b:67:79:c7:0f:18:
         78:d3:d4:15:0e:52:64:1e:58:5e:b3:38:61:c7:6c:39:67:70:
         3b:c0:d5:a4
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgICBFswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoY2Jk
OTQ0YmY4YzFhZjZiODJhMjIyMGUwODZjY2Y3NTliN2I2NzY3YzAeFw0yMTA4MzAw
MzAwMDBaFw0yMzA4MzAwMzAwMDBaMDMxMTAvBgNVBAMTKDYzMmFiN2M4ZGQ5MjMw
ODMyOTc5YjQwN2Y0MGI5OTI2YzEzYWQxYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCSY/k5CHDSvWLWudIwWy5K1MmaHAjpRdwTplT7JVWRQ5LphIu3
MWQ1tRRlbFOoSr0q1ZWjHRonHZ+h210SnhQk33ifKa/gSTWJ0NKhmoGG5TCu078V
0MbJ6qvdrvgiQdioAbQQtnb7HvAQ4R6TmoBhgDtJD/Bp9dTuiVeXjcH6azK2rjLv
InrLGjvSzUr2TOQ6FL0Rr6m5Qw0gguqk4GRsE1N6lSJfqNj8S7P0HqcJgyK5qQVn
OMn80imAKSbEx0miGuUhfunG2ob9BNXowZhlW4ArISnJnAtwJpU6oAmoSaPEy5GV
hiukkBMfkLWIJtE2eVvrcHz8OX7AIn46Rp73AgMBAAGjggJzMIICbzAdBgNVHQ4E
FgQUFnRt1rAawUjACZMrHpV/Q0JSD7AwHwYDVR0jBBgwFoAUzvNh+3Pen68p0M+f
t8V1yKy0QQwwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9jYmQ5NDRi
ZjhjMWFmNmI4MmEyMjIwZTA4NmNjZjc1OWI3YjY3NjdjLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy82Njg0ZmVkZi0wNWEyLTQ3OGUtYmQ5ZC00MGM1ZDQ1
NGE2YmQvNjMyYWI3YzhkZDkyMzA4MzI5NzliNDA3ZjQwYjk5MjZjMTNhZDFhMC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzY2ODRmZWRmLTA1YTItNDc4ZS1iZDlkLTQwYzVk
NDU0YTZiZC9jYmQ5NDRiZjhjMWFmNmI4MmEyMjIwZTA4NmNjZjc1OWI3YjY3Njdj
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgw
JjAkBAIAATAeAwQChP+EAwQCinrAAwQCqFpgAwQCqMTsAwQEvnvQMA0GCSqGSIb3
DQEBCwUAA4IBAQBVXRiz2//rTDLtjr0Tre+VQxeU/2jVbBgQrv7W2WpaPNEeDiGc
nvau1seCAMb5Y5t0Ykg0zqvMvOlzMNKrhZ4B9I5o6yTkFQ5G2h56h44o6h8zoJEJ
HGXUUB1JZLym1OFfVpVMcCFisk49bXx9vKP7zWXKOXVk8XRZ5x/kdL/RPCY9r7mN
UpKBUYGHF+pRMtS6yH12ho+xAoUqX08rGDfMYrl/qjZ+G2HIv1ZrN1/eMXZzE7Un
DbMg6YnNADvW/9AOBDqV6ifmbhObXvvXaSrd+TH5ahHIov5ioqPb97STYyl3ogZ7
Z3nHDxh409QVDlJkHlheszhhx2w5Z3A7wNWk
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org