Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7a1580c543ec66f4c95f9e201fb980832450ec65.roa
File:                     7a1580c543ec66f4c95f9e201fb980832450ec65.roa (raw, json)
Hash identifier:          uMW8KVv2YG3VrEaUCTbNTUOXlBy4L2rkSPIYOVIf3KI=
Subject key identifier:   2F:B2:25:F0:BE:BF:02:47:ED:2C:7F:28:39:DC:37:23:49:99:D0:1D
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       21D6CC
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7a1580c543ec66f4c95f9e201fb980832450ec65.roa
Signing time:             Fri 09 Jun 2023 18:34:28 +0000
ROA not before:           Thu 08 Jun 2023 18:34:27 +0000
ROA not after:            Mon 09 Jun 2025 18:34:27 +0000
asID:                     19429
IP address blocks:        200.11.40.0/21 maxlen: 24
                          200.119.0.0/17 maxlen: 24
                          201.244.0.0/15 maxlen: 24
                          186.28.0.0/14 maxlen: 24
                          200.69.96.0/19 maxlen: 24
                          186.154.0.0/15 maxlen: 24
                          190.93.128.0/19 maxlen: 24
                          200.93.128.0/18 maxlen: 24
                          190.24.0.0/14 maxlen: 24
                          200.75.32.0/19 maxlen: 24
                          2800:260::/28 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2217676 (0x21d6cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Jun  8 18:34:27 2023 GMT
            Not After : Jun  9 18:34:27 2025 GMT
        Subject: CN=7a1580c543ec66f4c95f9e201fb980832450ec65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:72:0f:2a:1a:3b:3a:d8:e7:4c:2a:e2:80:83:
                    ee:dc:f8:0f:2e:af:c1:0d:1f:2e:25:5d:e7:f2:e1:
                    1a:eb:49:ad:65:df:be:57:aa:c1:be:2f:da:4d:13:
                    70:76:db:c2:3f:73:0b:23:d5:49:4e:c9:1b:ed:30:
                    2c:b3:f0:1f:67:4e:a5:92:10:cf:04:55:b6:9f:79:
                    19:ea:71:b6:99:3a:23:0b:f2:37:87:c3:40:2f:bf:
                    75:09:ac:6c:10:d0:05:e2:ad:8c:35:f4:71:d4:26:
                    28:5e:ef:77:3a:86:2a:f2:0b:13:be:a8:60:9f:14:
                    58:02:49:8f:1a:2a:96:59:2c:80:59:92:16:3a:af:
                    43:53:f2:99:b9:b6:21:89:d1:c0:68:ca:0b:69:76:
                    0e:a8:92:ac:85:ca:91:4a:08:04:b0:98:37:db:a6:
                    e0:d2:9a:08:65:06:d1:f8:97:43:d9:5d:67:03:34:
                    b3:20:0d:d5:7d:a1:88:72:4d:4f:57:fa:59:a2:03:
                    a2:b6:87:97:05:67:3c:69:5e:9f:bc:f4:8a:a2:4d:
                    bd:86:d1:12:61:c8:8a:45:51:6f:17:dd:41:e4:85:
                    77:31:e0:98:37:90:3f:b7:4c:1a:21:da:ea:c9:2b:
                    0d:e3:cd:cb:03:b3:e9:82:e6:d9:b8:1e:e2:64:b4:
                    8f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B2:25:F0:BE:BF:02:47:ED:2C:7F:28:39:DC:37:23:49:99:D0:1D
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7a1580c543ec66f4c95f9e201fb980832450ec65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.28.0.0/14
                  186.154.0.0/15
                  190.24.0.0/14
                  190.93.128.0/19
                  200.11.40.0/21
                  200.69.96.0/19
                  200.75.32.0/19
                  200.93.128.0/18
                  200.119.0.0/17
                  201.244.0.0/15
                IPv6:
                  2800:260::/28

    Signature Algorithm: sha256WithRSAEncryption
         36:8f:24:c8:6c:5e:97:34:9d:8c:47:08:20:20:a7:0c:d5:38:
         60:13:fc:58:84:cb:9a:d1:78:81:0b:67:0f:53:8b:e0:5f:20:
         30:95:57:45:34:4d:58:4e:47:a7:c6:44:73:28:6f:5c:7e:53:
         77:e2:74:0a:ab:b9:2d:42:1c:e4:e8:43:95:36:44:79:b3:19:
         e9:47:64:50:14:b0:09:60:6f:2b:2a:65:3e:4b:37:ac:06:68:
         4d:d9:53:0a:e3:bb:6d:f9:23:52:0d:ea:67:62:7f:ef:e2:b5:
         fe:cb:90:23:55:d9:94:c1:e7:db:b3:7a:8f:2a:f2:64:40:b2:
         41:af:39:3d:8e:39:1e:59:95:fa:74:81:2c:8d:c7:d6:5b:00:
         16:31:8f:cb:0f:50:bf:37:d5:7c:04:81:74:58:c7:e9:14:fe:
         2f:cf:d9:d8:dd:1f:8b:2c:19:09:96:a5:29:4f:8f:4a:1a:5c:
         50:a5:e5:03:a2:07:f4:75:92:c4:17:ed:2d:ab:86:7d:8e:d9:
         95:67:bc:a5:e9:27:c1:2c:fb:a7:68:64:18:6a:1d:a4:af:b5:
         7c:32:a8:46:00:72:5e:8e:4a:91:9a:79:e3:65:76:9f:a6:28:
         47:53:22:38:19:13:6d:fa:03:9c:33:75:9f:c7:6c:70:9a:b2:
         d1:a7:22:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-ams.rpki-client.org