Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/62d07531d327b2a98e10481b0f75442bdf829df0.roa
File:                     62d07531d327b2a98e10481b0f75442bdf829df0.roa (raw, json)
Hash identifier:          cLitkWhbyftBviknrWUALT3VOIHy/o/kVY3gVxH1SMU=
Subject key identifier:   DA:C3:0B:17:9C:73:05:07:52:6C:B6:F3:D5:07:CA:BD:15:67:C3:26
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       1701B9
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/62d07531d327b2a98e10481b0f75442bdf829df0.roa
Signing time:             Thu 17 Feb 2022 20:18:27 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27757
IP address blocks:        186.46.140.0/24 maxlen: 24
                          186.46.141.0/24 maxlen: 24
                          190.152.254.0/24 maxlen: 24
                          190.152.255.0/24 maxlen: 24
                          190.152.110.0/24 maxlen: 24
                          181.112.204.0/22 maxlen: 24
                          181.113.97.0/24 maxlen: 24
                          181.113.157.0/24 maxlen: 24
                          181.196.11.0/24 maxlen: 24
                          181.196.13.0/24 maxlen: 24
                          190.214.0.0/17 maxlen: 24
                          190.152.0.0/17 maxlen: 24
                          186.42.128.0/17 maxlen: 24
                          186.46.128.0/17 maxlen: 24
                          200.125.224.0/19 maxlen: 24
                          181.196.14.0/24 maxlen: 24
                          181.196.66.0/24 maxlen: 24
                          181.211.104.0/24 maxlen: 24
                          181.211.105.0/24 maxlen: 24
                          181.211.106.0/24 maxlen: 24
                          181.211.217.0/24 maxlen: 24
                          186.42.8.0/24 maxlen: 24
                          186.42.9.0/24 maxlen: 24
                          186.42.12.0/24 maxlen: 24
                          186.42.112.0/23 maxlen: 24
                          186.42.172.0/22 maxlen: 24
                          186.42.198.0/23 maxlen: 24
                          186.46.56.0/22 maxlen: 24
                          186.46.152.0/21 maxlen: 24
                          186.46.172.0/24 maxlen: 24
                          186.46.175.0/24 maxlen: 24
                          186.46.224.0/24 maxlen: 24
                          186.46.232.0/21 maxlen: 24
                          186.47.137.0/24 maxlen: 24
                          186.47.138.0/24 maxlen: 24
                          186.47.182.0/24 maxlen: 24
                          186.47.183.0/24 maxlen: 24
                          186.178.19.0/24 maxlen: 24
                          186.178.36.0/23 maxlen: 24
                          186.178.37.0/24 maxlen: 24
                          186.178.43.0/24 maxlen: 24
                          186.178.47.0/24 maxlen: 24
                          186.178.48.0/24 maxlen: 24
                          186.178.51.0/24 maxlen: 24
                          186.178.67.0/24 maxlen: 24
                          186.178.107.0/24 maxlen: 24
                          186.178.112.0/24 maxlen: 24
                          186.178.115.0/24 maxlen: 24
                          186.178.117.0/24 maxlen: 24
                          186.178.170.0/24 maxlen: 24
                          190.11.3.0/24 maxlen: 24
                          190.11.20.0/24 maxlen: 24
                          190.11.26.0/24 maxlen: 24
                          190.152.39.0/24 maxlen: 24
                          190.152.46.0/24 maxlen: 24
                          190.152.108.0/24 maxlen: 24
                          190.152.109.0/24 maxlen: 24
                          190.152.131.0/24 maxlen: 24
                          190.152.161.0/24 maxlen: 24
                          190.152.185.0/24 maxlen: 24
                          190.152.187.0/24 maxlen: 24
                          190.152.191.0/24 maxlen: 24
                          190.152.201.0/24 maxlen: 24
                          190.152.216.0/23 maxlen: 24
                          190.152.220.0/24 maxlen: 24
                          190.152.236.0/24 maxlen: 24
                          200.107.22.0/24 maxlen: 24
                          200.107.29.0/24 maxlen: 24
                          201.219.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1507769 (0x1701b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=62d07531d327b2a98e10481b0f75442bdf829df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e2:b6:cf:c8:e3:02:3d:d8:42:6f:09:f6:46:
                    33:02:fe:c3:e1:7b:a7:69:2f:f8:24:f5:d4:0e:43:
                    45:c1:70:1e:17:6c:61:90:dc:7d:f7:5b:9e:18:42:
                    d2:28:4e:da:a1:3c:4d:1b:b7:fc:5c:bd:43:cb:4f:
                    ca:83:56:fd:20:0a:a7:b6:b2:09:d3:ae:fb:c6:1f:
                    34:a6:25:fb:fb:41:79:a2:6d:38:cc:ac:d8:1b:32:
                    18:e8:84:28:f2:6d:11:32:04:0b:51:80:04:75:09:
                    9c:2a:bd:9a:03:59:2d:8d:87:66:4f:d1:8b:a9:58:
                    8d:cd:22:89:f7:df:b5:1f:a5:16:11:47:27:2b:eb:
                    bc:78:80:38:0b:6c:0e:ce:c9:2a:9e:91:69:5b:7c:
                    38:c9:69:82:88:86:69:4d:f4:e9:02:fe:9d:10:e9:
                    f7:57:9b:01:e9:f7:9c:f3:6b:86:b0:ed:f2:9b:7b:
                    c4:d3:53:44:09:7e:2b:24:a0:e7:a6:c9:c4:59:49:
                    06:4f:6b:85:53:bd:b3:eb:df:35:25:5c:bc:10:39:
                    d4:f1:8d:9c:dd:73:44:01:37:b6:a8:65:14:87:7a:
                    76:79:93:33:0c:2e:a0:3f:55:b3:a6:4e:71:f3:40:
                    de:d8:72:88:a2:3a:e8:cb:bb:da:72:4a:d1:9b:0b:
                    6f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C3:0B:17:9C:73:05:07:52:6C:B6:F3:D5:07:CA:BD:15:67:C3:26
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/62d07531d327b2a98e10481b0f75442bdf829df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.112.204.0/22
                  181.113.97.0/24
                  181.113.157.0/24
                  181.196.11.0/24
                  181.196.13.0-181.196.14.255
                  181.196.66.0/24
                  181.211.104.0-181.211.106.255
                  181.211.217.0/24
                  186.42.8.0/23
                  186.42.12.0/24
                  186.42.112.0/23
                  186.42.128.0/17
                  186.46.56.0/22
                  186.46.128.0/17
                  186.47.137.0-186.47.138.255
                  186.47.182.0/23
                  186.178.19.0/24
                  186.178.36.0/23
                  186.178.43.0/24
                  186.178.47.0-186.178.48.255
                  186.178.51.0/24
                  186.178.67.0/24
                  186.178.107.0/24
                  186.178.112.0/24
                  186.178.115.0/24
                  186.178.117.0/24
                  186.178.170.0/24
                  190.11.3.0/24
                  190.11.20.0/24
                  190.11.26.0/24
                  190.152.0.0/17
                  190.152.131.0/24
                  190.152.161.0/24
                  190.152.185.0/24
                  190.152.187.0/24
                  190.152.191.0/24
                  190.152.201.0/24
                  190.152.216.0/23
                  190.152.220.0/24
                  190.152.236.0/24
                  190.152.254.0/23
                  190.214.0.0/17
                  200.107.22.0/24
                  200.107.29.0/24
                  200.125.224.0/19
                  201.219.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:53:0b:87:a1:8e:84:ce:45:fa:52:86:12:ec:b1:5d:2f:22:
         16:e3:2c:a8:de:69:29:9a:43:98:83:36:25:65:71:8a:eb:56:
         b1:7b:07:71:80:c7:67:14:7a:20:4c:b8:e8:55:a3:ac:a7:09:
         e9:2f:88:f4:f3:ad:a1:8b:0d:c6:6d:07:4e:96:84:39:3c:a8:
         40:dd:da:cb:85:ca:72:67:f6:bb:b7:09:0f:8b:dd:ff:cf:fe:
         48:7a:11:96:c2:b3:5e:5d:8f:d3:fa:28:87:2c:21:b5:e2:98:
         80:52:40:07:6e:68:16:ba:3f:24:32:82:20:af:53:e6:dc:59:
         8c:79:70:cd:5d:24:19:08:6e:5a:d1:ec:5f:f8:c5:92:0b:0c:
         a9:aa:0b:4d:04:15:c6:33:d2:03:76:79:c3:ec:09:f2:0a:22:
         46:87:6e:4d:8d:ee:33:64:f9:f1:ae:db:62:64:bc:17:ca:e1:
         bd:db:5d:71:5f:5c:65:b0:4f:75:0d:f9:64:00:0a:9f:6f:65:
         7c:f3:a4:80:58:03:25:8f:77:d5:0f:7a:09:98:4e:f1:31:4a:
         b7:38:7b:3a:ba:18:55:1e:96:70:fb:73:8b:ca:82:00:c5:16:
         b5:e1:61:86:51:f3:57:85:44:b8:56:f8:e0:62:da:a9:72:6b:
         5f:0e:90:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org