Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/778b114fafe66aa9a144a83bdd400cfc04a8b59e.roa
File:                     778b114fafe66aa9a144a83bdd400cfc04a8b59e.roa (raw, json)
Hash identifier:          x8lx3GtipTUN5suh7ffSRNZ1ZoYL4602e0ADj0KZ8Zk=
Subject key identifier:   32:78:0A:44:6F:52:FE:DB:6E:E9:59:10:B4:37:17:13:EB:67:C1:C2
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       219C33
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/778b114fafe66aa9a144a83bdd400cfc04a8b59e.roa
Signing time:             Thu 23 Mar 2023 08:30:24 +0000
ROA not before:           Wed 22 Mar 2023 08:30:24 +0000
ROA not after:            Fri 21 Mar 2025 08:30:24 +0000
asID:                     14420
IP address blocks:        181.113.148.0/24 maxlen: 24
                          181.113.149.0/24 maxlen: 24
                          181.113.150.0/24 maxlen: 24
                          181.113.151.0/24 maxlen: 24
                          186.178.114.0/24 maxlen: 24
                          186.178.115.0/24 maxlen: 24
                          186.178.116.0/24 maxlen: 24
                          186.178.117.0/24 maxlen: 24
                          186.178.132.0/22 maxlen: 24
                          186.178.136.0/21 maxlen: 21
                          186.178.168.0/24 maxlen: 24
                          186.178.169.0/24 maxlen: 24
                          186.178.170.0/24 maxlen: 24
                          186.178.171.0/24 maxlen: 24
                          186.42.100.0/24 maxlen: 24
                          186.46.140.0/24 maxlen: 24
                          186.46.75.0/24 maxlen: 24
                          186.47.206.0/24 maxlen: 24
                          190.11.0.0/24 maxlen: 24
                          190.11.1.0/24 maxlen: 24
                          190.11.2.0/24 maxlen: 24
                          190.11.3.0/24 maxlen: 24
                          190.11.4.0/24 maxlen: 24
                          190.11.5.0/24 maxlen: 24
                          190.11.6.0/24 maxlen: 24
                          190.11.7.0/24 maxlen: 24
                          190.152.127.0/24 maxlen: 24
                          190.152.160.0/24 maxlen: 24
                          190.152.161.0/24 maxlen: 24
                          190.152.162.0/24 maxlen: 24
                          190.152.163.0/24 maxlen: 24
                          190.152.184.0/24 maxlen: 24
                          190.152.185.0/24 maxlen: 24
                          190.152.186.0/24 maxlen: 24
                          190.152.187.0/24 maxlen: 24
                          190.152.188.0/24 maxlen: 24
                          190.152.189.0/24 maxlen: 24
                          190.152.190.0/24 maxlen: 24
                          190.152.191.0/24 maxlen: 24
                          190.152.24.0/24 maxlen: 24
                          190.152.25.0/24 maxlen: 24
                          190.214.120.0/24 maxlen: 24
                          190.214.121.0/24 maxlen: 24
                          190.214.122.0/24 maxlen: 24
                          190.214.123.0/24 maxlen: 24
                          200.107.20.0/24 maxlen: 24
                          200.107.21.0/24 maxlen: 24
                          200.107.23.0/24 maxlen: 24
                          200.107.24.0/24 maxlen: 24
                          200.125.225.0/24 maxlen: 24
                          2800:370:100::/46 maxlen: 46
                          2800:370:104::/46 maxlen: 46
                          2800:370:108::/46 maxlen: 46
                          2800:370:10c::/46 maxlen: 46
                          2800:370:110::/46 maxlen: 46
                          2800:370:114::/46 maxlen: 46
                          2800:370:118::/46 maxlen: 46
                          2800:370:11c::/46 maxlen: 46
                          2800:370:120::/46 maxlen: 46
                          2800:370:124::/46 maxlen: 46
                          2800:370:128::/46 maxlen: 46
                          2800:370:12c::/46 maxlen: 46
                          2800:370:130::/46 maxlen: 46
                          2800:370:134::/46 maxlen: 46
                          2800:370:138::/46 maxlen: 46
                          2800:370:13c::/46 maxlen: 46
                          2800:370:140::/46 maxlen: 46
                          2800:370:144::/46 maxlen: 46
                          2800:370:dc::/46 maxlen: 46
                          2800:370:e0::/46 maxlen: 46
                          2800:370:e4::/46 maxlen: 46
                          2800:370:e8::/46 maxlen: 46
                          2800:370:ec::/46 maxlen: 46
                          2800:370:f0::/46 maxlen: 46
                          2800:4f0:24::/46 maxlen: 46
                          2800:4f0:28::/46 maxlen: 46
                          2800:4f0:2::/48 maxlen: 48
                          2800:4f0:2c::/46 maxlen: 46
                          2800:4f0:2c::/48 maxlen: 48
                          2800:4f0:2d::/48 maxlen: 48
                          2800:4f0:2e::/48 maxlen: 48
                          2800:4f0:30::/46 maxlen: 46
                          2800:4f0:34::/46 maxlen: 46
                          2800:4f0:38::/46 maxlen: 46
                          2800:4f0:3c::/46 maxlen: 46
                          2800:4f0:40::/46 maxlen: 46
                          2800:4f0:40::/48 maxlen: 48
                          2800:4f0:41::/48 maxlen: 48
                          2800:4f0:42::/48 maxlen: 48
                          2800:4f0:43::/48 maxlen: 48
                          2800:4f0:44::/48 maxlen: 48
                          2800:4f0:45::/48 maxlen: 48
                          2800:4f0:46::/48 maxlen: 48
                          2800:4f0:47::/48 maxlen: 48
                          2800:4f0:48::/48 maxlen: 48
                          2800:4f0:49::/48 maxlen: 48
                          2800:4f0:500::/46 maxlen: 46
                          2800:4f0:504::/46 maxlen: 46
                          2800:4f0:508::/46 maxlen: 46
                          2800:4f0:50c::/46 maxlen: 46
                          2800:4f0:510::/46 maxlen: 46
                          2800:4f0:514::/46 maxlen: 46
                          2800:4f0:518::/46 maxlen: 46
                          2800:4f0:51c::/46 maxlen: 46
                          2800:4f0:5b::/48 maxlen: 48
                          2800:4f0:5c::/46 maxlen: 48
                          2800:4f0:a::/48 maxlen: 48
                          2800:4f0:f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2202675 (0x219c33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 22 08:30:24 2023 GMT
            Not After : Mar 21 08:30:24 2025 GMT
        Subject: CN=778b114fafe66aa9a144a83bdd400cfc04a8b59e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b3:a6:27:a0:e0:fb:6b:8d:9e:88:6b:ab:94:
                    6b:a6:a8:5c:2d:df:82:7f:21:4d:86:27:c5:9f:06:
                    c4:5b:7d:ed:05:10:c4:72:d2:07:3c:6d:26:35:bc:
                    85:2f:bc:cd:b7:67:7f:7b:b4:b0:8d:6f:79:c4:50:
                    cb:71:42:07:8a:5d:78:47:fd:6e:9f:e6:ea:15:08:
                    98:5f:20:ea:c8:36:57:41:50:3e:9b:4d:94:03:00:
                    2d:41:28:a7:97:03:92:21:e5:3a:14:7f:6c:d9:0e:
                    8e:fc:d4:eb:b0:b2:f0:2a:2a:ce:15:32:d7:dc:7b:
                    67:ac:8d:29:23:bf:71:f9:9f:5b:6e:b6:50:f6:96:
                    91:65:11:ac:35:fc:b1:11:5d:a1:77:62:de:25:6f:
                    7f:c7:b7:69:67:1d:d9:95:33:a5:8d:c2:d1:9f:c2:
                    56:23:d9:a5:a6:c5:c4:1d:a2:32:94:5a:b6:44:97:
                    ca:bf:4b:31:69:9f:e2:c6:4b:b9:78:e3:7c:cc:93:
                    4f:65:96:e5:6b:7d:3a:dd:24:bc:02:58:a8:61:9d:
                    43:29:f8:1c:23:ce:db:79:de:08:d2:a2:53:ff:04:
                    f3:58:bb:4e:af:2e:92:72:3f:46:6d:1d:49:d8:fe:
                    1e:45:42:4a:bf:db:f5:d6:7f:b2:b5:62:0a:be:4a:
                    e1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:78:0A:44:6F:52:FE:DB:6E:E9:59:10:B4:37:17:13:EB:67:C1:C2
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/778b114fafe66aa9a144a83bdd400cfc04a8b59e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.113.148.0/22
                  186.42.100.0/24
                  186.46.75.0/24
                  186.46.140.0/24
                  186.47.206.0/24
                  186.178.114.0-186.178.117.255
                  186.178.132.0-186.178.143.255
                  186.178.168.0/22
                  190.11.0.0/21
                  190.152.24.0/23
                  190.152.127.0/24
                  190.152.160.0/22
                  190.152.184.0/21
                  190.214.120.0/22
                  200.107.20.0/23
                  200.107.23.0-200.107.24.255
                  200.125.225.0/24
                IPv6:
                  2800:370:dc::-2800:370:f3:ffff:ffff:ffff:ffff:ffff
                  2800:370:100::-2800:370:147:ffff:ffff:ffff:ffff:ffff
                  2800:4f0:2::/48
                  2800:4f0:a::/48
                  2800:4f0:f::/48
                  2800:4f0:24::-2800:4f0:49:ffff:ffff:ffff:ffff:ffff
                  2800:4f0:5b::-2800:4f0:5f:ffff:ffff:ffff:ffff:ffff
                  2800:4f0:500::/43

    Signature Algorithm: sha256WithRSAEncryption
         5b:05:74:af:48:bb:a0:3e:27:e2:10:73:24:1f:6c:92:be:fc:
         84:4e:6b:4f:67:8f:5d:3a:7a:5d:48:d6:ba:2c:ee:aa:4b:94:
         17:df:b6:62:2e:4e:35:cb:41:29:77:ef:0d:4a:08:63:7a:a2:
         ad:a2:52:20:1a:e4:6c:13:2d:0d:f5:62:87:4a:0e:75:df:c6:
         c5:32:44:e2:04:b6:a6:24:60:28:c0:a1:2b:0a:d7:a5:a5:cf:
         58:fb:90:c0:28:0f:08:16:b8:24:ef:0a:8f:9f:d4:62:66:de:
         23:8e:30:01:29:47:36:07:c9:0f:93:0c:21:26:2a:45:32:d3:
         af:e6:97:dc:4c:9a:2a:b2:10:9b:ff:cd:58:8b:32:66:4f:a6:
         bf:95:b0:3c:9c:63:77:ce:da:b9:f5:63:60:08:34:0c:0a:99:
         55:a9:45:92:d5:a7:55:39:2a:32:41:ec:67:6a:a4:ec:87:4c:
         47:11:3e:86:62:4d:a2:f5:b6:47:4d:01:fc:d8:da:ab:d8:51:
         a6:97:55:07:fc:0f:3f:5e:d2:fd:07:88:be:8b:ce:d7:9b:78:
         ba:d7:7a:0c:10:4f:1d:56:a3:a3:00:08:33:fa:95:bf:63:ce:
         d8:04:97:65:1d:a1:e0:0a:dd:1b:66:54:3c:ff:65:7e:19:43:
         ce:b8:c1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org