Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/da28d54d77a116f2c89c518af047a8676bb02116.roa
File:                     da28d54d77a116f2c89c518af047a8676bb02116.roa (raw, json)
Hash identifier:          q0pXfSFNKkS4V2DrMKPsjr+PoUQh6QDHWcYwn4FBhEc=
Subject key identifier:   D0:EF:01:02:48:B4:0B:FA:F2:ED:E7:88:7A:5E:01:77:8F:87:92:3C
Certificate issuer:       /CN=ef9eece186acee7c98893ecb00fbad69eede01bd
Certificate serial:       064DAD
Authority key identifier: 72:61:C7:04:7C:17:14:CF:E7:03:08:D9:B9:72:07:F6:AE:3A:40:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef9eece186acee7c98893ecb00fbad69eede01bd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/da28d54d77a116f2c89c518af047a8676bb02116.roa
Signing time:             Wed 24 Mar 2021 22:50:11 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     61461
IP address blocks:        186.148.192.0/23 maxlen: 23
                          186.148.192.0/24 maxlen: 24
                          186.148.193.0/24 maxlen: 24
                          186.148.194.0/23 maxlen: 23
                          186.148.194.0/24 maxlen: 24
                          186.148.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413101 (0x64dad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef9eece186acee7c98893ecb00fbad69eede01bd
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=da28d54d77a116f2c89c518af047a8676bb02116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:68:d9:d2:55:98:21:ff:09:63:2f:c8:c5:17:
                    7b:1a:5c:e9:77:48:99:61:3e:9e:e4:3f:8b:18:fa:
                    14:27:26:f1:1f:9d:e3:42:6f:72:57:1d:7b:8b:f1:
                    c2:27:9e:a8:79:18:a6:de:e9:ed:c3:30:ff:f6:23:
                    91:5b:ec:14:d9:74:6f:d7:61:91:2c:01:c7:bd:93:
                    b3:36:a1:69:0a:a1:bb:a8:d1:67:04:5d:9e:cf:3f:
                    f8:80:7a:c2:28:fa:58:43:b5:12:46:c1:43:14:75:
                    4d:39:1f:c8:96:ae:9d:01:46:1c:6c:31:e4:57:d0:
                    6e:46:f7:0e:61:6d:df:28:39:89:be:3e:1b:c7:ac:
                    f8:4d:a2:ba:e3:a4:87:a0:4a:fd:ee:55:39:fe:25:
                    73:0c:28:a1:2f:f2:45:2c:99:b5:33:a4:17:96:a4:
                    a8:b8:52:8f:26:08:5c:42:ec:26:41:8d:04:53:38:
                    40:8e:2a:48:07:2d:38:c6:0e:dc:a6:a1:79:09:b4:
                    2c:1e:ab:cd:af:1e:ad:44:5a:0f:45:d2:14:c3:36:
                    40:c3:10:a6:d2:41:90:6f:d9:70:ff:53:8f:1b:6d:
                    d2:6c:24:5b:69:e3:ba:35:f5:0e:e4:1a:08:28:d2:
                    4d:13:86:29:68:bf:a1:48:f7:10:67:79:b3:76:18:
                    55:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EF:01:02:48:B4:0B:FA:F2:ED:E7:88:7A:5E:01:77:8F:87:92:3C
            X509v3 Authority Key Identifier:
                keyid:72:61:C7:04:7C:17:14:CF:E7:03:08:D9:B9:72:07:F6:AE:3A:40:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef9eece186acee7c98893ecb00fbad69eede01bd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/da28d54d77a116f2c89c518af047a8676bb02116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3f6f67b-6b4d-4093-97ad-36b5b8df7ba0/ef9eece186acee7c98893ecb00fbad69eede01bd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:32:bd:a8:a1:54:84:ba:0a:50:bf:b9:9f:04:7b:61:6c:62:
         9d:0a:00:18:eb:69:b4:2e:47:b3:72:29:e0:94:23:1c:21:79:
         25:62:01:4b:af:3a:54:cd:fb:92:57:dc:24:7e:3d:8e:9b:d1:
         1f:da:3a:94:01:0d:d7:7b:3a:ae:a2:b0:62:0b:d8:f9:97:ad:
         1f:a9:ce:b1:3a:56:a0:c2:ce:9b:4c:b9:f0:87:94:84:1f:1e:
         d7:27:2e:a0:4a:4f:e2:84:1a:2d:51:00:1e:b7:46:b2:ec:60:
         6c:32:6d:22:7b:51:78:5f:8c:47:3f:e5:10:e4:2a:25:e1:85:
         89:e1:24:b1:d6:0a:d2:16:e0:07:f6:86:13:d7:31:60:63:2f:
         17:e3:65:55:c3:1d:8e:6f:af:70:09:72:9d:f3:91:8a:07:c7:
         9c:06:f7:69:fc:62:1a:ce:3b:cf:4b:06:91:ab:c0:ae:5d:c6:
         1d:53:4d:42:bc:45:55:11:fe:5a:35:58:9b:c6:6d:fd:93:6f:
         86:2e:da:1a:ad:bf:05:2f:e8:32:93:d9:3e:60:a2:f1:b1:7a:
         b2:d4:2e:26:00:be:b9:96:b4:ca:e2:c7:f9:49:30:03:f4:82:
         4c:e8:45:a4:ae:00:7b:54:a6:78:e8:da:59:58:e7:b8:fe:ab:
         ce:40:77:8a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBk2tMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVm
OWVlY2UxODZhY2VlN2M5ODg5M2VjYjAwZmJhZDY5ZWVkZTAxYmQwHhcNMjEwMzI0
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEyhkYTI4ZDU0ZDc3YTEx
NmYyYzg5YzUxOGFmMDQ3YTg2NzZiYjAyMTE2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhWjZ0lWYIf8JYy/IxRd7Glzpd0iZYT6e5D+LGPoUJybxH53j
Qm9yVx17i/HCJ56oeRim3untwzD/9iORW+wU2XRv12GRLAHHvZOzNqFpCqG7qNFn
BF2ezz/4gHrCKPpYQ7USRsFDFHVNOR/Ilq6dAUYcbDHkV9BuRvcOYW3fKDmJvj4b
x6z4TaK646SHoEr97lU5/iVzDCihL/JFLJm1M6QXlqSouFKPJghcQuwmQY0EUzhA
jipIBy04xg7cpqF5CbQsHqvNrx6tRFoPRdIUwzZAwxCm0kGQb9lw/1OPG23SbCRb
aeO6NfUO5BoIKNJNE4YpaL+hSPcQZ3mzdhhVLQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNDvAQJItAv68u3niHpeAXePh5I8MB8GA1UdIwQYMBaAFHJhxwR8FxTP5wMI
2blyB/auOkA/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWY5ZWVj
ZTE4NmFjZWU3Yzk4ODkzZWNiMDBmYmFkNjllZWRlMDFiZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTNmNmY2N2ItNmI0ZC00MDkzLTk3YWQtMzZiNWI4
ZGY3YmEwL2RhMjhkNTRkNzdhMTE2ZjJjODljNTE4YWYwNDdhODY3NmJiMDIxMTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lM2Y2ZjY3Yi02YjRkLTQwOTMtOTdhZC0zNmI1
YjhkZjdiYTAvZWY5ZWVjZTE4NmFjZWU3Yzk4ODkzZWNiMDBmYmFkNjllZWRlMDFi
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArqUwDANBgkqhkiG9w0BAQsFAAOCAQEAEDK9qKFUhLoKUL+5
nwR7YWxinQoAGOtptC5Hs3Ip4JQjHCF5JWIBS686VM37klfcJH49jpvRH9o6lAEN
13s6rqKwYgvY+ZetH6nOsTpWoMLOm0y58IeUhB8e1ycuoEpP4oQaLVEAHrdGsuxg
bDJtIntReF+MRz/lEOQqJeGFieEksdYK0hbgB/aGE9cxYGMvF+NlVcMdjm+vcAly
nfORigfHnAb3afxiGs47z0sGkavArl3GHVNNQrxFVRH+WjVYm8Zt/ZNvhi7aGq2/
BS/oMpPZPmCi8bF6stQuJgC+uZa0yuLH+UkwA/SCTOhFpK4Ae1SmeOjaWVjnuP6r
zkB3ig==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-ams.rpki-client.org