Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/b2a62d6925f24f459f4cb1bb8d1bc33ebdd58307.roa
File:                     b2a62d6925f24f459f4cb1bb8d1bc33ebdd58307.roa (raw, json)
Hash identifier:          jJ6NA+4FQksJLFe7BKvp45ibURngGsxO8Hw4yZcAdcE=
Subject key identifier:   BA:CC:0A:A1:AD:19:FA:A1:47:62:D6:1A:FD:DE:B9:66:8E:F8:ED:86
Certificate issuer:       /CN=b9674112d06595f2d6b84802ac8416687159afd1
Certificate serial:       0D35F4
Authority key identifier: 54:08:20:24:F6:0A:38:3E:38:22:4F:8F:77:77:E2:E5:35:5E:9F:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9674112d06595f2d6b84802ac8416687159afd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/b2a62d6925f24f459f4cb1bb8d1bc33ebdd58307.roa
Signing time:             Wed 24 Mar 2021 14:34:05 +0000
ROA not before:           Wed 24 Mar 2021 14:34:05 +0000
ROA not after:            Tue 24 Mar 2026 14:34:05 +0000
asID:                     262237
IP address blocks:        190.196.208.0/24 maxlen: 24
                          190.196.209.0/24 maxlen: 24
                          190.196.210.0/24 maxlen: 24
                          190.196.211.0/24 maxlen: 24
                          190.196.212.0/24 maxlen: 24
                          190.196.213.0/24 maxlen: 24
                          190.196.214.0/24 maxlen: 24
                          190.196.215.0/24 maxlen: 24
                          190.196.217.0/24 maxlen: 24
                          190.196.218.0/24 maxlen: 24
                          190.196.219.0/24 maxlen: 24
                          190.196.220.0/24 maxlen: 24
                          190.196.221.0/24 maxlen: 24
                          190.196.222.0/24 maxlen: 24
                          190.196.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865780 (0xd35f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9674112d06595f2d6b84802ac8416687159afd1
        Validity
            Not Before: Mar 24 14:34:05 2021 GMT
            Not After : Mar 24 14:34:05 2026 GMT
        Subject: CN=b2a62d6925f24f459f4cb1bb8d1bc33ebdd58307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0c:7f:fb:bb:a5:39:ce:d1:3e:cf:58:3b:23:
                    9f:cb:a1:e3:c2:62:8b:06:ba:39:78:64:60:f7:12:
                    e5:b9:7d:07:36:2d:c3:b2:07:ea:a1:d3:79:28:a8:
                    cd:19:59:0c:fa:04:4d:b6:c0:3b:24:b1:82:35:dc:
                    92:bb:e3:b9:39:a1:ea:4f:03:1e:99:6c:9f:b4:c3:
                    92:cc:72:9d:c6:08:65:fa:dd:46:5d:ea:59:9a:aa:
                    32:be:9b:74:f7:4b:55:6a:0b:7b:62:b9:67:23:ec:
                    4f:18:db:20:15:de:83:9b:fe:c2:45:01:ba:3c:c4:
                    e8:d9:d4:83:2b:db:d9:fb:82:3a:6a:a0:74:91:5b:
                    8e:f0:02:d3:3e:5b:e7:5c:ba:66:5f:5c:21:4d:b2:
                    5c:c4:4b:e6:05:ad:6c:27:18:af:cf:dc:52:e5:b6:
                    74:25:45:7e:da:28:fe:8a:51:3d:d4:1f:2a:a5:60:
                    db:42:99:e6:cf:0e:5c:c3:06:29:9a:4c:ec:ad:cf:
                    93:c1:02:6a:24:ed:5c:96:10:e7:2c:ce:6f:7d:1a:
                    e6:4a:fe:ae:db:de:eb:ff:d7:fa:ab:ce:24:09:0b:
                    bc:7e:ba:46:70:2a:25:bf:6b:9e:88:60:56:9c:9c:
                    36:2c:c3:66:05:ec:bb:d6:bc:3c:f5:02:06:e8:b2:
                    13:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CC:0A:A1:AD:19:FA:A1:47:62:D6:1A:FD:DE:B9:66:8E:F8:ED:86
            X509v3 Authority Key Identifier:
                keyid:54:08:20:24:F6:0A:38:3E:38:22:4F:8F:77:77:E2:E5:35:5E:9F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9674112d06595f2d6b84802ac8416687159afd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/b2a62d6925f24f459f4cb1bb8d1bc33ebdd58307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/b9674112d06595f2d6b84802ac8416687159afd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.208.0/21
                  190.196.217.0-190.196.223.255

    Signature Algorithm: sha256WithRSAEncryption
         3a:57:cd:57:e9:ff:e6:20:a7:24:6d:11:83:8b:7b:b8:5c:a0:
         57:17:06:9d:54:6c:93:e0:c5:24:77:4d:63:54:73:eb:82:85:
         58:ff:43:d1:a1:9a:c7:02:ec:76:a1:f7:03:6d:31:78:2e:35:
         ab:44:2e:55:ac:75:cc:00:88:e2:ca:d7:d7:f9:b2:34:aa:0c:
         10:d6:42:73:7a:e7:25:61:7e:32:dc:15:bd:bf:5f:7b:05:2d:
         91:00:6f:6b:a8:d1:34:43:ac:d7:51:f8:da:29:cd:4a:26:f2:
         b7:f2:19:0a:8c:9f:8e:f5:da:de:60:2e:c9:15:32:23:09:c7:
         6f:56:64:d1:91:f5:08:29:a7:87:0a:cc:b0:d0:3a:58:27:bb:
         8b:e3:50:c3:93:25:10:bb:e8:a5:56:11:ef:c7:a1:b9:c2:84:
         48:bb:a9:41:ca:a7:97:6d:17:b3:54:06:1e:15:eb:e3:46:4f:
         01:3b:8a:2a:b8:4c:47:70:c1:fa:b6:86:18:83:3d:ac:9f:99:
         7e:1e:0e:ce:4e:40:2f:1d:fe:57:7e:d3:79:cf:8e:76:d2:7b:
         40:3d:ed:06:a0:dd:e4:83:a8:c8:29:ea:5f:be:ae:d5:f1:2e:
         eb:13:ba:a4:f2:05:b8:d6:b4:83:81:52:4e:8d:6b:85:20:b6:
         96:9d:41:b3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDDTX0MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI5
Njc0MTEyZDA2NTk1ZjJkNmI4NDgwMmFjODQxNjY4NzE1OWFmZDEwHhcNMjEwMzI0
MTQzNDA1WhcNMjYwMzI0MTQzNDA1WjAzMTEwLwYDVQQDEyhiMmE2MmQ2OTI1ZjI0
ZjQ1OWY0Y2IxYmI4ZDFiYzMzZWJkZDU4MzA3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0Qx/+7ulOc7RPs9YOyOfy6HjwmKLBro5eGRg9xLluX0HNi3D
sgfqodN5KKjNGVkM+gRNtsA7JLGCNdySu+O5OaHqTwMemWyftMOSzHKdxghl+t1G
XepZmqoyvpt090tVagt7YrlnI+xPGNsgFd6Dm/7CRQG6PMTo2dSDK9vZ+4I6aqB0
kVuO8ALTPlvnXLpmX1whTbJcxEvmBa1sJxivz9xS5bZ0JUV+2ij+ilE91B8qpWDb
Qpnmzw5cwwYpmkzsrc+TwQJqJO1clhDnLM5vfRrmSv6u297r/9f6q84kCQu8frpG
cColv2ueiGBWnJw2LMNmBey71rw89QIG6LIT5wIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFLrMCqGtGfqhR2LWGv3euWaO+O2GMB8GA1UdIwQYMBaAFFQIICT2Cjg+OCJP
j3d34uU1Xp8kMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjk2NzQx
MTJkMDY1OTVmMmQ2Yjg0ODAyYWM4NDE2Njg3MTU5YWZkMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTZiZTM0N2QtN2JmMS00MTM1LTliOGYtM2JmNzk3
N2IyZDhhL2IyYTYyZDY5MjVmMjRmNDU5ZjRjYjFiYjhkMWJjMzNlYmRkNTgzMDcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNmJlMzQ3ZC03YmYxLTQxMzUtOWI4Zi0zYmY3
OTc3YjJkOGEvYjk2NzQxMTJkMDY1OTVmMmQ2Yjg0ODAyYWM4NDE2Njg3MTU5YWZk
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAEwFAMEA77E0DAMAwQAvsTZAwQFvsTAMA0GCSqGSIb3DQEBCwUAA4IB
AQA6V81X6f/mIKckbRGDi3u4XKBXFwadVGyT4MUkd01jVHPrgoVY/0PRoZrHAux2
ofcDbTF4LjWrRC5VrHXMAIjiytfX+bI0qgwQ1kJzeuclYX4y3BW9v197BS2RAG9r
qNE0Q6zXUfjaKc1KJvK38hkKjJ+O9dreYC7JFTIjCcdvVmTRkfUIKaeHCsyw0DpY
J7uL41DDkyUQu+ilVhHvx6G5woRIu6lByqeXbRezVAYeFevjRk8BO4oquExHcMH6
toYYgz2sn5l+Hg7OTkAvHf5XftN5z4520ntAPe0GoN3kg6jIKepfvq7V8S7rE7qk
8gW41rSDgVJOjWuFILaWnUGz
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org