Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/abe2c5d72299dbf738665bc5a426eb0005d1047c.roa
File:                     abe2c5d72299dbf738665bc5a426eb0005d1047c.roa (raw, json)
Hash identifier:          r65mTUgBcFkckZs7HednoIAG60Dims+DC7XVdi6Bkzg=
Subject key identifier:   B2:0B:DD:EC:C8:54:33:00:2D:BA:D5:8A:A9:03:EC:77:01:3F:A7:B2
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       1B31EE
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/abe2c5d72299dbf738665bc5a426eb0005d1047c.roa
Signing time:             Wed 18 May 2022 16:05:57 +0000
ROA not before:           Fri 25 Jun 2021 03:00:00 +0000
ROA not after:            Fri 25 Jun 2060 03:00:00 +0000
asID:                     14080
IP address blocks:        181.49.92.0/22 maxlen: 22
                          186.86.140.0/22 maxlen: 22
                          186.86.155.0/24 maxlen: 24
                          190.144.62.0/24 maxlen: 24
                          190.144.169.0/24 maxlen: 24
                          190.144.177.0/24 maxlen: 24
                          190.144.196.0/24 maxlen: 24
                          190.144.201.0/24 maxlen: 24
                          190.144.202.0/24 maxlen: 24
                          190.144.203.0/24 maxlen: 24
                          190.144.204.0/24 maxlen: 24
                          190.144.205.0/24 maxlen: 24
                          190.144.209.0/24 maxlen: 24
                          190.145.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1782254 (0x1b31ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Jun 25 03:00:00 2021 GMT
            Not After : Jun 25 03:00:00 2060 GMT
        Subject: CN=abe2c5d72299dbf738665bc5a426eb0005d1047c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:9b:27:8c:3e:10:c6:0a:3b:ee:8e:e5:18:
                    7f:2a:9f:16:2f:89:b4:d5:da:df:71:b4:65:e8:a4:
                    57:60:2d:b2:43:c2:73:63:dd:5e:53:d5:72:fa:9a:
                    d3:e1:c7:6b:db:e7:a1:66:0f:86:80:78:c4:0a:96:
                    82:52:95:22:a5:aa:46:00:25:87:d5:38:57:75:38:
                    47:0e:ba:a2:6a:52:9f:ac:d1:6d:7f:32:dc:74:3d:
                    70:1c:88:1b:0a:09:6b:76:67:f7:5e:ee:7e:d5:1b:
                    5b:3d:08:af:37:b2:5c:2b:f8:ac:f8:58:30:25:44:
                    b2:ca:54:da:db:84:35:96:fe:08:16:a2:63:4a:67:
                    2a:b6:60:ba:c1:a6:ce:0b:76:61:50:d2:6c:a8:89:
                    b9:a7:c3:ae:11:b7:53:15:07:75:ff:17:ee:bc:b5:
                    c1:59:96:c1:8e:4e:95:3c:dd:19:5b:ff:5f:b0:76:
                    d3:14:09:a4:c7:e1:0b:72:82:f1:da:40:37:08:89:
                    f8:91:c0:d9:2b:3e:fb:d9:6d:f6:ed:3f:df:8e:1d:
                    c2:c0:ab:46:dd:95:85:65:a9:2b:cb:6e:1b:dc:ea:
                    b0:5b:52:3f:8f:19:4b:2f:77:b1:41:f9:54:34:3b:
                    49:44:5e:eb:7a:38:56:5e:7a:5b:f5:ab:52:12:31:
                    eb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0B:DD:EC:C8:54:33:00:2D:BA:D5:8A:A9:03:EC:77:01:3F:A7:B2
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/abe2c5d72299dbf738665bc5a426eb0005d1047c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.49.92.0/22
                  186.86.140.0/22
                  186.86.155.0/24
                  190.144.62.0/24
                  190.144.169.0/24
                  190.144.177.0/24
                  190.144.196.0/24
                  190.144.201.0-190.144.205.255
                  190.144.209.0/24
                  190.145.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:9e:23:08:c6:98:27:43:7e:b7:51:1f:dc:88:8b:b2:c6:69:
         1f:a2:c9:ee:f9:0a:b5:26:d0:7c:1b:b6:41:bd:1c:61:c8:24:
         75:3a:cc:f7:fe:c6:dd:55:b0:56:f2:6a:76:62:23:24:17:6f:
         a1:de:1e:08:49:9c:fc:b4:e5:41:d2:94:98:21:fc:ee:7e:00:
         fb:61:d2:27:cc:2d:0b:05:32:ca:19:63:18:54:f4:8a:01:41:
         5e:4c:09:ac:07:19:9b:4b:d5:73:ec:06:4e:3d:ab:87:a6:83:
         d2:d2:9a:97:48:32:5a:94:f3:44:05:53:b4:d5:4b:26:cb:01:
         b4:15:c2:61:09:be:c4:9b:23:10:8f:9e:10:4b:56:e5:d2:43:
         53:1a:44:fa:79:84:12:40:cb:a2:5a:73:5e:fa:2b:39:3a:c8:
         4a:a8:9d:42:1c:69:5a:bd:5c:d6:e1:d1:0f:c2:a8:c5:67:d1:
         52:7b:2c:5a:b3:9c:e0:d7:df:38:2b:ec:77:13:43:99:76:1b:
         63:6f:4c:68:33:62:d2:40:1d:0b:c0:dc:72:3d:b2:93:62:63:
         c5:66:68:7c:c6:37:2d:29:15:8f:80:76:18:e7:02:cf:66:65:
         0a:92:6c:52:f8:e1:b0:bb:c3:30:e0:c5:b6:98:05:8a:64:61:
         5f:56:89:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:54 2024 by rpki-client on console-ams.rpki-client.org