Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b67f5535638cbb156f4c4165dfb840d86bf264da.roa
File:                     b67f5535638cbb156f4c4165dfb840d86bf264da.roa (raw, json)
Hash identifier:          V6GMpj58bA29zeRPH5hSh1FGB+TyRq6vHcuOauru7pg=
Subject key identifier:   B8:21:C8:65:7B:E8:1B:8A:33:01:9F:1F:C2:B4:73:A8:12:CC:2F:B8
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       1819C8
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b67f5535638cbb156f4c4165dfb840d86bf264da.roa
Signing time:             Wed 26 Jan 2022 22:47:36 +0000
ROA not before:           Fri 03 Dec 2021 03:00:00 +0000
ROA not after:            Sun 03 Dec 2023 03:00:00 +0000
asID:                     14080
IP address blocks:        186.83.29.0/24 maxlen: 24
                          186.83.31.0/24 maxlen: 30
                          186.86.125.0/24 maxlen: 29
                          186.86.124.0/24 maxlen: 29
                          190.158.204.0/22 maxlen: 24
                          201.221.172.0/22 maxlen: 24
                          181.48.176.0/24 maxlen: 24
                          181.49.106.0/24 maxlen: 24
                          190.144.130.0/24 maxlen: 24
                          190.144.174.0/24 maxlen: 24
                          190.145.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1579464 (0x1819c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Dec  3 03:00:00 2021 GMT
            Not After : Dec  3 03:00:00 2023 GMT
        Subject: CN=b67f5535638cbb156f4c4165dfb840d86bf264da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f7:d8:22:ce:fd:88:79:56:ed:aa:05:4a:d3:
                    34:6e:55:00:d5:b9:45:c4:64:ae:c9:a3:05:8d:fc:
                    be:e2:75:6a:cd:23:03:15:d1:02:d5:62:f8:0d:21:
                    8d:7f:71:ba:3c:39:76:93:a0:5e:3a:be:e5:09:92:
                    18:0d:61:18:79:c5:23:4f:c3:31:9a:60:80:b8:e6:
                    21:51:8d:20:e6:1e:2f:b5:df:e2:d7:75:ce:b0:a3:
                    6b:41:56:8e:a9:f1:0b:78:1a:68:8e:3a:2f:5d:53:
                    24:0e:59:97:c3:2e:69:e7:fb:78:21:d6:cc:6b:7d:
                    53:a3:dd:94:bc:e1:5e:5b:77:58:46:30:4a:b7:aa:
                    85:2a:8f:11:5d:0d:53:23:bf:1d:2b:4d:64:9b:c3:
                    1d:22:20:75:93:d6:56:ec:06:05:8a:78:6a:39:1b:
                    92:2a:b7:f6:93:ee:ee:e9:74:0c:ea:cb:dd:7d:d9:
                    82:70:71:32:16:4a:fa:46:26:81:30:5d:14:65:05:
                    7b:9c:d5:c7:40:b6:c5:cb:54:67:e7:f9:2f:bf:60:
                    60:88:bf:42:18:02:13:0e:8a:1b:d4:a5:6d:32:41:
                    d2:e5:5f:e1:0a:cb:14:ed:61:1a:ab:16:36:2a:27:
                    b4:18:aa:bb:d6:50:f2:65:1a:fb:e2:34:be:62:f2:
                    bd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:21:C8:65:7B:E8:1B:8A:33:01:9F:1F:C2:B4:73:A8:12:CC:2F:B8
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b67f5535638cbb156f4c4165dfb840d86bf264da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.48.176.0/24
                  181.49.106.0/24
                  186.83.29.0/24
                  186.83.31.0/24
                  186.86.124.0/23
                  190.144.130.0/24
                  190.144.174.0/24
                  190.145.103.0/24
                  190.158.204.0/22
                  201.221.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:b6:26:7e:fb:56:71:48:a9:14:7a:a0:7d:0d:92:5d:41:07:
         ed:a7:b0:ab:a7:59:37:ed:e6:3d:e7:d9:04:86:48:e9:9b:1d:
         ea:07:5a:33:f0:c6:24:c0:24:64:64:85:44:21:83:7f:bc:ea:
         ef:67:d4:55:63:64:c4:8e:0a:b8:c7:65:e7:13:29:1b:c9:16:
         8a:c1:ce:bb:1b:31:19:d0:15:45:0c:cd:25:ac:12:19:7e:ce:
         f2:19:65:c7:c9:cb:05:1f:2a:73:d5:25:d8:a5:34:d7:c8:a5:
         db:76:f6:2c:c5:85:61:fd:c9:69:c7:c8:93:74:f9:ab:1e:d1:
         e7:39:55:ec:a7:05:58:9d:62:c2:72:07:95:ad:33:5e:08:48:
         eb:c3:19:99:73:64:28:23:d8:6c:d9:07:da:46:73:96:27:47:
         f1:fb:d2:9e:89:4b:ed:cd:2e:7f:09:09:4f:44:57:b3:ff:f2:
         78:fe:73:f5:d5:4d:ea:cd:7c:db:3b:8f:58:53:d3:3d:45:01:
         ae:26:ce:b8:50:0d:cb:d0:ac:1c:aa:e0:4d:7b:c1:f9:74:6a:
         6d:33:af:05:4a:26:b7:13:31:81:ef:82:76:bd:c6:d6:76:51:
         13:61:38:c0:66:2f:80:67:40:cc:87:95:25:43:21:f7:60:48:
         e8:49:9b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org