Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/47132b4ca82336aee422c58f5aa90cbb10fc2b5d.roa
File:                     47132b4ca82336aee422c58f5aa90cbb10fc2b5d.roa (raw, json)
Hash identifier:          djH5zDrP4UmOK3MiHFXWpOOWEB0Q7K0YNTGKZw2+HJE=
Subject key identifier:   A6:6E:50:DB:84:6C:4F:1F:BA:36:CD:69:06:CC:44:CA:C8:22:07:EC
Certificate issuer:       /CN=0a780aded9dabf63283959a6696312a1fecffbf4
Certificate serial:       1290DB
Authority key identifier: 40:A7:5D:8C:A2:65:BE:0A:A5:BC:89:9D:98:42:5B:F9:69:03:61:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a780aded9dabf63283959a6696312a1fecffbf4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/47132b4ca82336aee422c58f5aa90cbb10fc2b5d.roa
Signing time:             Sat 30 Oct 2021 18:41:46 +0000
ROA not before:           Sat 30 Oct 2021 03:00:00 +0000
ROA not after:            Mon 30 Oct 2023 03:00:00 +0000
asID:                     17048
IP address blocks:        186.190.208.0/24 maxlen: 24
                          186.190.209.0/24 maxlen: 24
                          186.190.216.0/24 maxlen: 24
                          186.190.217.0/24 maxlen: 24
                          186.190.218.0/24 maxlen: 24
                          186.190.219.0/24 maxlen: 24
                          2800:5d0:213::/48 maxlen: 48
                          2800:5d0:801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1216731 (0x1290db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a780aded9dabf63283959a6696312a1fecffbf4
        Validity
            Not Before: Oct 30 03:00:00 2021 GMT
            Not After : Oct 30 03:00:00 2023 GMT
        Subject: CN=47132b4ca82336aee422c58f5aa90cbb10fc2b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:09:76:43:0c:18:28:10:cf:99:f5:6a:72:eb:
                    8f:8a:94:67:45:d8:4e:d8:ff:2e:ee:31:61:8e:3d:
                    70:47:21:21:65:64:c5:ec:da:19:b4:8b:50:2c:7d:
                    97:2d:4b:54:8c:63:10:42:c1:c0:6a:f1:7e:27:6b:
                    31:a6:53:ff:83:a3:e6:9a:88:6c:0f:29:83:1a:cc:
                    e4:08:08:06:87:17:0f:9f:63:d2:1d:06:01:7e:db:
                    73:77:f2:c7:3e:5d:46:70:dc:de:3a:18:95:2a:6e:
                    7d:d6:3d:a4:e4:38:64:4c:6b:38:e0:50:45:de:13:
                    e4:d3:77:19:a0:8c:3c:73:d3:30:38:05:3c:12:1a:
                    8d:4d:c2:1f:ec:8f:71:d9:c7:5a:81:2c:d3:3c:46:
                    ad:7b:9f:43:08:5f:38:15:8e:0c:72:86:80:fe:38:
                    cb:ff:1e:bd:2a:b7:be:ed:21:f1:3e:e9:39:cd:b2:
                    22:ce:65:cf:83:61:5c:59:5e:9f:b4:32:7f:6a:16:
                    60:57:82:00:e4:6d:ae:fd:bc:a0:ea:af:85:10:89:
                    6c:60:e4:1d:8d:f0:87:d5:7a:b8:6b:55:99:0b:ab:
                    01:df:35:9b:60:db:52:9c:d6:07:01:e5:c7:6a:54:
                    57:5d:04:59:09:2d:4b:90:3a:da:d9:7e:c6:83:12:
                    82:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6E:50:DB:84:6C:4F:1F:BA:36:CD:69:06:CC:44:CA:C8:22:07:EC
            X509v3 Authority Key Identifier:
                keyid:40:A7:5D:8C:A2:65:BE:0A:A5:BC:89:9D:98:42:5B:F9:69:03:61:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a780aded9dabf63283959a6696312a1fecffbf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/47132b4ca82336aee422c58f5aa90cbb10fc2b5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/0a780aded9dabf63283959a6696312a1fecffbf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.208.0/23
                  186.190.216.0/22
                IPv6:
                  2800:5d0:213::/48
                  2800:5d0:801::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:77:47:74:dc:9d:c3:07:ba:67:ee:07:a1:ef:a5:f2:cd:4b:
         ae:d3:29:01:01:6d:8f:8c:f7:b3:08:e2:84:b2:2e:25:0d:25:
         a8:23:33:7a:9d:40:30:58:6b:2c:c2:36:f5:34:44:4c:cd:d0:
         7c:0f:15:2c:68:63:db:75:38:ed:14:0a:26:3b:c2:6b:32:ca:
         89:16:18:6b:81:9e:0f:29:2b:5d:bd:fd:5e:f2:30:2a:d9:f4:
         43:4f:b3:6e:36:8c:fc:08:f2:9f:1f:62:07:83:28:59:17:f6:
         b2:4d:bc:39:c8:3e:5a:5b:bd:3e:26:47:8e:d5:cd:53:92:3a:
         11:28:81:17:7c:a0:c4:c9:83:d6:c2:5b:cf:29:17:20:eb:01:
         06:f1:31:9e:ba:8a:e3:b0:ff:e2:22:11:ad:d8:47:98:fb:0e:
         a7:83:cd:5e:43:d1:00:87:51:9c:b0:10:fc:d9:a5:73:4d:15:
         2c:a5:d4:42:4b:d6:e1:15:15:a2:97:f9:07:b2:5b:89:65:d3:
         f3:7a:e1:ca:02:c3:79:e4:0d:36:b8:e2:33:0f:b5:92:c1:f2:
         25:03:cd:97:93:28:8f:af:8f:4b:d4:75:64:a3:52:df:13:8d:
         4f:65:04:23:4b:ea:86:80:86:01:c8:7c:b1:77:7e:0e:38:65:
         ee:6b:d6:8b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIDEpDbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBh
NzgwYWRlZDlkYWJmNjMyODM5NTlhNjY5NjMxMmExZmVjZmZiZjQwHhcNMjExMDMw
MDMwMDAwWhcNMjMxMDMwMDMwMDAwWjAzMTEwLwYDVQQDEyg0NzEzMmI0Y2E4MjMz
NmFlZTQyMmM1OGY1YWE5MGNiYjEwZmMyYjVkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoQl2QwwYKBDPmfVqcuuPipRnRdhO2P8u7jFhjj1wRyEhZWTF
7NoZtItQLH2XLUtUjGMQQsHAavF+J2sxplP/g6PmmohsDymDGszkCAgGhxcPn2PS
HQYBfttzd/LHPl1GcNzeOhiVKm591j2k5DhkTGs44FBF3hPk03cZoIw8c9MwOAU8
EhqNTcIf7I9x2cdagSzTPEate59DCF84FY4McoaA/jjL/x69Kre+7SHxPuk5zbIi
zmXPg2FcWV6ftDJ/ahZgV4IA5G2u/byg6q+FEIlsYOQdjfCH1Xq4a1WZC6sB3zWb
YNtSnNYHAeXHalRXXQRZCS1LkDra2X7GgxKC6wIDAQABo4ICezCCAncwHQYDVR0O
BBYEFKZuUNuEbE8fujbNaQbMRMrIIgfsMB8GA1UdIwQYMBaAFECnXYyiZb4KpbyJ
nZhCW/lpA2FoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGE3ODBh
ZGVkOWRhYmY2MzI4Mzk1OWE2Njk2MzEyYTFmZWNmZmJmNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGE0OGVkNzMtODYwNy00ZWYyLWFlYjAtNzNhMDM3
YzYyMzExLzQ3MTMyYjRjYTgyMzM2YWVlNDIyYzU4ZjVhYTkwY2JiMTBmYzJiNWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wYTQ4ZWQ3My04NjA3LTRlZjItYWViMC03M2Ew
MzdjNjIzMTEvMGE3ODBhZGVkOWRhYmY2MzI4Mzk1OWE2Njk2MzEyYTFmZWNmZmJm
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/BggrBgEFBQcBBwEB/wQw
MC4wEgQCAAEwDAMEAbq+0AMEArq+2DAYBAIAAjASAwcAKAAF0AITAwcAKAAF0AgB
MA0GCSqGSIb3DQEBCwUAA4IBAQB4d0d03J3DB7pn7geh76XyzUuu0ykBAW2PjPez
COKEsi4lDSWoIzN6nUAwWGsswjb1NERMzdB8DxUsaGPbdTjtFAomO8JrMsqJFhhr
gZ4PKStdvf1e8jAq2fRDT7NuNoz8CPKfH2IHgyhZF/ayTbw5yD5aW70+JkeO1c1T
kjoRKIEXfKDEyYPWwlvPKRcg6wEG8TGeuorjsP/iIhGt2EeY+w6ng81eQ9EAh1Gc
sBD82aVzTRUspdRCS9bhFRWil/kHsluJZdPzeuHKAsN55A02uOIzD7WSwfIlA82X
kyiPr49L1HVko1LfE41PZQQjS+qGgIYByHyxd34OOGXua9aL
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org