Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/d6bf4142d5ab5d9930cd5e48003b598145e4c40a.roa
File:                     d6bf4142d5ab5d9930cd5e48003b598145e4c40a.roa (raw, json)
Hash identifier:          SEvHa67lHV6/rEVPwMSE7uVGO9dWuaky/d7M/rkLhSc=
Subject key identifier:   23:3E:50:D6:66:E5:53:55:7D:F3:C8:68:38:2E:0C:7F:9B:6A:2C:A0
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       1FA2F1
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/d6bf4142d5ab5d9930cd5e48003b598145e4c40a.roa
Signing time:             Mon 08 May 2023 22:26:52 +0000
ROA not before:           Sun 07 May 2023 22:26:52 +0000
ROA not after:            Thu 08 May 2025 22:26:52 +0000
asID:                     266725
IP address blocks:        181.79.219.0/24 maxlen: 24
                          181.119.3.0/24 maxlen: 24
                          181.119.122.0/24 maxlen: 24
                          181.119.29.0/24 maxlen: 24
                          181.119.33.0/24 maxlen: 24
                          181.119.34.0/24 maxlen: 24
                          181.119.41.0/24 maxlen: 24
                          181.119.158.0/23 maxlen: 24
                          181.119.169.0/24 maxlen: 24
                          181.119.170.0/24 maxlen: 24
                          181.119.69.0/24 maxlen: 24
                          181.119.71.0/24 maxlen: 24
                          181.119.72.0/21 maxlen: 24
                          181.119.80.0/23 maxlen: 24
                          181.119.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2073329 (0x1fa2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: May  7 22:26:52 2023 GMT
            Not After : May  8 22:26:52 2025 GMT
        Subject: CN=d6bf4142d5ab5d9930cd5e48003b598145e4c40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:13:ee:ff:8f:09:61:56:a4:72:90:8a:02:09:
                    bc:73:43:80:84:73:1f:fe:af:88:7d:ff:a5:ee:7d:
                    11:e9:21:57:d9:49:bc:f3:c5:77:0d:cb:e7:bf:e3:
                    31:d9:52:73:0b:2b:3b:ee:c1:5b:2f:6d:c9:99:95:
                    9f:24:fd:36:24:84:5c:42:77:8b:61:ca:5c:67:07:
                    dc:63:21:0f:be:c6:b3:46:87:41:05:7f:02:14:94:
                    de:a2:17:be:34:33:8c:d6:81:17:fa:c8:fb:a7:23:
                    a8:c1:5b:27:1a:62:c2:07:c5:10:8d:91:1d:f5:59:
                    35:5c:6c:28:44:96:8c:1d:4d:b6:90:67:75:76:f0:
                    3f:f0:47:f9:6d:68:7d:a2:e1:0a:47:80:d7:b6:29:
                    b6:c2:c9:79:e4:d0:b3:54:6f:4c:5b:31:5c:b8:f7:
                    fa:5d:e5:31:74:a8:a3:8b:97:9e:49:62:28:56:af:
                    53:78:61:2c:a4:2f:23:5f:ad:01:7b:6f:a9:d4:31:
                    05:52:ad:ee:11:9f:95:c5:1d:79:ff:04:42:b7:c9:
                    aa:bc:eb:1c:1b:50:c4:12:36:75:17:45:ca:d3:82:
                    ca:5c:01:70:0d:9d:2d:8c:67:f6:1e:c7:01:61:c5:
                    d6:84:33:40:a6:0e:a8:24:10:70:33:2f:29:a1:81:
                    be:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3E:50:D6:66:E5:53:55:7D:F3:C8:68:38:2E:0C:7F:9B:6A:2C:A0
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/d6bf4142d5ab5d9930cd5e48003b598145e4c40a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.219.0/24
                  181.119.3.0/24
                  181.119.29.0/24
                  181.119.33.0-181.119.34.255
                  181.119.41.0/24
                  181.119.69.0/24
                  181.119.71.0-181.119.82.255
                  181.119.122.0/24
                  181.119.158.0/23
                  181.119.169.0-181.119.170.255

    Signature Algorithm: sha256WithRSAEncryption
         68:ae:bd:a1:45:06:4c:a9:5b:a4:6a:77:52:b4:46:c5:ac:0f:
         dd:e1:f2:4f:60:4e:83:f4:59:71:12:2e:10:59:97:79:6f:c4:
         fa:af:31:58:a2:08:d9:46:01:ba:52:d6:0d:b1:78:c7:8f:ad:
         50:23:03:4b:97:50:3b:06:9c:bd:46:a1:34:e0:3a:49:22:c9:
         47:ba:d3:1d:88:3e:88:6c:d4:63:b2:75:6e:09:2c:88:6c:7d:
         d8:14:6e:8d:bf:8e:e0:3a:f4:58:c4:16:fe:c1:2b:8a:0e:63:
         77:7d:ac:18:ff:0a:e6:99:cb:71:7d:0a:2c:48:c5:95:47:d0:
         1d:e0:be:de:fa:e3:66:90:c8:ef:8b:10:e2:14:87:2d:b8:62:
         f3:2c:91:ee:55:75:96:1a:d5:d3:23:c1:ec:2c:71:ec:c5:d4:
         6e:d8:bc:ce:30:34:ae:79:7b:84:b1:54:5f:68:2a:45:e4:6d:
         b0:00:61:53:f5:61:c9:4e:5d:7b:d0:d1:45:ad:86:59:25:c4:
         b7:48:c1:8f:32:59:d5:c8:c0:0b:73:a6:ce:31:f4:38:a4:b6:
         55:ec:b0:d8:4b:52:1c:f5:76:fa:f1:d0:cf:6c:57:8d:b7:27:
         0b:7a:82:20:6f:a4:42:f6:c2:bc:10:9b:a0:a7:3a:98:af:a0:
         6f:89:63:87
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIDH6LxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMy
Y2ZjMzIxMjQ1NTQ2NGNkOGY4NTZhMzQ4YjJkNWNhZjczZGNkNzMwHhcNMjMwNTA3
MjIyNjUyWhcNMjUwNTA4MjIyNjUyWjAzMTEwLwYDVQQDEyhkNmJmNDE0MmQ1YWI1
ZDk5MzBjZDVlNDgwMDNiNTk4MTQ1ZTRjNDBhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuBPu/48JYVakcpCKAgm8c0OAhHMf/q+Iff+l7n0R6SFX2Um8
88V3Dcvnv+Mx2VJzCys77sFbL23JmZWfJP02JIRcQneLYcpcZwfcYyEPvsazRodB
BX8CFJTeohe+NDOM1oEX+sj7pyOowVsnGmLCB8UQjZEd9Vk1XGwoRJaMHU22kGd1
dvA/8Ef5bWh9ouEKR4DXtim2wsl55NCzVG9MWzFcuPf6XeUxdKiji5eeSWIoVq9T
eGEspC8jX60Be2+p1DEFUq3uEZ+VxR15/wRCt8mqvOscG1DEEjZ1F0XK04LKXAFw
DZ0tjGf2HscBYcXWhDNApg6oJBBwMy8poYG+vwIDAQABo4ICqTCCAqUwHQYDVR0O
BBYEFCM+UNZm5VNVffPIaDguDH+baiygMB8GA1UdIwQYMBaAFO2XYCMHZoB2YyKf
bUEoBQfvncIpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzJjZmMz
MjEyNDU1NDY0Y2Q4Zjg1NmEzNDhiMmQ1Y2FmNzNkY2Q3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGVmNTY4NmQtZmM2Ni00YzhlLWJlNGYtZGE2OWZi
YzJiZmI1L2Q2YmY0MTQyZDVhYjVkOTkzMGNkNWU0ODAwM2I1OTgxNDVlNGM0MGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wZWY1Njg2ZC1mYzY2LTRjOGUtYmU0Zi1kYTY5
ZmJjMmJmYjUvYzJjZmMzMjEyNDU1NDY0Y2Q4Zjg1NmEzNDhiMmQ1Y2FmNzNkY2Q3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBtBggrBgEFBQcBBwEB/wRe
MFwwWgQCAAEwVAMEALVP2wMEALV3AwMEALV3HTAMAwQAtXchAwQAtXciAwQAtXcp
AwQAtXdFMAwDBAC1d0cDBAC1d1IDBAC1d3oDBAG1d54wDAMEALV3qQMEALV3qjAN
BgkqhkiG9w0BAQsFAAOCAQEAaK69oUUGTKlbpGp3UrRGxawP3eHyT2BOg/RZcRIu
EFmXeW/E+q8xWKII2UYBulLWDbF4x4+tUCMDS5dQOwacvUahNOA6SSLJR7rTHYg+
iGzUY7J1bgksiGx92BRujb+O4Dr0WMQW/sErig5jd32sGP8K5pnLcX0KLEjFlUfQ
HeC+3vrjZpDI74sQ4hSHLbhi8yyR7lV1lhrV0yPB7Cxx7MXUbti8zjA0rnl7hLFU
X2gqReRtsABhU/VhyU5de9DRRa2GWSXEt0jBjzJZ1cjAC3OmzjH0OKS2Veyw2EtS
HPV2+vHQz2xXjbcnC3qCIG+kQvbCvBCboKc6mK+gb4ljhw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-ams.rpki-client.org