Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/77d1df82ced945e0b1d695de0e1e984bcac1d420.roa
File:                     77d1df82ced945e0b1d695de0e1e984bcac1d420.roa (raw, json)
Hash identifier:          fek8MZv//XuVpMQF0LWoLndZe4yfAcl0u1RpnN5p2xU=
Subject key identifier:   51:8F:84:69:87:7F:99:09:7F:45:AF:FF:A6:C8:23:0A:33:3D:18:5A
Certificate issuer:       /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial:       0CB0F9
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/77d1df82ced945e0b1d695de0e1e984bcac1d420.roa
Signing time:             Wed 21 Dec 2022 19:30:07 +0000
ROA not before:           Tue 08 Feb 2022 03:00:00 +0000
ROA not after:            Fri 09 Feb 2024 03:00:00 +0000
asID:                     26617
IP address blocks:        190.104.113.0/24 maxlen: 24
                          190.104.117.0/24 maxlen: 24
                          200.12.36.0/24 maxlen: 24
                          200.12.37.0/24 maxlen: 24
                          200.12.38.0/24 maxlen: 24
                          200.12.39.0/24 maxlen: 24
                          200.12.40.0/24 maxlen: 24
                          200.12.41.0/24 maxlen: 24
                          200.12.42.0/24 maxlen: 24
                          200.12.43.0/24 maxlen: 24
                          200.12.44.0/24 maxlen: 24
                          200.12.45.0/24 maxlen: 24
                          200.12.46.0/24 maxlen: 24
                          200.12.48.0/24 maxlen: 24
                          200.12.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831737 (0xcb0f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
        Validity
            Not Before: Feb  8 03:00:00 2022 GMT
            Not After : Feb  9 03:00:00 2024 GMT
        Subject: CN=77d1df82ced945e0b1d695de0e1e984bcac1d420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0d:62:97:5c:4c:33:14:6f:c9:04:4e:7d:1f:
                    f1:f1:87:9e:f7:01:93:54:a6:b6:66:00:b3:d4:c4:
                    94:04:2c:3a:99:61:f0:8a:d7:9f:92:0b:9a:47:f5:
                    2e:ad:e4:f5:de:14:f1:dd:81:47:7e:31:90:94:3f:
                    44:f6:ff:dd:c6:ea:e5:b2:db:1e:b3:c0:11:50:8f:
                    51:7c:0c:85:66:bc:68:3b:66:89:dd:a5:73:fa:18:
                    35:1b:db:f1:7e:19:0f:64:f7:6b:d5:78:a4:12:41:
                    83:5d:3f:5a:7a:c9:e5:cf:96:aa:23:0e:36:77:81:
                    68:3f:da:26:16:c3:1b:8c:d2:63:f3:7c:30:0c:f0:
                    27:8a:49:b5:54:c5:b4:0d:b8:de:c4:b1:61:09:58:
                    5c:12:bc:e3:4a:65:8d:79:e9:db:71:78:64:78:8a:
                    fe:88:62:56:7c:ec:82:23:5c:dc:28:23:c1:a0:57:
                    39:9a:e0:0f:2f:8a:19:3c:b0:4a:84:66:92:1b:bd:
                    cf:5b:12:ff:40:d1:a4:a4:6d:8d:f3:e6:4e:4f:8b:
                    42:7c:32:1a:b5:5e:ea:c6:e6:d7:39:af:e7:30:c8:
                    3c:c9:1f:a9:f7:4d:fb:04:b3:b6:0a:64:7d:e3:6c:
                    cf:0a:9a:52:6b:02:9a:ed:7a:e6:29:d4:8d:5f:33:
                    7a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8F:84:69:87:7F:99:09:7F:45:AF:FF:A6:C8:23:0A:33:3D:18:5A
            X509v3 Authority Key Identifier:
                keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/77d1df82ced945e0b1d695de0e1e984bcac1d420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.113.0/24
                  190.104.117.0/24
                  200.12.36.0-200.12.46.255
                  200.12.48.0/24
                  200.12.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:fc:23:b0:b0:89:c5:04:5c:b2:9d:28:b5:4a:99:0f:59:05:
         62:d4:cf:79:f1:ce:89:a4:20:29:e9:b8:59:d3:70:aa:21:05:
         b3:60:0a:e5:1e:e5:5a:fc:ed:96:18:83:8a:aa:a5:ab:3e:0c:
         24:24:65:64:2f:a7:7e:be:7b:a4:97:c3:3a:1f:2c:06:69:e9:
         6a:72:99:43:a1:06:1b:67:51:e7:00:b9:46:8a:33:d2:a3:87:
         8b:51:1c:a3:44:b1:bc:a9:80:77:df:56:4a:43:52:75:53:ec:
         2c:93:c5:b4:1a:61:ce:17:b3:6d:f0:13:8c:d9:66:4f:9f:39:
         ee:ea:64:80:33:ad:c3:94:28:3e:f7:51:a0:3d:41:46:62:3c:
         90:83:5f:cc:f5:f2:6f:7d:7c:06:ae:d1:5c:08:35:86:51:15:
         1f:c8:1d:0d:c5:29:6a:e3:06:bf:8f:14:1d:6d:14:12:0e:62:
         f4:23:31:6d:23:12:a6:bc:d5:75:98:ba:f2:31:05:23:66:56:
         d3:f1:3b:be:f1:35:6c:ab:0b:ca:09:2e:3b:05:ad:b7:3c:d7:
         b4:6d:95:c0:b6:4f:11:81:e4:e5:f1:e9:e3:36:fc:43:de:73:
         35:79:53:7e:fa:08:2a:f5:62:ad:de:4c:a0:27:48:ba:6c:57:
         15:52:40:ee
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIDDLD5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRh
YzVlYTE2YWQwN2QyOWQyZDI5ZGI4ZmJkNWIzODkzNTcxYmI2MzEwHhcNMjIwMjA4
MDMwMDAwWhcNMjQwMjA5MDMwMDAwWjAzMTEwLwYDVQQDEyg3N2QxZGY4MmNlZDk0
NWUwYjFkNjk1ZGUwZTFlOTg0YmNhYzFkNDIwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoQ1il1xMMxRvyQROfR/x8Yee9wGTVKa2ZgCz1MSUBCw6mWHw
itefkguaR/UureT13hTx3YFHfjGQlD9E9v/dxurlstses8ARUI9RfAyFZrxoO2aJ
3aVz+hg1G9vxfhkPZPdr1XikEkGDXT9aesnlz5aqIw42d4FoP9omFsMbjNJj83ww
DPAnikm1VMW0DbjexLFhCVhcErzjSmWNeenbcXhkeIr+iGJWfOyCI1zcKCPBoFc5
muAPL4oZPLBKhGaSG73PWxL/QNGkpG2N8+ZOT4tCfDIatV7qxubXOa/nMMg8yR+p
9037BLO2CmR942zPCppSawKa7XrmKdSNXzN6eQIDAQABo4ICezCCAncwHQYDVR0O
BBYEFFGPhGmHf5kJf0Wv/6bIIwozPRhaMB8GA1UdIwQYMBaAFDrG5K+IVuzPEeu+
ylyOUFpcGREmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGFjNWVh
MTZhZDA3ZDI5ZDJkMjlkYjhmYmQ1YjM4OTM1NzFiYjYzMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTJjNWE0NGMtZjIzZi00NDg4LTk3NmUtZjNiN2Q3
ODI4ZWJkLzc3ZDFkZjgyY2VkOTQ1ZTBiMWQ2OTVkZTBlMWU5ODRiY2FjMWQ0MjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMmM1YTQ0Yy1mMjNmLTQ0ODgtOTc2ZS1mM2I3
ZDc4MjhlYmQvNGFjNWVhMTZhZDA3ZDI5ZDJkMjlkYjhmYmQ1YjM4OTM1NzFiYjYz
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/BggrBgEFBQcBBwEB/wQw
MC4wLAQCAAEwJgMEAL5ocQMEAL5odTAMAwQCyAwkAwQAyAwuAwQAyAwwAwQAyAw4
MA0GCSqGSIb3DQEBCwUAA4IBAQAI/COwsInFBFyynSi1SpkPWQVi1M958c6JpCAp
6bhZ03CqIQWzYArlHuVa/O2WGIOKqqWrPgwkJGVkL6d+vnukl8M6HywGaelqcplD
oQYbZ1HnALlGijPSo4eLURyjRLG8qYB331ZKQ1J1U+wsk8W0GmHOF7Nt8BOM2WZP
nznu6mSAM63DlCg+91GgPUFGYjyQg1/M9fJvfXwGrtFcCDWGURUfyB0NxSlq4wa/
jxQdbRQSDmL0IzFtIxKmvNV1mLryMQUjZlbT8Tu+8TVsqwvKCS47Ba23PNe0bZXA
tk8RgeTl8enjNvxD3nM1eVN++ggq9WKt3kygJ0i6bFcVUkDu
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org